Traffic Trace Info
DumpFile: 201101311400.dump
FileSize: 3646.03MB
Id: 201101311400
StartTime: Mon Jan 31 14:00:00 2011
EndTime: Mon Jan 31 14:15:00 2011
TotalTime: 899.98 seconds
TotalCapSize: -1267.06MB CapLen: 96 bytes
# of packets: 53548669 (42803.63MB)
AvgRate: 399.00Mbps stddev:48.17M
IP flow (unique src/dst pair) Information
# of flows: 1018039 (avg. 52.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.1% 10.5% 1.6% 1.4% 1.4% 1.3% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 511128
Top 10 bandwidth usage (bytes/total in %):
18.5% 16.1% 13.5% 10.7% 10.7% 3.8% 2.9% 2.8% 2.1% 1.7%
# of IPv6 addresses: 4087
Top 10 bandwidth usage (bytes/total in %):
26.6% 26.6% 24.0% 24.0% 22.2% 20.7% 3.5% 3.5% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101311400.pktlen.png)
detailed numbers
[ 32- 63]: 11331228
[ 64- 127]: 9369759
[ 128- 255]: 1327565
[ 256- 511]: 1433172
[ 512- 1023]: 2467984
[ 1024- 2047]: 27618961
Protocol Breakdown
![[protocol breakdown chart]](201101311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53548669 (100.00%) 44882863848 (100.00%) 838.17
ip 53324209 ( 99.58%) 44723465818 ( 99.64%) 838.71
tcp 41595750 ( 77.68%) 33933360773 ( 75.60%) 815.79
http(s) 18175607 ( 33.94%) 22728693809 ( 50.64%) 1250.51
http(c) 14301257 ( 26.71%) 7710771733 ( 17.18%) 539.17
squid 306884 ( 0.57%) 82404617 ( 0.18%) 268.52
smtp 301482 ( 0.56%) 235999033 ( 0.53%) 782.80
ftp 36843 ( 0.07%) 5357335 ( 0.01%) 145.41
pop3 24619 ( 0.05%) 10279026 ( 0.02%) 417.52
imap 6239 ( 0.01%) 2460417 ( 0.01%) 394.36
telnet 676 ( 0.00%) 45983 ( 0.00%) 68.02
ssh 84679 ( 0.16%) 25640673 ( 0.06%) 302.80
dns 12608 ( 0.02%) 1168249 ( 0.00%) 92.66
bgp 592 ( 0.00%) 121682 ( 0.00%) 205.54
napster 1008 ( 0.00%) 71083 ( 0.00%) 70.52
realaud 111 ( 0.00%) 10594 ( 0.00%) 95.44
rtsp 14077 ( 0.03%) 13662433 ( 0.03%) 970.55
icecast 34469 ( 0.06%) 22846418 ( 0.05%) 662.81
hotline 16 ( 0.00%) 1088 ( 0.00%) 68.00
other 8294581 ( 15.49%) 3093826480 ( 6.89%) 372.99
udp 10715170 ( 20.01%) 10525699282 ( 23.45%) 982.32
dns 861666 ( 1.61%) 137353229 ( 0.31%) 159.40
rip 40 ( 0.00%) 60560 ( 0.00%) 1514.00
realaud 54 ( 0.00%) 51943 ( 0.00%) 961.91
halflif 39 ( 0.00%) 4686 ( 0.00%) 120.15
starcra 12700 ( 0.02%) 912195 ( 0.00%) 71.83
everque 1003 ( 0.00%) 174202 ( 0.00%) 173.68
unreal 67 ( 0.00%) 12936 ( 0.00%) 193.07
quake 201 ( 0.00%) 118484 ( 0.00%) 589.47
cuseeme 9 ( 0.00%) 855 ( 0.00%) 95.00
other 5219520 ( 9.75%) 4100919296 ( 9.14%) 785.69
icmp 542038 ( 1.01%) 101634000 ( 0.23%) 187.50
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 2303 ( 0.00%) 760858 ( 0.00%) 330.38
ip6 451650 ( 0.84%) 157850627 ( 0.35%) 349.50
other 17112 ( 0.03%) 4140898 ( 0.01%) 241.99
frag 5964419 ( 11.14%) 8307815918 ( 18.51%) 1392.90
ip6 224460 ( 0.42%) 159398030 ( 0.36%) 710.14
tcp6 155927 ( 0.29%) 141062626 ( 0.31%) 904.67
http(s) 36670 ( 0.07%) 52657963 ( 0.12%) 1436.00
http(c) 46123 ( 0.09%) 4260277 ( 0.01%) 92.37
smtp 187 ( 0.00%) 76076 ( 0.00%) 406.82
ftp 166 ( 0.00%) 15155 ( 0.00%) 91.30
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 929 ( 0.00%) 246131 ( 0.00%) 264.94
bgp 90 ( 0.00%) 15049 ( 0.00%) 167.21
other 71760 ( 0.13%) 83791803 ( 0.19%) 1167.67
udp6 48184 ( 0.09%) 15709981 ( 0.04%) 326.04
dns 45961 ( 0.09%) 15307586 ( 0.03%) 333.06
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2222 ( 0.00%) 402289 ( 0.00%) 181.05
icmp6 19190 ( 0.04%) 1838023 ( 0.00%) 95.78
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 47 ( 0.00%) 5712 ( 0.00%) 121.53
other6 1030 ( 0.00%) 770462 ( 0.00%) 748.02
tcpdump file: 201101311400.dump.gz (1213.69 MB)