Traffic Trace Info
DumpFile: 201101141400.dump
FileSize: 2906.35MB
Id: 201101141400
StartTime: Fri Jan 14 14:00:00 2011
EndTime: Fri Jan 14 14:15:00 2011
TotalTime: 900.18 seconds
TotalCapSize: -1815.76MB CapLen: 96 bytes
# of packets: 41031812 (24586.68MB)
AvgRate: 229.14Mbps stddev:37.52M
IP flow (unique src/dst pair) Information
# of flows: 1086170 (avg. 37.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.9% 1.8% 1.6% 1.3% 1.3% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 550113
Top 10 bandwidth usage (bytes/total in %):
10.8% 4.1% 4.1% 3.2% 3.0% 3.0% 2.7% 2.2% 2.1% 1.9%
# of IPv6 addresses: 3533
Top 10 bandwidth usage (bytes/total in %):
47.3% 45.3% 9.2% 9.2% 4.7% 4.7% 4.1% 3.5% 3.5% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101141400.pktlen.png)
detailed numbers
[ 32- 63]: 10729474
[ 64- 127]: 11037367
[ 128- 255]: 1522627
[ 256- 511]: 1089576
[ 512- 1023]: 1046021
[ 1024- 2047]: 15606747
Protocol Breakdown
![[protocol breakdown chart]](201101141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41031812 (100.00%) 25781004275 (100.00%) 628.32
ip 40855053 ( 99.57%) 25720151131 ( 99.76%) 629.55
tcp 34076721 ( 83.05%) 22167484056 ( 85.98%) 650.52
http(s) 13114504 ( 31.96%) 17142556839 ( 66.49%) 1307.14
http(c) 9367798 ( 22.83%) 2042621015 ( 7.92%) 218.05
squid 414343 ( 1.01%) 167386264 ( 0.65%) 403.98
smtp 210599 ( 0.51%) 96816569 ( 0.38%) 459.72
nntp 15 ( 0.00%) 1026 ( 0.00%) 68.40
ftp 49096 ( 0.12%) 12895716 ( 0.05%) 262.66
pop3 20453 ( 0.05%) 3942755 ( 0.02%) 192.77
imap 5028 ( 0.01%) 1544066 ( 0.01%) 307.09
telnet 999 ( 0.00%) 72614 ( 0.00%) 72.69
ssh 1104662 ( 2.69%) 154518961 ( 0.60%) 139.88
dns 9750 ( 0.02%) 783101 ( 0.00%) 80.32
bgp 586 ( 0.00%) 100230 ( 0.00%) 171.04
napster 1133 ( 0.00%) 388759 ( 0.00%) 343.12
realaud 240 ( 0.00%) 28671 ( 0.00%) 119.46
rtsp 57907 ( 0.14%) 54782390 ( 0.21%) 946.04
icecast 945 ( 0.00%) 79542 ( 0.00%) 84.17
hotline 67 ( 0.00%) 10728 ( 0.00%) 160.12
other 9718574 ( 23.69%) 2488953490 ( 9.65%) 256.10
udp 5813537 ( 14.17%) 3261186939 ( 12.65%) 560.96
dns 879114 ( 2.14%) 135686238 ( 0.53%) 154.34
rip 8 ( 0.00%) 12112 ( 0.00%) 1514.00
realaud 3638 ( 0.01%) 242222 ( 0.00%) 66.58
halflif 28 ( 0.00%) 2837 ( 0.00%) 101.32
starcra 60 ( 0.00%) 10341 ( 0.00%) 172.35
everque 1346 ( 0.00%) 259402 ( 0.00%) 192.72
unreal 57 ( 0.00%) 6462 ( 0.00%) 113.37
quake 42 ( 0.00%) 28202 ( 0.00%) 671.48
cuseeme 5 ( 0.00%) 1088 ( 0.00%) 217.60
other 4345859 ( 10.59%) 2331248985 ( 9.04%) 536.43
icmp 473565 ( 1.15%) 74905904 ( 0.29%) 158.17
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3349 ( 0.01%) 1596498 ( 0.01%) 476.71
ip6 475094 ( 1.16%) 211514664 ( 0.82%) 445.21
other 12603 ( 0.03%) 3443910 ( 0.01%) 273.26
frag 756470 ( 1.84%) 1051496690 ( 4.08%) 1390.00
ip6 176759 ( 0.43%) 60853144 ( 0.24%) 344.27
tcp6 115565 ( 0.28%) 44168663 ( 0.17%) 382.20
http(s) 5960 ( 0.01%) 7933747 ( 0.03%) 1331.17
http(c) 83676 ( 0.20%) 7421677 ( 0.03%) 88.70
smtp 309 ( 0.00%) 75752 ( 0.00%) 245.15
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 626 ( 0.00%) 159963 ( 0.00%) 255.53
bgp 100 ( 0.00%) 20227 ( 0.00%) 202.27
other 24859 ( 0.06%) 28554153 ( 0.11%) 1148.64
udp6 44551 ( 0.11%) 14643898 ( 0.06%) 328.70
dns 43039 ( 0.10%) 14379832 ( 0.06%) 334.11
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1509 ( 0.00%) 263737 ( 0.00%) 174.78
icmp6 16196 ( 0.04%) 1690835 ( 0.01%) 104.40
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 336 ( 0.00%) 334610 ( 0.00%) 995.86
tcpdump file: 201101141400.dump.gz (1072.98 MB)