Traffic Trace Info
DumpFile: 201101171400.dump
FileSize: 3222.80MB
Id: 201101171400
StartTime: Mon Jan 17 14:00:01 2011
EndTime: Mon Jan 17 14:15:00 2011
TotalTime: 899.34 seconds
TotalCapSize: -1567.85MB CapLen: 96 bytes
# of packets: 45523753 (29436.25MB)
AvgRate: 274.59Mbps stddev:67.82M
IP flow (unique src/dst pair) Information
# of flows: 1000664 (avg. 45.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.4% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 483513
Top 10 bandwidth usage (bytes/total in %):
17.2% 6.5% 6.2% 4.9% 2.8% 2.2% 1.6% 1.6% 1.6% 1.5%
# of IPv6 addresses: 3682
Top 10 bandwidth usage (bytes/total in %):
63.9% 63.9% 3.7% 2.9% 2.3% 2.3% 1.9% 1.9% 1.6% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101171400.pktlen.png)
detailed numbers
[ 32- 63]: 11649203
[ 64- 127]: 11059818
[ 128- 255]: 1576053
[ 256- 511]: 1102052
[ 512- 1023]: 1147990
[ 1024- 2047]: 18988637
Protocol Breakdown
![[protocol breakdown chart]](201101171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45523753 (100.00%) 30866149033 (100.00%) 678.02
ip 45367013 ( 99.66%) 30792546640 ( 99.76%) 678.74
tcp 38126395 ( 83.75%) 27050913516 ( 87.64%) 709.51
http(s) 16591561 ( 36.45%) 22091136919 ( 71.57%) 1331.47
http(c) 10279140 ( 22.58%) 1946207257 ( 6.31%) 189.34
squid 321557 ( 0.71%) 121572811 ( 0.39%) 378.08
smtp 179174 ( 0.39%) 90948163 ( 0.29%) 507.60
nntp 4 ( 0.00%) 256 ( 0.00%) 64.00
ftp 56465 ( 0.12%) 13495317 ( 0.04%) 239.00
pop3 17963 ( 0.04%) 6563277 ( 0.02%) 365.38
imap 4527 ( 0.01%) 1838897 ( 0.01%) 406.21
telnet 4850 ( 0.01%) 418232 ( 0.00%) 86.23
ssh 749782 ( 1.65%) 104094052 ( 0.34%) 138.83
dns 12322 ( 0.03%) 1042427 ( 0.00%) 84.60
bgp 570 ( 0.00%) 102295 ( 0.00%) 179.46
napster 670 ( 0.00%) 164860 ( 0.00%) 246.06
realaud 219 ( 0.00%) 15852 ( 0.00%) 72.38
rtsp 8786 ( 0.02%) 6345034 ( 0.02%) 722.18
icecast 20040 ( 0.04%) 12818379 ( 0.04%) 639.64
hotline 82 ( 0.00%) 5704 ( 0.00%) 69.56
other 9878666 ( 21.70%) 2654142764 ( 8.60%) 268.67
udp 5901764 ( 12.96%) 3144198704 ( 10.19%) 532.76
dns 933425 ( 2.05%) 146294540 ( 0.47%) 156.73
realaud 15 ( 0.00%) 1866 ( 0.00%) 124.40
halflif 859 ( 0.00%) 53214 ( 0.00%) 61.95
starcra 57 ( 0.00%) 11841 ( 0.00%) 207.74
everque 531 ( 0.00%) 83118 ( 0.00%) 156.53
unreal 26 ( 0.00%) 3980 ( 0.00%) 153.08
quake 26 ( 0.00%) 3636 ( 0.00%) 139.85
cuseeme 11 ( 0.00%) 1170 ( 0.00%) 106.36
other 4962739 ( 10.90%) 2997346933 ( 9.71%) 603.97
icmp 486537 ( 1.07%) 98005521 ( 0.32%) 201.43
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4121 ( 0.01%) 855790 ( 0.00%) 207.67
ip6 808203 ( 1.78%) 470019708 ( 1.52%) 581.56
other 39808 ( 0.09%) 28534131 ( 0.09%) 716.79
frag 22754 ( 0.05%) 17917484 ( 0.06%) 787.44
ip6 156740 ( 0.34%) 73602393 ( 0.24%) 469.58
tcp6 93335 ( 0.21%) 56213280 ( 0.18%) 602.27
http(s) 2864 ( 0.01%) 3108861 ( 0.01%) 1085.50
http(c) 42955 ( 0.09%) 3722856 ( 0.01%) 86.67
smtp 344 ( 0.00%) 220907 ( 0.00%) 642.17
ftp 41 ( 0.00%) 3684 ( 0.00%) 89.85
ssh 112 ( 0.00%) 32984 ( 0.00%) 294.50
dns 688 ( 0.00%) 179334 ( 0.00%) 260.66
bgp 92 ( 0.00%) 23138 ( 0.00%) 251.50
other 46239 ( 0.10%) 48921516 ( 0.16%) 1058.01
udp6 48058 ( 0.11%) 15526653 ( 0.05%) 323.08
dns 44569 ( 0.10%) 15065292 ( 0.05%) 338.02
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
other 3488 ( 0.01%) 461244 ( 0.00%) 132.24
icmp6 14965 ( 0.03%) 1622341 ( 0.01%) 108.41
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 52 ( 0.00%) 6192 ( 0.00%) 119.08
other6 247 ( 0.00%) 222583 ( 0.00%) 901.15
tcpdump file: 201101171400.dump.gz (1149.14 MB)