Traffic Trace Info
DumpFile: 201203302145.dump
FileSize: 2063.70MB
Id: 201203302145
StartTime: Fri Mar 30 21:45:01 2012
EndTime: Fri Mar 30 22:00:00 2012
TotalTime: 899.44 seconds
TotalCapSize: 1623.36MB CapLen: 96 bytes
# of packets: 28857022 (21593.34MB)
AvgRate: 201.39Mbps stddev:42.38M
IP flow (unique src/dst pair) Information
# of flows: 2104030 (avg. 13.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 3.3% 3.2% 2.9% 2.0% 2.0% 1.8% 1.7% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 1520044
Top 10 bandwidth usage (bytes/total in %):
15.2% 11.1% 6.9% 5.9% 5.9% 4.4% 4.3% 4.1% 4.0% 3.4%
# of IPv6 addresses: 6278
Top 10 bandwidth usage (bytes/total in %):
74.2% 74.2% 9.3% 3.7% 2.8% 2.7% 2.2% 1.9% 1.9% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302145.pktlen.png)
detailed numbers
[ 32- 63]: 5653113
[ 64- 127]: 6410898
[ 128- 255]: 1160439
[ 256- 511]: 758757
[ 512- 1023]: 767638
[ 1024- 2047]: 14106177
Protocol Breakdown
![[protocol breakdown chart]](201203302145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28857022 (100.00%) 22642256233 (100.00%) 784.64
ip 28593039 ( 99.09%) 22431999862 ( 99.07%) 784.53
tcp 21475623 ( 74.42%) 19797747500 ( 87.44%) 921.87
http(s) 10734542 ( 37.20%) 14585229377 ( 64.42%) 1358.72
http(c) 5337115 ( 18.50%) 565676786 ( 2.50%) 105.99
squid 139611 ( 0.48%) 49820522 ( 0.22%) 356.85
smtp 40968 ( 0.14%) 9137759 ( 0.04%) 223.05
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 8235 ( 0.03%) 765333 ( 0.00%) 92.94
pop3 1813 ( 0.01%) 803684 ( 0.00%) 443.29
imap 1435 ( 0.00%) 220407 ( 0.00%) 153.59
telnet 3283 ( 0.01%) 238205 ( 0.00%) 72.56
ssh 19899 ( 0.07%) 3711533 ( 0.02%) 186.52
dns 1690 ( 0.01%) 127152 ( 0.00%) 75.24
bgp 647 ( 0.00%) 113603 ( 0.00%) 175.58
napster 43 ( 0.00%) 7223 ( 0.00%) 167.98
realaud 11 ( 0.00%) 1226 ( 0.00%) 111.45
rtsp 6501 ( 0.02%) 9657203 ( 0.04%) 1485.50
icecast 615 ( 0.00%) 96359 ( 0.00%) 156.68
hotline 19 ( 0.00%) 1541 ( 0.00%) 81.11
other 5179190 ( 17.95%) 4572139213 ( 20.19%) 882.79
udp 3354053 ( 11.62%) 1302741211 ( 5.75%) 388.41
dns 430177 ( 1.49%) 91965804 ( 0.41%) 213.79
realaud 16 ( 0.00%) 2015 ( 0.00%) 125.94
halflif 32 ( 0.00%) 4216 ( 0.00%) 131.75
starcra 22 ( 0.00%) 2316 ( 0.00%) 105.27
everque 211 ( 0.00%) 39746 ( 0.00%) 188.37
unreal 24 ( 0.00%) 3187 ( 0.00%) 132.79
quake 32 ( 0.00%) 2895 ( 0.00%) 90.47
cuseeme 3 ( 0.00%) 266 ( 0.00%) 88.67
other 2923018 ( 10.13%) 1210633433 ( 5.35%) 414.17
icmp 2265725 ( 7.85%) 233907065 ( 1.03%) 103.24
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 62265 ( 0.22%) 46634910 ( 0.21%) 748.97
ip6 1415809 ( 4.91%) 1048077715 ( 4.63%) 740.27
pim 254 ( 0.00%) 15240 ( 0.00%) 60.00
other 19126 ( 0.07%) 2857061 ( 0.01%) 149.38
frag 1838 ( 0.01%) 1544714 ( 0.01%) 840.43
ip6 263983 ( 0.91%) 210256371 ( 0.93%) 796.48
tcp6 178474 ( 0.62%) 190170097 ( 0.84%) 1065.53
http(s) 13319 ( 0.05%) 17225617 ( 0.08%) 1293.31
http(c) 39972 ( 0.14%) 3453076 ( 0.02%) 86.39
squid 562 ( 0.00%) 510314 ( 0.00%) 908.03
smtp 192 ( 0.00%) 96304 ( 0.00%) 501.58
ftp 44 ( 0.00%) 5478 ( 0.00%) 124.50
dns 125 ( 0.00%) 19915 ( 0.00%) 159.32
bgp 93 ( 0.00%) 17125 ( 0.00%) 184.14
other 124167 ( 0.43%) 168842268 ( 0.75%) 1359.80
udp6 56244 ( 0.19%) 15149499 ( 0.07%) 269.35
dns 50940 ( 0.18%) 13619224 ( 0.06%) 267.36
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 4 ( 0.00%) 402 ( 0.00%) 100.50
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
other 5298 ( 0.02%) 1529646 ( 0.01%) 288.72
icmp6 27439 ( 0.10%) 3585401 ( 0.02%) 130.67
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1712 ( 0.01%) 1335882 ( 0.01%) 780.30
tcpdump file: 201203302145.dump.gz (663.21 MB)