Traffic Trace Info
DumpFile: 201203302215.dump
FileSize: 2505.03MB
Id: 201203302215
StartTime: Fri Mar 30 22:15:01 2012
EndTime: Fri Mar 30 22:30:00 2012
TotalTime: 899.48 seconds
TotalCapSize: 1974.87MB CapLen: 96 bytes
# of packets: 34743936 (27841.72MB)
AvgRate: 259.73Mbps stddev:53.89M
IP flow (unique src/dst pair) Information
# of flows: 2020579 (avg. 17.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.9% 3.1% 3.0% 2.6% 2.4% 1.9% 1.8% 1.7% 1.4%
IP address Information
# of IPv4 addresses: 1550674
Top 10 bandwidth usage (bytes/total in %):
18.6% 16.9% 8.1% 5.7% 4.6% 4.6% 4.1% 3.6% 3.3% 3.3%
# of IPv6 addresses: 6206
Top 10 bandwidth usage (bytes/total in %):
59.4% 45.9% 27.5% 27.5% 15.3% 7.9% 7.9% 0.8% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302215.pktlen.png)
detailed numbers
[ 32- 63]: 6500070
[ 64- 127]: 7085128
[ 128- 255]: 1241310
[ 256- 511]: 772930
[ 512- 1023]: 768761
[ 1024- 2047]: 18375737
Protocol Breakdown
![[protocol breakdown chart]](201203302215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34743936 (100.00%) 29194162924 (100.00%) 840.27
ip 33992321 ( 97.84%) 28254955743 ( 96.78%) 831.22
tcp 26557368 ( 76.44%) 25486752567 ( 87.30%) 959.69
http(s) 13635948 ( 39.25%) 18927731715 ( 64.83%) 1388.08
http(c) 6034677 ( 17.37%) 788299291 ( 2.70%) 130.63
squid 74821 ( 0.22%) 50183057 ( 0.17%) 670.71
smtp 43064 ( 0.12%) 8979183 ( 0.03%) 208.51
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 14389 ( 0.04%) 1505068 ( 0.01%) 104.60
pop3 7119 ( 0.02%) 934777 ( 0.00%) 131.31
imap 2226 ( 0.01%) 870260 ( 0.00%) 390.95
telnet 2688 ( 0.01%) 197519 ( 0.00%) 73.48
ssh 34153 ( 0.10%) 14187318 ( 0.05%) 415.40
dns 1678 ( 0.00%) 127969 ( 0.00%) 76.26
bgp 659 ( 0.00%) 132926 ( 0.00%) 201.71
napster 623 ( 0.00%) 55087 ( 0.00%) 88.42
realaud 60 ( 0.00%) 4091 ( 0.00%) 68.18
rtsp 27026 ( 0.08%) 40274767 ( 0.14%) 1490.22
icecast 782 ( 0.00%) 109485 ( 0.00%) 140.01
other 6677448 ( 19.22%) 5653159620 ( 19.36%) 846.60
udp 3577836 ( 10.30%) 1449561920 ( 4.97%) 405.15
dns 399022 ( 1.15%) 83664783 ( 0.29%) 209.67
realaud 3 ( 0.00%) 243 ( 0.00%) 81.00
halflif 12 ( 0.00%) 960 ( 0.00%) 80.00
starcra 51 ( 0.00%) 7418 ( 0.00%) 145.45
everque 202 ( 0.00%) 46466 ( 0.00%) 230.03
unreal 183 ( 0.00%) 64020 ( 0.00%) 349.84
quake 44 ( 0.00%) 5021 ( 0.00%) 114.11
cuseeme 4 ( 0.00%) 469 ( 0.00%) 117.25
other 3147089 ( 9.06%) 1363867280 ( 4.67%) 433.37
icmp 2220609 ( 6.39%) 233939124 ( 0.80%) 105.35
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2121 ( 0.01%) 705350 ( 0.00%) 332.56
ip6 1613168 ( 4.64%) 1079291508 ( 3.70%) 669.05
pim 246 ( 0.00%) 14760 ( 0.00%) 60.00
other 20789 ( 0.06%) 4671354 ( 0.02%) 224.70
frag 67377 ( 0.19%) 51462284 ( 0.18%) 763.80
ip6 751615 ( 2.16%) 939207181 ( 3.22%) 1249.59
tcp6 672669 ( 1.94%) 923458915 ( 3.16%) 1372.83
http(s) 54561 ( 0.16%) 80724950 ( 0.28%) 1479.54
http(c) 55553 ( 0.16%) 4974722 ( 0.02%) 89.55
smtp 239 ( 0.00%) 117610 ( 0.00%) 492.09
dns 78 ( 0.00%) 12527 ( 0.00%) 160.60
bgp 90 ( 0.00%) 14796 ( 0.00%) 164.40
icecast 3 ( 0.00%) 254 ( 0.00%) 84.67
other 562145 ( 1.62%) 837614056 ( 2.87%) 1490.03
udp6 51062 ( 0.15%) 11609374 ( 0.04%) 227.36
dns 47191 ( 0.14%) 10992023 ( 0.04%) 232.93
realaud 2 ( 0.00%) 219 ( 0.00%) 109.50
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
starcra 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 3865 ( 0.01%) 616680 ( 0.00%) 159.55
icmp6 27234 ( 0.08%) 3663026 ( 0.01%) 134.50
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 533 ( 0.00%) 459970 ( 0.00%) 862.98
tcpdump file: 201203302215.dump.gz (777.82 MB)