Traffic Trace Info
DumpFile: 201101211400.dump
FileSize: 3081.95MB
Id: 201101211400
StartTime: Fri Jan 21 14:00:00 2011
EndTime: Fri Jan 21 14:15:01 2011
TotalTime: 900.73 seconds
TotalCapSize: -1707.14MB CapLen: 96 bytes
# of packets: 45421417 (34445.74MB)
AvgRate: 320.78Mbps stddev:87.04M
IP flow (unique src/dst pair) Information
# of flows: 1216516 (avg. 37.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.2% 2.1% 1.7% 1.7% 1.4% 1.3% 1.2% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 648507
Top 10 bandwidth usage (bytes/total in %):
14.4% 11.5% 9.9% 6.6% 5.3% 3.9% 3.9% 1.7% 1.7% 1.6%
# of IPv6 addresses: 3368
Top 10 bandwidth usage (bytes/total in %):
86.1% 82.5% 3.9% 2.9% 2.9% 2.7% 2.7% 2.0% 2.0% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101211400.pktlen.png)
detailed numbers
[ 32- 63]: 9259773
[ 64- 127]: 8931920
[ 128- 255]: 1551268
[ 256- 511]: 1298678
[ 512- 1023]: 2939547
[ 1024- 2047]: 21440231
Protocol Breakdown
![[protocol breakdown chart]](201101211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45421417 (100.00%) 36118972870 (100.00%) 795.20
ip 44905565 ( 98.86%) 35503678437 ( 98.30%) 790.63
tcp 30583885 ( 67.33%) 23075766160 ( 63.89%) 754.51
http(s) 14106349 ( 31.06%) 18792408064 ( 52.03%) 1332.20
http(c) 8448960 ( 18.60%) 1506379579 ( 4.17%) 178.29
squid 410171 ( 0.90%) 178703836 ( 0.49%) 435.68
smtp 229938 ( 0.51%) 116724063 ( 0.32%) 507.63
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 69031 ( 0.15%) 13724273 ( 0.04%) 198.81
pop3 15899 ( 0.04%) 4293638 ( 0.01%) 270.06
imap 10002 ( 0.02%) 7433446 ( 0.02%) 743.20
telnet 1881 ( 0.00%) 213799 ( 0.00%) 113.66
ssh 64000 ( 0.14%) 14699286 ( 0.04%) 229.68
dns 10748 ( 0.02%) 1033958 ( 0.00%) 96.20
bgp 557 ( 0.00%) 96186 ( 0.00%) 172.69
napster 763 ( 0.00%) 52752 ( 0.00%) 69.14
realaud 117 ( 0.00%) 12178 ( 0.00%) 104.09
rtsp 34240 ( 0.08%) 31847084 ( 0.09%) 930.11
icecast 30293 ( 0.07%) 16315741 ( 0.05%) 538.60
hotline 59 ( 0.00%) 5205 ( 0.00%) 88.22
other 7150864 ( 15.74%) 2391822286 ( 6.62%) 334.48
udp 12713905 ( 27.99%) 11955234900 ( 33.10%) 940.33
dns 910627 ( 2.00%) 145303590 ( 0.40%) 159.56
rip 89 ( 0.00%) 126050 ( 0.00%) 1416.29
realaud 110 ( 0.00%) 124548 ( 0.00%) 1132.25
halflif 38 ( 0.00%) 3673 ( 0.00%) 96.66
starcra 128 ( 0.00%) 150301 ( 0.00%) 1174.23
everque 917 ( 0.00%) 270602 ( 0.00%) 295.09
unreal 15 ( 0.00%) 2333 ( 0.00%) 155.53
quake 203 ( 0.00%) 265800 ( 0.00%) 1309.36
cuseeme 5 ( 0.00%) 428 ( 0.00%) 85.60
other 9315915 ( 20.51%) 8371303138 ( 23.18%) 898.60
icmp 670399 ( 1.48%) 151846135 ( 0.42%) 226.50
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1083 ( 0.00%) 285618 ( 0.00%) 263.73
ip6 901912 ( 1.99%) 284905265 ( 0.79%) 315.89
other 34196 ( 0.08%) 35621089 ( 0.10%) 1041.67
frag 5300598 ( 11.67%) 7452233632 ( 20.63%) 1405.92
ip6 515850 ( 1.14%) 615294313 ( 1.70%) 1192.78
tcp6 446166 ( 0.98%) 596953630 ( 1.65%) 1337.96
http(s) 29559 ( 0.07%) 39368746 ( 0.11%) 1331.87
http(c) 26349 ( 0.06%) 2434793 ( 0.01%) 92.41
smtp 580 ( 0.00%) 310715 ( 0.00%) 535.72
ftp 248 ( 0.00%) 23291 ( 0.00%) 93.92
ssh 407 ( 0.00%) 302342 ( 0.00%) 742.86
dns 752 ( 0.00%) 186319 ( 0.00%) 247.76
bgp 88 ( 0.00%) 18736 ( 0.00%) 212.91
other 388183 ( 0.85%) 554308688 ( 1.53%) 1427.96
udp6 47319 ( 0.10%) 15402976 ( 0.04%) 325.51
dns 44825 ( 0.10%) 14447693 ( 0.04%) 322.31
other 2494 ( 0.01%) 955283 ( 0.00%) 383.03
icmp6 21566 ( 0.05%) 2364473 ( 0.01%) 109.64
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 82 ( 0.00%) 9072 ( 0.00%) 110.63
other6 634 ( 0.00%) 552868 ( 0.00%) 872.03
tcpdump file: 201101211400.dump.gz (1052.97 MB)