Traffic Trace Info
DumpFile: 201102241400.dump
FileSize: 3306.83MB
Id: 201102241400
StartTime: Thu Feb 24 14:00:01 2011
EndTime: Thu Feb 24 14:15:00 2011
TotalTime: 899.32 seconds
TotalCapSize: -1489.62MB CapLen: 96 bytes
# of packets: 45903958 (35421.76MB)
AvgRate: 330.35Mbps stddev:64.15M
IP flow (unique src/dst pair) Information
# of flows: 1116995 (avg. 41.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 3.7% 1.9% 1.7% 1.5% 1.5% 1.5% 1.5% 1.5% 1.1%
IP address Information
# of IPv4 addresses: 550268
Top 10 bandwidth usage (bytes/total in %):
19.4% 13.8% 5.7% 4.7% 4.0% 3.8% 3.2% 3.1% 2.8% 2.7%
# of IPv6 addresses: 3885
Top 10 bandwidth usage (bytes/total in %):
67.7% 67.7% 3.6% 3.4% 3.0% 3.0% 3.0% 3.0% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102241400.pktlen.png)
detailed numbers
[ 32- 63]: 8191310
[ 64- 127]: 10702125
[ 128- 255]: 1688289
[ 256- 511]: 916550
[ 512- 1023]: 1182155
[ 1024- 2047]: 23223529
Protocol Breakdown
![[protocol breakdown chart]](201102241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45903958 (100.00%) 37142405573 (100.00%) 809.13
ip 45628930 ( 99.40%) 36998325966 ( 99.61%) 810.85
tcp 39544403 ( 86.15%) 34082469175 ( 91.76%) 861.88
http(s) 19876233 ( 43.30%) 27936836388 ( 75.22%) 1405.54
http(c) 11251471 ( 24.51%) 1869285780 ( 5.03%) 166.14
squid 210657 ( 0.46%) 77595193 ( 0.21%) 368.35
smtp 205607 ( 0.45%) 85227778 ( 0.23%) 414.52
nntp 12 ( 0.00%) 736 ( 0.00%) 61.33
ftp 52236 ( 0.11%) 4896480 ( 0.01%) 93.74
pop3 25574 ( 0.06%) 7271454 ( 0.02%) 284.33
imap 17086 ( 0.04%) 3706896 ( 0.01%) 216.96
telnet 131 ( 0.00%) 9559 ( 0.00%) 72.97
ssh 1224620 ( 2.67%) 1023125162 ( 2.75%) 835.46
dns 11882 ( 0.03%) 920567 ( 0.00%) 77.48
bgp 631 ( 0.00%) 161293 ( 0.00%) 255.61
napster 93 ( 0.00%) 44921 ( 0.00%) 483.02
realaud 59 ( 0.00%) 4665 ( 0.00%) 79.07
rtsp 23195 ( 0.05%) 23371758 ( 0.06%) 1007.62
icecast 1253 ( 0.00%) 121283 ( 0.00%) 96.79
hotline 72 ( 0.00%) 4760 ( 0.00%) 66.11
other 6643589 ( 14.47%) 3049884382 ( 8.21%) 459.07
udp 4891849 ( 10.66%) 2608785987 ( 7.02%) 533.29
dns 698799 ( 1.52%) 155343227 ( 0.42%) 222.30
realaud 29 ( 0.00%) 6528 ( 0.00%) 225.10
halflif 28 ( 0.00%) 2946 ( 0.00%) 105.21
starcra 49 ( 0.00%) 9333 ( 0.00%) 190.47
everque 226 ( 0.00%) 59763 ( 0.00%) 264.44
unreal 55 ( 0.00%) 7109 ( 0.00%) 129.25
quake 30 ( 0.00%) 6015 ( 0.00%) 200.50
cuseeme 5 ( 0.00%) 495 ( 0.00%) 99.00
other 4185310 ( 9.12%) 2452817030 ( 6.60%) 586.05
icmp 686899 ( 1.50%) 106645532 ( 0.29%) 155.26
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2413 ( 0.01%) 659770 ( 0.00%) 273.42
ip6 479202 ( 1.04%) 192144864 ( 0.52%) 400.97
other 23979 ( 0.05%) 7601368 ( 0.02%) 317.00
frag 16267 ( 0.04%) 12135365 ( 0.03%) 746.01
ip6 275028 ( 0.60%) 144079607 ( 0.39%) 523.87
tcp6 210036 ( 0.46%) 128046099 ( 0.34%) 609.64
http(s) 8188 ( 0.02%) 5282932 ( 0.01%) 645.20
http(c) 80967 ( 0.18%) 6489426 ( 0.02%) 80.15
squid 21 ( 0.00%) 1658 ( 0.00%) 78.95
smtp 434 ( 0.00%) 260583 ( 0.00%) 600.42
ftp 59 ( 0.00%) 5267 ( 0.00%) 89.27
ssh 443 ( 0.00%) 103202 ( 0.00%) 232.96
dns 1132 ( 0.00%) 276686 ( 0.00%) 244.42
bgp 97 ( 0.00%) 19072 ( 0.00%) 196.62
other 118695 ( 0.26%) 115607273 ( 0.31%) 973.99
udp6 43072 ( 0.09%) 13739209 ( 0.04%) 318.98
dns 41839 ( 0.09%) 13494081 ( 0.04%) 322.52
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1230 ( 0.00%) 244807 ( 0.00%) 199.03
icmp6 21625 ( 0.05%) 2115772 ( 0.01%) 97.84
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 180 ( 0.00%) 162917 ( 0.00%) 905.09
tcpdump file: 201102241400.dump.gz (1061.40 MB)