Traffic Trace Info
DumpFile: 201101131400.dump
FileSize: 3004.74MB
Id: 201101131400
StartTime: Thu Jan 13 14:00:00 2011
EndTime: Thu Jan 13 14:15:01 2011
TotalTime: 900.14 seconds
TotalCapSize: -1745.09MB CapLen: 96 bytes
# of packets: 42848185 (25778.10MB)
AvgRate: 240.24Mbps stddev:21.47M
IP flow (unique src/dst pair) Information
# of flows: 1407007 (avg. 30.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.2% 1.0% 0.9% 0.9% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 679246
Top 10 bandwidth usage (bytes/total in %):
9.3% 6.9% 6.7% 3.1% 3.0% 1.9% 1.8% 1.6% 1.6% 1.6%
# of IPv6 addresses: 3613
Top 10 bandwidth usage (bytes/total in %):
85.5% 72.7% 13.3% 4.6% 4.6% 2.8% 2.8% 0.8% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101131400.pktlen.png)
detailed numbers
[ 32- 63]: 11849445
[ 64- 127]: 10834706
[ 128- 255]: 1561350
[ 256- 511]: 1118927
[ 512- 1023]: 950638
[ 1024- 2047]: 16533119
Protocol Breakdown
![[protocol breakdown chart]](201101131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42848185 (100.00%) 27030294293 (100.00%) 630.84
ip 42534035 ( 99.27%) 26692103954 ( 98.75%) 627.55
tcp 32980347 ( 76.97%) 22760126351 ( 84.20%) 690.11
http(s) 13475811 ( 31.45%) 17387167827 ( 64.32%) 1290.25
http(c) 9343819 ( 21.81%) 1797116385 ( 6.65%) 192.33
squid 342960 ( 0.80%) 106525416 ( 0.39%) 310.61
smtp 267877 ( 0.63%) 135035771 ( 0.50%) 504.10
nntp 4 ( 0.00%) 254 ( 0.00%) 63.50
ftp 43317 ( 0.10%) 6492206 ( 0.02%) 149.88
pop3 32196 ( 0.08%) 19236693 ( 0.07%) 597.49
imap 4633 ( 0.01%) 1114635 ( 0.00%) 240.59
telnet 1103 ( 0.00%) 74230 ( 0.00%) 67.30
ssh 172256 ( 0.40%) 23579777 ( 0.09%) 136.89
dns 12845 ( 0.03%) 1130544 ( 0.00%) 88.01
bgp 596 ( 0.00%) 118812 ( 0.00%) 199.35
napster 464 ( 0.00%) 33614 ( 0.00%) 72.44
realaud 147 ( 0.00%) 16976 ( 0.00%) 115.48
rtsp 18520 ( 0.04%) 19663285 ( 0.07%) 1061.73
icecast 4770 ( 0.01%) 370443 ( 0.00%) 77.66
hotline 49 ( 0.00%) 3228 ( 0.00%) 65.88
other 9258891 ( 21.61%) 3262440915 ( 12.07%) 352.36
udp 8330074 ( 19.44%) 3588556505 ( 13.28%) 430.80
dns 922602 ( 2.15%) 145312432 ( 0.54%) 157.50
realaud 1824 ( 0.00%) 112496 ( 0.00%) 61.68
halflif 53 ( 0.00%) 8867 ( 0.00%) 167.30
starcra 103 ( 0.00%) 21196 ( 0.00%) 205.79
everque 1229 ( 0.00%) 206756 ( 0.00%) 168.23
unreal 183 ( 0.00%) 37744 ( 0.00%) 206.25
quake 23 ( 0.00%) 3022 ( 0.00%) 131.39
cuseeme 71 ( 0.00%) 7980 ( 0.00%) 112.39
other 7403841 ( 17.28%) 3442730957 ( 12.74%) 464.99
icmp 598241 ( 1.40%) 77192765 ( 0.29%) 129.03
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2569 ( 0.01%) 1117486 ( 0.00%) 434.99
ip6 599899 ( 1.40%) 259065353 ( 0.96%) 431.85
other 22720 ( 0.05%) 6026224 ( 0.02%) 265.24
frag 1041 ( 0.00%) 995699 ( 0.00%) 956.48
ip6 314150 ( 0.73%) 338190339 ( 1.25%) 1076.53
tcp6 248318 ( 0.58%) 320498190 ( 1.19%) 1290.68
http(s) 2953 ( 0.01%) 3719567 ( 0.01%) 1259.59
http(c) 17776 ( 0.04%) 1752789 ( 0.01%) 98.60
squid 2 ( 0.00%) 188 ( 0.00%) 94.00
smtp 360 ( 0.00%) 134642 ( 0.00%) 374.01
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 882 ( 0.00%) 242429 ( 0.00%) 274.86
bgp 97 ( 0.00%) 20300 ( 0.00%) 209.28
icecast 1 ( 0.00%) 94 ( 0.00%) 94.00
other 226212 ( 0.53%) 314625037 ( 1.16%) 1390.84
udp6 42693 ( 0.10%) 14834145 ( 0.05%) 347.46
dns 40775 ( 0.10%) 14525418 ( 0.05%) 356.23
realaud 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 2 ( 0.00%) 229 ( 0.00%) 114.50
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1914 ( 0.00%) 308274 ( 0.00%) 161.06
icmp6 22644 ( 0.05%) 2475377 ( 0.01%) 109.32
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 385 ( 0.00%) 367607 ( 0.00%) 954.82
tcpdump file: 201101131400.dump.gz (1062.43 MB)