Traffic Trace Info
DumpFile: 201101181400.dump
FileSize: 3273.99MB
Id: 201101181400
StartTime: Tue Jan 18 14:00:00 2011
EndTime: Tue Jan 18 14:15:01 2011
TotalTime: 900.16 seconds
TotalCapSize: -1515.99MB CapLen: 96 bytes
# of packets: 45480035 (29469.11MB)
AvgRate: 274.63Mbps stddev:47.11M
IP flow (unique src/dst pair) Information
# of flows: 1086513 (avg. 41.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.4% 1.4% 1.3% 1.2% 1.2% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 523229
Top 10 bandwidth usage (bytes/total in %):
12.6% 5.1% 5.0% 4.3% 4.2% 2.9% 2.1% 2.1% 1.7% 1.7%
# of IPv6 addresses: 4119
Top 10 bandwidth usage (bytes/total in %):
43.6% 42.7% 17.6% 17.6% 15.9% 14.6% 2.3% 2.3% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101181400.pktlen.png)
detailed numbers
[ 32- 63]: 10992367
[ 64- 127]: 11881534
[ 128- 255]: 1416964
[ 256- 511]: 1146192
[ 512- 1023]: 1052413
[ 1024- 2047]: 18990565
Protocol Breakdown
![[protocol breakdown chart]](201101181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45480035 (100.00%) 30900597810 (100.00%) 679.43
ip 45287637 ( 99.58%) 30771223290 ( 99.58%) 679.46
tcp 39286829 ( 86.38%) 28441106714 ( 92.04%) 723.93
http(s) 16213107 ( 35.65%) 21649780221 ( 70.06%) 1335.33
http(c) 10342673 ( 22.74%) 1772725780 ( 5.74%) 171.40
squid 357315 ( 0.79%) 119923079 ( 0.39%) 335.62
smtp 406153 ( 0.89%) 260628830 ( 0.84%) 641.70
ftp 56580 ( 0.12%) 14265976 ( 0.05%) 252.14
pop3 27353 ( 0.06%) 10920375 ( 0.04%) 399.24
imap 4622 ( 0.01%) 1196468 ( 0.00%) 258.86
telnet 61422 ( 0.14%) 4518452 ( 0.01%) 73.56
ssh 48911 ( 0.11%) 7614122 ( 0.02%) 155.67
dns 14025 ( 0.03%) 1254601 ( 0.00%) 89.45
bgp 584 ( 0.00%) 107172 ( 0.00%) 183.51
napster 755 ( 0.00%) 229115 ( 0.00%) 303.46
realaud 215 ( 0.00%) 23284 ( 0.00%) 108.30
rtsp 6938 ( 0.02%) 7792996 ( 0.03%) 1123.23
icecast 24849 ( 0.05%) 15838151 ( 0.05%) 637.38
hotline 52 ( 0.00%) 6924 ( 0.00%) 133.15
other 11721275 ( 25.77%) 4574281168 ( 14.80%) 390.25
udp 5039596 ( 11.08%) 2067704991 ( 6.69%) 410.29
dns 961019 ( 2.11%) 152942702 ( 0.49%) 159.15
realaud 1826 ( 0.00%) 111092 ( 0.00%) 60.84
halflif 30 ( 0.00%) 2409 ( 0.00%) 80.30
starcra 51 ( 0.00%) 6907 ( 0.00%) 135.43
everque 8048 ( 0.02%) 925581 ( 0.00%) 115.01
unreal 13 ( 0.00%) 1390 ( 0.00%) 106.92
quake 243 ( 0.00%) 28468 ( 0.00%) 117.15
cuseeme 9 ( 0.00%) 780 ( 0.00%) 86.67
other 4061959 ( 8.93%) 1913148412 ( 6.19%) 470.99
icmp 435602 ( 0.96%) 34963620 ( 0.11%) 80.27
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 11314 ( 0.02%) 6216212 ( 0.02%) 549.43
ip6 500319 ( 1.10%) 217280338 ( 0.70%) 434.28
other 13793 ( 0.03%) 3932255 ( 0.01%) 285.09
frag 36390 ( 0.08%) 29478178 ( 0.10%) 810.06
ip6 192398 ( 0.42%) 129374520 ( 0.42%) 672.43
tcp6 122602 ( 0.27%) 110491246 ( 0.36%) 901.22
http(s) 52557 ( 0.12%) 77564059 ( 0.25%) 1475.81
http(c) 26507 ( 0.06%) 2245533 ( 0.01%) 84.71
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 158 ( 0.00%) 24949 ( 0.00%) 157.91
ftp 115 ( 0.00%) 10708 ( 0.00%) 93.11
dns 915 ( 0.00%) 234191 ( 0.00%) 255.95
bgp 91 ( 0.00%) 19731 ( 0.00%) 216.82
other 42256 ( 0.09%) 30391821 ( 0.10%) 719.23
udp6 51020 ( 0.11%) 16815764 ( 0.05%) 329.59
dns 48663 ( 0.11%) 16379980 ( 0.05%) 336.60
everque 2 ( 0.00%) 213 ( 0.00%) 106.50
other 2355 ( 0.01%) 435571 ( 0.00%) 184.96
icmp6 18385 ( 0.04%) 1835551 ( 0.01%) 99.84
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 83 ( 0.00%) 9208 ( 0.00%) 110.94
other6 225 ( 0.00%) 211457 ( 0.00%) 939.81
tcpdump file: 201101181400.dump.gz (1149.40 MB)