Traffic Trace Info
DumpFile: 201203302245.dump
FileSize: 2819.83MB
Id: 201203302245
StartTime: Fri Mar 30 22:45:00 2012
EndTime: Fri Mar 30 23:00:01 2012
TotalTime: 900.84 seconds
TotalCapSize: -1874.35MB CapLen: 96 bytes
# of packets: 39202125 (31402.61MB)
AvgRate: 292.43Mbps stddev:51.76M
IP flow (unique src/dst pair) Information
# of flows: 1924058 (avg. 20.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.3% 4.1% 3.9% 3.2% 2.3% 2.0% 2.0% 1.9% 1.8%
IP address Information
# of IPv4 addresses: 1484690
Top 10 bandwidth usage (bytes/total in %):
21.4% 20.7% 8.1% 7.7% 6.9% 4.5% 4.5% 4.2% 4.0% 3.9%
# of IPv6 addresses: 6190
Top 10 bandwidth usage (bytes/total in %):
87.4% 75.0% 18.2% 4.7% 2.1% 1.3% 1.0% 0.9% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302245.pktlen.png)
detailed numbers
[ 32- 63]: 7492829
[ 64- 127]: 7855367
[ 128- 255]: 1274484
[ 256- 511]: 813621
[ 512- 1023]: 1019889
[ 1024- 2047]: 20745935
Protocol Breakdown
![[protocol breakdown chart]](201203302245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39202125 (100.00%) 32928027948 (100.00%) 839.96
ip 38422347 ( 98.01%) 32334359162 ( 98.20%) 841.55
tcp 30204246 ( 77.05%) 28862098278 ( 87.65%) 955.56
http(s) 15136951 ( 38.61%) 21104270313 ( 64.09%) 1394.22
http(c) 6380089 ( 16.27%) 658282506 ( 2.00%) 103.18
squid 60388 ( 0.15%) 38642876 ( 0.12%) 639.91
smtp 38489 ( 0.10%) 9796733 ( 0.03%) 254.53
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 6007 ( 0.02%) 597417 ( 0.00%) 99.45
pop3 2836 ( 0.01%) 611706 ( 0.00%) 215.69
imap 1556 ( 0.00%) 164645 ( 0.00%) 105.81
telnet 1917 ( 0.00%) 140495 ( 0.00%) 73.29
ssh 58637 ( 0.15%) 26197746 ( 0.08%) 446.78
dns 1980 ( 0.01%) 165460 ( 0.00%) 83.57
bgp 637 ( 0.00%) 117370 ( 0.00%) 184.25
napster 226 ( 0.00%) 15153 ( 0.00%) 67.05
realaud 26 ( 0.00%) 2521 ( 0.00%) 96.96
rtsp 27078 ( 0.07%) 40350753 ( 0.12%) 1490.17
icecast 769 ( 0.00%) 113271 ( 0.00%) 147.30
hotline 20 ( 0.00%) 1684 ( 0.00%) 84.20
other 8486628 ( 21.65%) 6982626881 ( 21.21%) 822.78
udp 3709359 ( 9.46%) 1638791067 ( 4.98%) 441.80
dns 358249 ( 0.91%) 74533488 ( 0.23%) 208.05
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 16 ( 0.00%) 2100 ( 0.00%) 131.25
halflif 32 ( 0.00%) 2747 ( 0.00%) 85.84
starcra 24 ( 0.00%) 2584 ( 0.00%) 107.67
everque 214 ( 0.00%) 43942 ( 0.00%) 205.34
unreal 145 ( 0.00%) 52468 ( 0.00%) 361.85
quake 39 ( 0.00%) 7708 ( 0.00%) 197.64
cuseeme 3 ( 0.00%) 268 ( 0.00%) 89.33
other 3350282 ( 8.55%) 1564067396 ( 4.75%) 466.85
icmp 2202939 ( 5.62%) 231333929 ( 0.70%) 105.01
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 1960 ( 0.00%) 667648 ( 0.00%) 340.64
ip6 2285117 ( 5.83%) 1598702477 ( 4.86%) 699.62
pim 253 ( 0.00%) 15180 ( 0.00%) 60.00
other 18290 ( 0.05%) 2731521 ( 0.01%) 149.35
frag 1898 ( 0.00%) 1581418 ( 0.00%) 833.20
ip6 779778 ( 1.99%) 593668786 ( 1.80%) 761.33
tcp6 698753 ( 1.78%) 577448939 ( 1.75%) 826.40
http(s) 9321 ( 0.02%) 10707049 ( 0.03%) 1148.70
http(c) 326178 ( 0.83%) 28641791 ( 0.09%) 87.81
smtp 233 ( 0.00%) 106501 ( 0.00%) 457.09
dns 99 ( 0.00%) 22982 ( 0.00%) 232.14
bgp 96 ( 0.00%) 20688 ( 0.00%) 215.50
other 362826 ( 0.93%) 537949928 ( 1.63%) 1482.67
udp6 54788 ( 0.14%) 12363355 ( 0.04%) 225.66
dns 48082 ( 0.12%) 11527057 ( 0.04%) 239.74
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 2 ( 0.00%) 230 ( 0.00%) 115.00
other 6702 ( 0.02%) 835856 ( 0.00%) 124.72
icmp6 25718 ( 0.07%) 3455663 ( 0.01%) 134.37
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 404 ( 0.00%) 385201 ( 0.00%) 953.47
tcpdump file: 201203302245.dump.gz (875.49 MB)