Traffic Trace Info
DumpFile: 201203301400.dump
FileSize: 2749.07MB
Id: 201203301400
StartTime: Fri Mar 30 14:00:00 2012
EndTime: Fri Mar 30 14:15:01 2012
TotalTime: 900.15 seconds
TotalCapSize: -1920.48MB CapLen: 96 bytes
# of packets: 37587830 (30041.85MB)
AvgRate: 279.96Mbps stddev:49.38M
IP flow (unique src/dst pair) Information
# of flows: 2194343 (avg. 17.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 3.7% 3.3% 2.6% 2.4% 2.1% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1596051
Top 10 bandwidth usage (bytes/total in %):
8.2% 8.1% 6.3% 5.9% 5.2% 5.0% 4.2% 3.7% 3.2% 2.9%
# of IPv6 addresses: 6408
Top 10 bandwidth usage (bytes/total in %):
96.6% 85.0% 11.2% 1.5% 1.4% 0.9% 0.9% 0.3% 0.2% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301400.pktlen.png)
detailed numbers
[ 32- 63]: 7435344
[ 64- 127]: 7135047
[ 128- 255]: 999589
[ 256- 511]: 1274055
[ 512- 1023]: 761965
[ 1024- 2047]: 19981830
Protocol Breakdown
![[protocol breakdown chart]](201203301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37587830 (100.00%) 31501160646 (100.00%) 838.07
ip 35164363 ( 93.55%) 28236881761 ( 89.64%) 803.00
tcp 26925744 ( 71.63%) 24126651346 ( 76.59%) 896.04
http(s) 14035046 ( 37.34%) 19224899584 ( 61.03%) 1369.78
http(c) 7241582 ( 19.27%) 1400924646 ( 4.45%) 193.46
squid 29919 ( 0.08%) 17736607 ( 0.06%) 592.82
smtp 49277 ( 0.13%) 16346268 ( 0.05%) 331.72
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 10661 ( 0.03%) 944135 ( 0.00%) 88.56
pop3 3151 ( 0.01%) 1183691 ( 0.00%) 375.66
imap 3664 ( 0.01%) 1559865 ( 0.00%) 425.73
telnet 4979 ( 0.01%) 350886 ( 0.00%) 70.47
ssh 168374 ( 0.45%) 78411653 ( 0.25%) 465.70
dns 11301 ( 0.03%) 8884475 ( 0.03%) 786.17
bgp 633 ( 0.00%) 115568 ( 0.00%) 182.57
napster 12 ( 0.00%) 784 ( 0.00%) 65.33
realaud 17 ( 0.00%) 1046 ( 0.00%) 61.53
rtsp 8908 ( 0.02%) 11567038 ( 0.04%) 1298.50
icecast 26524 ( 0.07%) 15945647 ( 0.05%) 601.18
hotline 10 ( 0.00%) 618 ( 0.00%) 61.80
other 5331683 ( 14.18%) 3347778655 ( 10.63%) 627.90
udp 4368409 ( 11.62%) 2143594409 ( 6.80%) 490.70
dns 525626 ( 1.40%) 128216797 ( 0.41%) 243.93
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 12 ( 0.00%) 5628 ( 0.00%) 469.00
halflif 36 ( 0.00%) 7260 ( 0.00%) 201.67
starcra 27 ( 0.00%) 2746 ( 0.00%) 101.70
everque 370 ( 0.00%) 64725 ( 0.00%) 174.93
unreal 31 ( 0.00%) 4225 ( 0.00%) 136.29
quake 18 ( 0.00%) 2077 ( 0.00%) 115.39
cuseeme 1 ( 0.00%) 119 ( 0.00%) 119.00
other 3377734 ( 8.99%) 1987360119 ( 6.31%) 588.37
icmp 1763684 ( 4.69%) 153337626 ( 0.49%) 86.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10247 ( 0.03%) 3931018 ( 0.01%) 383.63
ip6 2080089 ( 5.53%) 1806822012 ( 5.74%) 868.63
pim 250 ( 0.00%) 15000 ( 0.00%) 60.00
other 15755 ( 0.04%) 2511080 ( 0.01%) 159.38
frag 1002983 ( 2.67%) 765287536 ( 2.43%) 763.01
ip6 2423467 ( 6.45%) 3264278885 ( 10.36%) 1346.95
tcp6 2260921 ( 6.02%) 3194711063 ( 10.14%) 1413.01
http(s) 14947 ( 0.04%) 18357170 ( 0.06%) 1228.15
http(c) 27731 ( 0.07%) 2449126 ( 0.01%) 88.32
smtp 435 ( 0.00%) 146825 ( 0.00%) 337.53
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 383 ( 0.00%) 78283 ( 0.00%) 204.39
bgp 88 ( 0.00%) 13954 ( 0.00%) 158.57
other 2217320 ( 5.90%) 3173664100 ( 10.07%) 1431.31
udp6 70531 ( 0.19%) 19723044 ( 0.06%) 279.64
dns 63680 ( 0.17%) 18033119 ( 0.06%) 283.18
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 2 ( 0.00%) 219 ( 0.00%) 109.50
other 6848 ( 0.02%) 1689597 ( 0.01%) 246.73
icmp6 26388 ( 0.07%) 3612609 ( 0.01%) 136.90
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 65515 ( 0.17%) 46216913 ( 0.15%) 705.44
tcpdump file: 201203301400.dump.gz (828.24 MB)