Traffic Trace Info
DumpFile: 201203302300.dump
FileSize: 2761.82MB
Id: 201203302300
StartTime: Fri Mar 30 23:00:01 2012
EndTime: Fri Mar 30 23:15:00 2012
TotalTime: 899.67 seconds
TotalCapSize: -1918.67MB CapLen: 96 bytes
# of packets: 38304965 (30426.78MB)
AvgRate: 283.70Mbps stddev:51.77M
IP flow (unique src/dst pair) Information
# of flows: 2015249 (avg. 19.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.8% 3.4% 3.2% 2.9% 2.5% 2.4% 2.3% 2.3% 2.1%
IP address Information
# of IPv4 addresses: 1527405
Top 10 bandwidth usage (bytes/total in %):
20.0% 13.8% 8.6% 5.2% 4.7% 4.7% 4.5% 4.3% 3.9% 3.8%
# of IPv6 addresses: 6333
Top 10 bandwidth usage (bytes/total in %):
80.0% 76.6% 18.4% 11.6% 1.5% 1.3% 1.2% 0.9% 0.8% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302300.pktlen.png)
detailed numbers
[ 32- 63]: 7219803
[ 64- 127]: 7866785
[ 128- 255]: 1318478
[ 256- 511]: 753103
[ 512- 1023]: 1011763
[ 1024- 2047]: 20135033
Protocol Breakdown
![[protocol breakdown chart]](201203302300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38304965 (100.00%) 31904794194 (100.00%) 832.92
ip 37635627 ( 98.25%) 31229060773 ( 97.88%) 829.77
tcp 28127985 ( 73.43%) 26604806673 ( 83.39%) 945.85
http(s) 14346292 ( 37.45%) 20138109341 ( 63.12%) 1403.72
http(c) 5905842 ( 15.42%) 569292292 ( 1.78%) 96.39
squid 102376 ( 0.27%) 85969281 ( 0.27%) 839.74
smtp 39229 ( 0.10%) 10303766 ( 0.03%) 262.66
ftp 6646 ( 0.02%) 666507 ( 0.00%) 100.29
pop3 11107 ( 0.03%) 1149266 ( 0.00%) 103.47
imap 2487 ( 0.01%) 1083101 ( 0.00%) 435.51
telnet 38130 ( 0.10%) 2794532 ( 0.01%) 73.29
ssh 137831 ( 0.36%) 27685196 ( 0.09%) 200.86
dns 1950 ( 0.01%) 148550 ( 0.00%) 76.18
bgp 661 ( 0.00%) 141074 ( 0.00%) 213.43
napster 23 ( 0.00%) 1474 ( 0.00%) 64.09
realaud 121 ( 0.00%) 10466 ( 0.00%) 86.50
rtsp 27029 ( 0.07%) 40278972 ( 0.13%) 1490.21
icecast 673 ( 0.00%) 101116 ( 0.00%) 150.25
hotline 10 ( 0.00%) 662 ( 0.00%) 66.20
other 7507578 ( 19.60%) 5727071077 ( 17.95%) 762.84
udp 4507576 ( 11.77%) 2097600459 ( 6.57%) 465.35
dns 343303 ( 0.90%) 70047480 ( 0.22%) 204.04
realaud 8 ( 0.00%) 893 ( 0.00%) 111.62
halflif 39 ( 0.00%) 4691 ( 0.00%) 120.28
starcra 25 ( 0.00%) 3715 ( 0.00%) 148.60
everque 235 ( 0.00%) 53062 ( 0.00%) 225.80
unreal 197 ( 0.00%) 65085 ( 0.00%) 330.38
quake 11 ( 0.00%) 2276 ( 0.00%) 206.91
cuseeme 2 ( 0.00%) 180 ( 0.00%) 90.00
other 4011866 ( 10.47%) 2018268110 ( 6.33%) 503.07
icmp 2202484 ( 5.75%) 221390774 ( 0.69%) 100.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2024 ( 0.01%) 699408 ( 0.00%) 345.56
ip6 2774811 ( 7.24%) 2301163076 ( 7.21%) 829.30
pim 243 ( 0.00%) 14580 ( 0.00%) 60.00
other 20319 ( 0.05%) 3366533 ( 0.01%) 165.68
frag 308329 ( 0.80%) 235447747 ( 0.74%) 763.63
ip6 669338 ( 1.75%) 675733421 ( 2.12%) 1009.55
tcp6 580848 ( 1.52%) 651149130 ( 2.04%) 1121.03
http(s) 8563 ( 0.02%) 8793537 ( 0.03%) 1026.92
http(c) 134081 ( 0.35%) 11759535 ( 0.04%) 87.70
smtp 170 ( 0.00%) 97397 ( 0.00%) 572.92
dns 229 ( 0.00%) 49736 ( 0.00%) 217.19
bgp 94 ( 0.00%) 17241 ( 0.00%) 183.41
other 437711 ( 1.14%) 630431684 ( 1.98%) 1440.29
udp6 60149 ( 0.16%) 20443802 ( 0.06%) 339.89
dns 49021 ( 0.13%) 11820729 ( 0.04%) 241.14
starcra 1 ( 0.00%) 119 ( 0.00%) 119.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 11126 ( 0.03%) 8622847 ( 0.03%) 775.02
icmp6 27741 ( 0.07%) 3639141 ( 0.01%) 131.18
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 488 ( 0.00%) 486092 ( 0.00%) 996.09
tcpdump file: 201203302300.dump.gz (852.31 MB)