Traffic Trace Info
DumpFile: 201101251400.dump
FileSize: 3127.65MB
Id: 201101251400
StartTime: Tue Jan 25 14:00:00 2011
EndTime: Tue Jan 25 14:15:00 2011
TotalTime: 900.23 seconds
TotalCapSize: -1643.97MB CapLen: 96 bytes
# of packets: 44276329 (32433.76MB)
AvgRate: 302.14Mbps stddev:42.99M
IP flow (unique src/dst pair) Information
# of flows: 939055 (avg. 47.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.7% 1.2% 1.1% 1.1% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 479353
Top 10 bandwidth usage (bytes/total in %):
14.5% 5.8% 4.8% 3.3% 2.9% 2.8% 2.3% 2.3% 2.1% 1.9%
# of IPv6 addresses: 3806
Top 10 bandwidth usage (bytes/total in %):
50.9% 47.4% 17.8% 12.4% 5.0% 4.5% 2.9% 2.7% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101251400.pktlen.png)
detailed numbers
[ 32- 63]: 9391523
[ 64- 127]: 9302470
[ 128- 255]: 1772960
[ 256- 511]: 1366881
[ 512- 1023]: 1367250
[ 1024- 2047]: 21075245
Protocol Breakdown
![[protocol breakdown chart]](201101251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44276329 (100.00%) 34009262562 (100.00%) 768.11
ip 44147483 ( 99.71%) 33943609643 ( 99.81%) 768.87
tcp 37005982 ( 83.58%) 30584284595 ( 89.93%) 826.47
http(s) 17953501 ( 40.55%) 24316436511 ( 71.50%) 1354.41
http(c) 10258296 ( 23.17%) 1900186948 ( 5.59%) 185.23
squid 309063 ( 0.70%) 100471875 ( 0.30%) 325.09
smtp 302997 ( 0.68%) 116423370 ( 0.34%) 384.24
nntp 10 ( 0.00%) 610 ( 0.00%) 61.00
ftp 54116 ( 0.12%) 12262025 ( 0.04%) 226.59
pop3 25358 ( 0.06%) 13184689 ( 0.04%) 519.94
imap 8758 ( 0.02%) 6492839 ( 0.02%) 741.36
telnet 1733 ( 0.00%) 141856 ( 0.00%) 81.86
ssh 51014 ( 0.12%) 10635835 ( 0.03%) 208.49
dns 9746 ( 0.02%) 899363 ( 0.00%) 92.28
bgp 578 ( 0.00%) 115575 ( 0.00%) 199.96
napster 450 ( 0.00%) 36912 ( 0.00%) 82.03
realaud 713 ( 0.00%) 578265 ( 0.00%) 811.03
rtsp 4056 ( 0.01%) 4489693 ( 0.01%) 1106.93
icecast 9438 ( 0.02%) 794794 ( 0.00%) 84.21
hotline 117 ( 0.00%) 7576 ( 0.00%) 64.75
other 8016030 ( 18.10%) 4101125379 ( 12.06%) 511.62
udp 6023915 ( 13.61%) 2909448343 ( 8.55%) 482.98
dns 914027 ( 2.06%) 147592437 ( 0.43%) 161.47
realaud 65 ( 0.00%) 10050 ( 0.00%) 154.62
halflif 50 ( 0.00%) 4468 ( 0.00%) 89.36
starcra 76 ( 0.00%) 6927 ( 0.00%) 91.14
everque 699 ( 0.00%) 86155 ( 0.00%) 123.25
unreal 12 ( 0.00%) 1113 ( 0.00%) 92.75
quake 19 ( 0.00%) 1986 ( 0.00%) 104.53
cuseeme 19 ( 0.00%) 4882 ( 0.00%) 256.95
other 5108808 ( 11.54%) 2761655829 ( 8.12%) 540.57
icmp 466898 ( 1.05%) 82149398 ( 0.24%) 175.95
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1138 ( 0.00%) 350012 ( 0.00%) 307.57
ip6 635475 ( 1.44%) 365045534 ( 1.07%) 574.45
other 13890 ( 0.03%) 2312491 ( 0.01%) 166.49
frag 735 ( 0.00%) 758031 ( 0.00%) 1031.33
ip6 128846 ( 0.29%) 65652919 ( 0.19%) 509.55
tcp6 59492 ( 0.13%) 47852201 ( 0.14%) 804.35
http(s) 12234 ( 0.03%) 13648365 ( 0.04%) 1115.61
http(c) 17687 ( 0.04%) 1673772 ( 0.00%) 94.63
smtp 181 ( 0.00%) 53918 ( 0.00%) 297.89
ftp 37 ( 0.00%) 3316 ( 0.00%) 89.62
dns 866 ( 0.00%) 233623 ( 0.00%) 269.77
bgp 86 ( 0.00%) 22823 ( 0.00%) 265.38
other 28401 ( 0.06%) 32216384 ( 0.09%) 1134.34
udp6 52194 ( 0.12%) 15687486 ( 0.05%) 300.56
dns 45747 ( 0.10%) 14925763 ( 0.04%) 326.27
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 6445 ( 0.01%) 761509 ( 0.00%) 118.16
icmp6 16594 ( 0.04%) 1704584 ( 0.01%) 102.72
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 47 ( 0.00%) 5712 ( 0.00%) 121.53
other6 436 ( 0.00%) 391642 ( 0.00%) 898.26
tcpdump file: 201101251400.dump.gz (1066.90 MB)