Traffic Trace Info
DumpFile: 201203302330.dump
FileSize: 2439.12MB
Id: 201203302330
StartTime: Fri Mar 30 23:30:00 2012
EndTime: Fri Mar 30 23:45:01 2012
TotalTime: 900.79 seconds
TotalCapSize: 1921.83MB CapLen: 96 bytes
# of packets: 33900896 (25999.32MB)
AvgRate: 242.13Mbps stddev:41.02M
IP flow (unique src/dst pair) Information
# of flows: 2052867 (avg. 16.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.8% 4.4% 4.2% 3.3% 2.8% 1.9% 1.6% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1481729
Top 10 bandwidth usage (bytes/total in %):
15.6% 12.2% 10.0% 7.7% 6.9% 6.1% 5.8% 5.0% 4.6% 4.6%
# of IPv6 addresses: 6221
Top 10 bandwidth usage (bytes/total in %):
70.9% 70.9% 7.4% 6.8% 5.1% 3.1% 3.1% 2.9% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302330.pktlen.png)
detailed numbers
[ 32- 63]: 6514826
[ 64- 127]: 7438658
[ 128- 255]: 1240753
[ 256- 511]: 705768
[ 512- 1023]: 900434
[ 1024- 2047]: 17100457
Protocol Breakdown
![[protocol breakdown chart]](201203302330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33900896 (100.00%) 27262264554 (100.00%) 804.18
ip 33594561 ( 99.10%) 27039625801 ( 99.18%) 804.88
tcp 25000923 ( 73.75%) 22987828767 ( 84.32%) 919.48
http(s) 12624085 ( 37.24%) 17569659875 ( 64.45%) 1391.76
http(c) 5907369 ( 17.43%) 569286044 ( 2.09%) 96.37
squid 114867 ( 0.34%) 84814584 ( 0.31%) 738.37
smtp 44198 ( 0.13%) 8523387 ( 0.03%) 192.85
ftp 9543 ( 0.03%) 2421865 ( 0.01%) 253.78
pop3 1398 ( 0.00%) 295019 ( 0.00%) 211.03
imap 6723 ( 0.02%) 6599188 ( 0.02%) 981.58
telnet 76988 ( 0.23%) 5509521 ( 0.02%) 71.56
ssh 66759 ( 0.20%) 16841254 ( 0.06%) 252.27
dns 2217 ( 0.01%) 230224 ( 0.00%) 103.84
bgp 629 ( 0.00%) 116801 ( 0.00%) 185.69
napster 30 ( 0.00%) 2756 ( 0.00%) 91.87
realaud 195 ( 0.00%) 22063 ( 0.00%) 113.14
icecast 757 ( 0.00%) 161632 ( 0.00%) 213.52
hotline 59 ( 0.00%) 4370 ( 0.00%) 74.07
other 6145105 ( 18.13%) 4723340124 ( 17.33%) 768.63
udp 4005948 ( 11.82%) 1810592276 ( 6.64%) 451.98
dns 358669 ( 1.06%) 73479286 ( 0.27%) 204.87
realaud 6 ( 0.00%) 530 ( 0.00%) 88.33
halflif 123 ( 0.00%) 16377 ( 0.00%) 133.15
starcra 19 ( 0.00%) 2695 ( 0.00%) 141.84
everque 575 ( 0.00%) 134300 ( 0.00%) 233.57
unreal 39 ( 0.00%) 5432 ( 0.00%) 139.28
quake 37 ( 0.00%) 11356 ( 0.00%) 306.92
cuseeme 3 ( 0.00%) 263 ( 0.00%) 87.67
other 3643297 ( 10.75%) 1736691295 ( 6.37%) 476.68
icmp 2172792 ( 6.41%) 215976910 ( 0.79%) 99.40
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2104 ( 0.01%) 719536 ( 0.00%) 341.98
ip6 2389599 ( 7.05%) 2020660105 ( 7.41%) 845.61
pim 290 ( 0.00%) 17400 ( 0.00%) 60.00
other 22720 ( 0.07%) 3811537 ( 0.01%) 167.76
frag 7396 ( 0.02%) 5738561 ( 0.02%) 775.90
ip6 306335 ( 0.90%) 222638753 ( 0.82%) 726.78
tcp6 214549 ( 0.63%) 191684375 ( 0.70%) 893.43
http(s) 15784 ( 0.05%) 18995604 ( 0.07%) 1203.47
http(c) 17751 ( 0.05%) 2133502 ( 0.01%) 120.19
smtp 99 ( 0.00%) 38193 ( 0.00%) 385.79
ftp 24 ( 0.00%) 1890 ( 0.00%) 78.75
dns 260 ( 0.00%) 54173 ( 0.00%) 208.36
bgp 91 ( 0.00%) 16310 ( 0.00%) 179.23
other 180540 ( 0.53%) 170444703 ( 0.63%) 944.08
udp6 64204 ( 0.19%) 26983076 ( 0.10%) 420.27
dns 48035 ( 0.14%) 10741259 ( 0.04%) 223.61
halflif 6 ( 0.00%) 552 ( 0.00%) 92.00
quake 2 ( 0.00%) 213 ( 0.00%) 106.50
other 16161 ( 0.05%) 16241052 ( 0.06%) 1004.95
icmp6 27149 ( 0.08%) 3627502 ( 0.01%) 133.61
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 320 ( 0.00%) 328426 ( 0.00%) 1026.33
tcpdump file: 201203302330.dump.gz (764.81 MB)