Traffic Trace Info
DumpFile: 201203302115.dump
FileSize: 2664.59MB
Id: 201203302115
StartTime: Fri Mar 30 21:15:00 2012
EndTime: Fri Mar 30 21:30:00 2012
TotalTime: 899.61 seconds
TotalCapSize: -2003.83MB CapLen: 96 bytes
# of packets: 37513603 (29996.96MB)
AvgRate: 279.76Mbps stddev:77.51M
IP flow (unique src/dst pair) Information
# of flows: 1973068 (avg. 19.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.4% 6.6% 3.0% 2.4% 2.1% 2.0% 1.9% 1.6% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1514268
Top 10 bandwidth usage (bytes/total in %):
18.4% 16.2% 11.8% 9.9% 9.2% 9.1% 8.3% 3.3% 3.2% 3.0%
# of IPv6 addresses: 6220
Top 10 bandwidth usage (bytes/total in %):
80.3% 71.7% 16.7% 16.7% 8.2% 0.5% 0.3% 0.3% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302115.pktlen.png)
detailed numbers
[ 32- 63]: 6902777
[ 64- 127]: 7812315
[ 128- 255]: 1286627
[ 256- 511]: 730532
[ 512- 1023]: 735175
[ 1024- 2047]: 20046177
Protocol Breakdown
![[protocol breakdown chart]](201203302115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37513603 (100.00%) 31454097267 (100.00%) 838.47
ip 36732729 ( 97.92%) 30518046519 ( 97.02%) 830.81
tcp 28722810 ( 76.57%) 27247249880 ( 86.63%) 948.63
http(s) 13248460 ( 35.32%) 18368702786 ( 58.40%) 1386.48
http(c) 6604478 ( 17.61%) 738429785 ( 2.35%) 111.81
squid 72985 ( 0.19%) 55726631 ( 0.18%) 763.54
smtp 45784 ( 0.12%) 15285309 ( 0.05%) 333.86
ftp 7878 ( 0.02%) 776013 ( 0.00%) 98.50
pop3 1522 ( 0.00%) 358729 ( 0.00%) 235.70
imap 3069 ( 0.01%) 2489871 ( 0.01%) 811.30
telnet 6236 ( 0.02%) 426611 ( 0.00%) 68.41
ssh 53782 ( 0.14%) 8287953 ( 0.03%) 154.10
dns 1947 ( 0.01%) 148043 ( 0.00%) 76.04
bgp 611 ( 0.00%) 108013 ( 0.00%) 176.78
napster 84 ( 0.00%) 13986 ( 0.00%) 166.50
realaud 36 ( 0.00%) 4257 ( 0.00%) 118.25
rtsp 27073 ( 0.07%) 40344564 ( 0.13%) 1490.21
icecast 805 ( 0.00%) 427855 ( 0.00%) 531.50
hotline 51 ( 0.00%) 5095 ( 0.00%) 99.90
other 8648009 ( 23.05%) 8015714379 ( 25.48%) 926.89
udp 4564915 ( 12.17%) 2188242567 ( 6.96%) 479.36
dns 395741 ( 1.05%) 84219046 ( 0.27%) 212.81
realaud 31 ( 0.00%) 4165 ( 0.00%) 134.35
halflif 22 ( 0.00%) 1864 ( 0.00%) 84.73
starcra 14 ( 0.00%) 2141 ( 0.00%) 152.93
everque 1725 ( 0.00%) 1027341 ( 0.00%) 595.56
unreal 39 ( 0.00%) 5137 ( 0.00%) 131.72
quake 21 ( 0.00%) 4346 ( 0.00%) 206.95
cuseeme 25 ( 0.00%) 7534 ( 0.00%) 301.36
other 4166925 ( 11.11%) 2102905897 ( 6.69%) 504.67
icmp 2206434 ( 5.88%) 230453897 ( 0.73%) 104.45
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1725 ( 0.00%) 547838 ( 0.00%) 317.59
ip6 1219279 ( 3.25%) 848429548 ( 2.70%) 695.85
pim 264 ( 0.00%) 15840 ( 0.00%) 60.00
other 17118 ( 0.05%) 3087789 ( 0.01%) 180.38
frag 1560 ( 0.00%) 1205951 ( 0.00%) 773.05
ip6 780874 ( 2.08%) 936050748 ( 2.98%) 1198.72
tcp6 699307 ( 1.86%) 919955103 ( 2.92%) 1315.52
http(s) 64807 ( 0.17%) 82313587 ( 0.26%) 1270.13
http(c) 49670 ( 0.13%) 4427513 ( 0.01%) 89.14
smtp 71 ( 0.00%) 29533 ( 0.00%) 415.96
ftp 63 ( 0.00%) 11236 ( 0.00%) 178.35
dns 107 ( 0.00%) 14834 ( 0.00%) 138.64
bgp 90 ( 0.00%) 15026 ( 0.00%) 166.96
other 584499 ( 1.56%) 833143374 ( 2.65%) 1425.40
udp6 52275 ( 0.14%) 12029068 ( 0.04%) 230.11
dns 49018 ( 0.13%) 11540773 ( 0.04%) 235.44
halflif 2 ( 0.00%) 214 ( 0.00%) 107.00
everque 4 ( 0.00%) 423 ( 0.00%) 105.75
quake 3 ( 0.00%) 338 ( 0.00%) 112.67
cuseeme 1 ( 0.00%) 114 ( 0.00%) 114.00
other 3247 ( 0.01%) 487206 ( 0.00%) 150.05
icmp6 28827 ( 0.08%) 3722556 ( 0.01%) 129.13
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 351 ( 0.00%) 328529 ( 0.00%) 935.98
tcpdump file: 201203302115.dump.gz (822.53 MB)