Traffic Trace Info
DumpFile: 201101111400.dump
FileSize: 2666.07MB
Id: 201101111400
StartTime: Tue Jan 11 14:00:01 2011
EndTime: Tue Jan 11 14:15:00 2011
TotalTime: 899.38 seconds
TotalCapSize: -2009.11MB CapLen: 96 bytes
# of packets: 37955655 (24977.92MB)
AvgRate: 232.98Mbps stddev:26.19M
IP flow (unique src/dst pair) Information
# of flows: 957852 (avg. 39.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 471037
Top 10 bandwidth usage (bytes/total in %):
8.2% 5.9% 5.4% 4.3% 3.5% 2.9% 2.5% 1.7% 1.7% 1.7%
# of IPv6 addresses: 3656
Top 10 bandwidth usage (bytes/total in %):
53.0% 47.1% 5.4% 5.3% 4.2% 3.4% 3.3% 2.3% 2.1% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101111400.pktlen.png)
detailed numbers
[ 32- 63]: 8449863
[ 64- 127]: 9585903
[ 128- 255]: 1540551
[ 256- 511]: 1112078
[ 512- 1023]: 1124500
[ 1024- 2047]: 16142760
Protocol Breakdown
![[protocol breakdown chart]](201101111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37955655 (100.00%) 26191244076 (100.00%) 690.05
ip 37820738 ( 99.64%) 26142372836 ( 99.81%) 691.22
tcp 30321713 ( 79.89%) 22183904587 ( 84.70%) 731.62
http(s) 13376701 ( 35.24%) 17410453642 ( 66.47%) 1301.55
http(c) 9150141 ( 24.11%) 1586621344 ( 6.06%) 173.40
squid 308874 ( 0.81%) 155595955 ( 0.59%) 503.75
smtp 196500 ( 0.52%) 86564580 ( 0.33%) 440.53
nntp 2 ( 0.00%) 122 ( 0.00%) 61.00
ftp 46696 ( 0.12%) 7854829 ( 0.03%) 168.21
pop3 25104 ( 0.07%) 7991836 ( 0.03%) 318.35
imap 4652 ( 0.01%) 1894327 ( 0.01%) 407.21
telnet 14148 ( 0.04%) 1037169 ( 0.00%) 73.31
ssh 34327 ( 0.09%) 5392262 ( 0.02%) 157.09
dns 12104 ( 0.03%) 1073285 ( 0.00%) 88.67
bgp 576 ( 0.00%) 96140 ( 0.00%) 166.91
napster 179 ( 0.00%) 20035 ( 0.00%) 111.93
realaud 38 ( 0.00%) 3741 ( 0.00%) 98.45
rtsp 55463 ( 0.15%) 73534114 ( 0.28%) 1325.82
icecast 8184 ( 0.02%) 655399 ( 0.00%) 80.08
hotline 46 ( 0.00%) 3891 ( 0.00%) 84.59
other 7087977 ( 18.67%) 2845111856 ( 10.86%) 401.40
udp 6447236 ( 16.99%) 3718141491 ( 14.20%) 576.70
dns 947194 ( 2.50%) 146425502 ( 0.56%) 154.59
realaud 943 ( 0.00%) 57044 ( 0.00%) 60.49
halflif 79 ( 0.00%) 6997 ( 0.00%) 88.57
starcra 21 ( 0.00%) 3519 ( 0.00%) 167.57
everque 2816 ( 0.01%) 379588 ( 0.00%) 134.80
unreal 76 ( 0.00%) 12386 ( 0.00%) 162.97
quake 50 ( 0.00%) 4225 ( 0.00%) 84.50
cuseeme 5 ( 0.00%) 425 ( 0.00%) 85.00
other 5494332 ( 14.48%) 3571069113 ( 13.63%) 649.96
icmp 456342 ( 1.20%) 65052813 ( 0.25%) 142.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 77431 ( 0.20%) 21631926 ( 0.08%) 279.37
ip6 501542 ( 1.32%) 149604877 ( 0.57%) 298.29
other 16289 ( 0.04%) 4017872 ( 0.02%) 246.66
frag 6418 ( 0.02%) 4931241 ( 0.02%) 768.35
ip6 134917 ( 0.36%) 48871240 ( 0.19%) 362.23
tcp6 74230 ( 0.20%) 32569660 ( 0.12%) 438.77
http(s) 3217 ( 0.01%) 4151802 ( 0.02%) 1290.58
http(c) 18087 ( 0.05%) 1581737 ( 0.01%) 87.45
smtp 219 ( 0.00%) 84004 ( 0.00%) 383.58
ftp 2457 ( 0.01%) 240937 ( 0.00%) 98.06
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 948 ( 0.00%) 247957 ( 0.00%) 261.56
bgp 93 ( 0.00%) 17594 ( 0.00%) 189.18
other 49206 ( 0.13%) 26245299 ( 0.10%) 533.38
udp6 43871 ( 0.12%) 14354415 ( 0.05%) 327.20
dns 42003 ( 0.11%) 14060815 ( 0.05%) 334.76
everque 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 1866 ( 0.00%) 293372 ( 0.00%) 157.22
icmp6 16525 ( 0.04%) 1766512 ( 0.01%) 106.90
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 179 ( 0.00%) 165379 ( 0.00%) 923.91
tcpdump file: 201101111400.dump.gz (958.49 MB)