Traffic Trace Info
DumpFile: 201203302345.dump
FileSize: 2210.53MB
Id: 201203302345
StartTime: Fri Mar 30 23:45:01 2012
EndTime: Sat Mar 31 00:00:00 2012
TotalTime: 899.58 seconds
TotalCapSize: 1738.57MB CapLen: 96 bytes
# of packets: 30929908 (23780.92MB)
AvgRate: 221.71Mbps stddev:39.76M
IP flow (unique src/dst pair) Information
# of flows: 1927185 (avg. 16.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.7% 3.1% 3.0% 2.5% 2.3% 2.2% 2.2% 2.1% 2.0%
IP address Information
# of IPv4 addresses: 1499885
Top 10 bandwidth usage (bytes/total in %):
18.0% 10.4% 9.9% 6.2% 5.9% 5.7% 4.9% 4.9% 4.5% 4.2%
# of IPv6 addresses: 6296
Top 10 bandwidth usage (bytes/total in %):
58.1% 58.1% 13.3% 11.1% 9.6% 7.1% 3.4% 3.0% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302345.pktlen.png)
detailed numbers
[ 32- 63]: 5892641
[ 64- 127]: 6651943
[ 128- 255]: 1171494
[ 256- 511]: 696991
[ 512- 1023]: 879467
[ 1024- 2047]: 15637372
Protocol Breakdown
![[protocol breakdown chart]](201203302345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30929908 (100.00%) 24936103379 (100.00%) 806.21
ip 30587925 ( 98.89%) 24673534979 ( 98.95%) 806.64
tcp 22436467 ( 72.54%) 20636689675 ( 82.76%) 919.78
http(s) 11196512 ( 36.20%) 15402423330 ( 61.77%) 1375.64
http(c) 5146130 ( 16.64%) 519725926 ( 2.08%) 100.99
squid 149404 ( 0.48%) 128380559 ( 0.51%) 859.28
smtp 52022 ( 0.17%) 15375919 ( 0.06%) 295.57
ftp 10161 ( 0.03%) 1945147 ( 0.01%) 191.43
pop3 1810 ( 0.01%) 593198 ( 0.00%) 327.73
imap 5827 ( 0.02%) 5428458 ( 0.02%) 931.60
telnet 60456 ( 0.20%) 4393995 ( 0.02%) 72.68
ssh 30445 ( 0.10%) 8132251 ( 0.03%) 267.11
dns 2288 ( 0.01%) 288913 ( 0.00%) 126.27
bgp 638 ( 0.00%) 124802 ( 0.00%) 195.61
napster 34 ( 0.00%) 3089 ( 0.00%) 90.85
realaud 331 ( 0.00%) 36662 ( 0.00%) 110.76
icecast 844 ( 0.00%) 125028 ( 0.00%) 148.14
hotline 12 ( 0.00%) 798 ( 0.00%) 66.50
other 5779550 ( 18.69%) 4549711420 ( 18.25%) 787.21
udp 4144077 ( 13.40%) 2210400812 ( 8.86%) 533.39
dns 340876 ( 1.10%) 70456733 ( 0.28%) 206.69
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 10 ( 0.00%) 1126 ( 0.00%) 112.60
halflif 43 ( 0.00%) 3872 ( 0.00%) 90.05
starcra 27 ( 0.00%) 2977 ( 0.00%) 110.26
everque 380 ( 0.00%) 95241 ( 0.00%) 250.63
unreal 7 ( 0.00%) 1536 ( 0.00%) 219.43
quake 37 ( 0.00%) 4705 ( 0.00%) 127.16
cuseeme 3 ( 0.00%) 231 ( 0.00%) 77.00
other 3801391 ( 12.29%) 2139728946 ( 8.58%) 562.88
icmp 2136330 ( 6.91%) 214918837 ( 0.86%) 100.60
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 1929 ( 0.01%) 626886 ( 0.00%) 324.98
ip6 1848823 ( 5.98%) 1607897059 ( 6.45%) 869.69
pim 236 ( 0.00%) 14160 ( 0.00%) 60.00
other 19879 ( 0.06%) 2968378 ( 0.01%) 149.32
frag 3595 ( 0.01%) 2879043 ( 0.01%) 800.85
ip6 341983 ( 1.11%) 262568400 ( 1.05%) 767.78
tcp6 249198 ( 0.81%) 233665250 ( 0.94%) 937.67
http(s) 12722 ( 0.04%) 15873470 ( 0.06%) 1247.72
http(c) 21869 ( 0.07%) 1905843 ( 0.01%) 87.15
smtp 160 ( 0.00%) 89357 ( 0.00%) 558.48
ftp 42 ( 0.00%) 5202 ( 0.00%) 123.86
dns 99 ( 0.00%) 14353 ( 0.00%) 144.98
bgp 93 ( 0.00%) 16885 ( 0.00%) 181.56
other 214213 ( 0.69%) 215760140 ( 0.87%) 1007.22
udp6 64001 ( 0.21%) 24846002 ( 0.10%) 388.21
dns 47699 ( 0.15%) 10988151 ( 0.04%) 230.36
realaud 1 ( 0.00%) 114 ( 0.00%) 114.00
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
other 16299 ( 0.05%) 13857522 ( 0.06%) 850.21
icmp6 28331 ( 0.09%) 3704093 ( 0.01%) 130.74
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 341 ( 0.00%) 337799 ( 0.00%) 990.61
tcpdump file: 201203302345.dump.gz (699.21 MB)