Traffic Trace Info
DumpFile: 201203302315.dump
FileSize: 2974.70MB
Id: 201203302315
StartTime: Fri Mar 30 23:15:00 2012
EndTime: Fri Mar 30 23:30:00 2012
TotalTime: 899.73 seconds
TotalCapSize: -1757.10MB CapLen: 96 bytes
# of packets: 41667261 (34151.86MB)
AvgRate: 318.44Mbps stddev:55.78M
IP flow (unique src/dst pair) Information
# of flows: 1805002 (avg. 23.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.8% 4.0% 3.1% 3.1% 2.7% 2.7% 2.2% 2.1% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1418358
Top 10 bandwidth usage (bytes/total in %):
16.7% 15.4% 15.4% 15.0% 7.8% 5.1% 4.6% 4.2% 4.2% 3.2%
# of IPv6 addresses: 6274
Top 10 bandwidth usage (bytes/total in %):
67.9% 54.7% 16.9% 12.6% 12.6% 6.1% 6.0% 5.7% 5.6% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302315.pktlen.png)
detailed numbers
[ 32- 63]: 8328674
[ 64- 127]: 7773985
[ 128- 255]: 1218599
[ 256- 511]: 733957
[ 512- 1023]: 1003075
[ 1024- 2047]: 22608971
Protocol Breakdown
![[protocol breakdown chart]](201203302315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41667261 (100.00%) 35810820517 (100.00%) 859.45
ip 41071586 ( 98.57%) 35128178396 ( 98.09%) 855.29
tcp 32610991 ( 78.27%) 31280000413 ( 87.35%) 959.19
http(s) 17558043 ( 42.14%) 24952216674 ( 69.68%) 1421.13
http(c) 7818527 ( 18.76%) 690285657 ( 1.93%) 88.29
squid 92804 ( 0.22%) 68938914 ( 0.19%) 742.84
smtp 41579 ( 0.10%) 9265058 ( 0.03%) 222.83
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 10168 ( 0.02%) 1029674 ( 0.00%) 101.27
pop3 5138 ( 0.01%) 661464 ( 0.00%) 128.74
imap 6691 ( 0.02%) 3196089 ( 0.01%) 477.67
telnet 2888 ( 0.01%) 212109 ( 0.00%) 73.44
ssh 47684 ( 0.11%) 20340685 ( 0.06%) 426.57
dns 1883 ( 0.00%) 141659 ( 0.00%) 75.23
bgp 619 ( 0.00%) 110926 ( 0.00%) 179.20
napster 34 ( 0.00%) 2362 ( 0.00%) 69.47
realaud 493 ( 0.00%) 52897 ( 0.00%) 107.30
rtsp 12638 ( 0.03%) 18813783 ( 0.05%) 1488.67
icecast 4785 ( 0.01%) 3177498 ( 0.01%) 664.05
hotline 165 ( 0.00%) 190237 ( 0.00%) 1152.95
other 7006840 ( 16.82%) 5511363979 ( 15.39%) 786.57
udp 4121246 ( 9.89%) 1835366595 ( 5.13%) 445.34
dns 365689 ( 0.88%) 74282699 ( 0.21%) 203.13
realaud 15 ( 0.00%) 1980 ( 0.00%) 132.00
halflif 92 ( 0.00%) 15556 ( 0.00%) 169.09
starcra 21 ( 0.00%) 2805 ( 0.00%) 133.57
everque 296 ( 0.00%) 74941 ( 0.00%) 253.18
unreal 164 ( 0.00%) 82287 ( 0.00%) 501.75
quake 107 ( 0.00%) 46265 ( 0.00%) 432.38
cuseeme 27 ( 0.00%) 19011 ( 0.00%) 704.11
other 3684996 ( 8.84%) 1756502806 ( 4.90%) 476.66
icmp 2170775 ( 5.21%) 219432768 ( 0.61%) 101.08
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 1732 ( 0.00%) 549304 ( 0.00%) 317.15
ip6 2144366 ( 5.15%) 1787297341 ( 4.99%) 833.49
pim 286 ( 0.00%) 17160 ( 0.00%) 60.00
other 22007 ( 0.05%) 5495753 ( 0.02%) 249.73
frag 176696 ( 0.42%) 135110661 ( 0.38%) 764.65
ip6 595675 ( 1.43%) 682642121 ( 1.91%) 1146.00
tcp6 481518 ( 1.16%) 622990044 ( 1.74%) 1293.80
http(s) 31784 ( 0.08%) 44330442 ( 0.12%) 1394.74
http(c) 13277 ( 0.03%) 1180926 ( 0.00%) 88.95
smtp 127 ( 0.00%) 64361 ( 0.00%) 506.78
dns 118 ( 0.00%) 22375 ( 0.00%) 189.62
bgp 94 ( 0.00%) 19757 ( 0.00%) 210.18
other 436118 ( 1.05%) 577372183 ( 1.61%) 1323.89
udp6 86206 ( 0.21%) 55722467 ( 0.16%) 646.39
dns 46735 ( 0.11%) 10554817 ( 0.03%) 225.84
starcra 1 ( 0.00%) 96 ( 0.00%) 96.00
everque 2 ( 0.00%) 208 ( 0.00%) 104.00
quake 2 ( 0.00%) 204 ( 0.00%) 102.00
other 39466 ( 0.09%) 45167142 ( 0.13%) 1144.46
icmp6 27470 ( 0.07%) 3578648 ( 0.01%) 130.27
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 365 ( 0.00%) 335166 ( 0.00%) 918.26
tcpdump file: 201203302315.dump.gz (914.11 MB)