Traffic Trace Info
DumpFile: 201102281400.dump
FileSize: 3075.79MB
Id: 201102281400
StartTime: Mon Feb 28 14:00:00 2011
EndTime: Mon Feb 28 14:15:01 2011
TotalTime: 900.06 seconds
TotalCapSize: -1711.52MB CapLen: 96 bytes
# of packets: 45305006 (37438.97MB)
AvgRate: 348.94Mbps stddev:173.66M
IP flow (unique src/dst pair) Information
# of flows: 1055423 (avg. 42.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.6% 6.2% 6.0% 2.3% 1.7% 1.3% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 585069
Top 10 bandwidth usage (bytes/total in %):
16.6% 16.6% 15.0% 6.3% 6.3% 6.3% 6.1% 5.7% 3.9% 2.4%
# of IPv6 addresses: 3438
Top 10 bandwidth usage (bytes/total in %):
14.3% 13.2% 9.3% 7.1% 7.1% 6.3% 5.1% 4.7% 3.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102281400.pktlen.png)
detailed numbers
[ 32- 63]: 8455165
[ 64- 127]: 8048024
[ 128- 255]: 1384998
[ 256- 511]: 1002960
[ 512- 1023]: 2040691
[ 1024- 2047]: 24373168
Protocol Breakdown
![[protocol breakdown chart]](201102281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45305006 (100.00%) 39257601984 (100.00%) 866.52
ip 45168340 ( 99.70%) 39230229353 ( 99.93%) 868.53
tcp 34186115 ( 75.46%) 29461542360 ( 75.05%) 861.80
http(s) 16484428 ( 36.39%) 21456598114 ( 54.66%) 1301.63
http(c) 11457583 ( 25.29%) 4460143582 ( 11.36%) 389.27
squid 341129 ( 0.75%) 90658954 ( 0.23%) 265.76
smtp 199206 ( 0.44%) 95236547 ( 0.24%) 478.08
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 26146 ( 0.06%) 2945186 ( 0.01%) 112.64
pop3 23148 ( 0.05%) 10034673 ( 0.03%) 433.50
imap 21782 ( 0.05%) 3533873 ( 0.01%) 162.24
telnet 1611 ( 0.00%) 112616 ( 0.00%) 69.90
ssh 125579 ( 0.28%) 12579600 ( 0.03%) 100.17
dns 10218 ( 0.02%) 825967 ( 0.00%) 80.83
bgp 619 ( 0.00%) 126611 ( 0.00%) 204.54
napster 37 ( 0.00%) 2671 ( 0.00%) 72.19
realaud 69 ( 0.00%) 4962 ( 0.00%) 71.91
rtsp 16009 ( 0.04%) 15394228 ( 0.04%) 961.60
icecast 10587 ( 0.02%) 7447173 ( 0.02%) 703.43
hotline 18 ( 0.00%) 2239 ( 0.00%) 124.39
other 5467939 ( 12.07%) 3305894938 ( 8.42%) 604.60
udp 9566322 ( 21.12%) 9182326911 ( 23.39%) 959.86
dns 682418 ( 1.51%) 159960715 ( 0.41%) 234.40
realaud 19 ( 0.00%) 1833 ( 0.00%) 96.47
halflif 13 ( 0.00%) 1637 ( 0.00%) 125.92
starcra 74 ( 0.00%) 11116 ( 0.00%) 150.22
everque 212 ( 0.00%) 32461 ( 0.00%) 153.12
unreal 10 ( 0.00%) 1625 ( 0.00%) 162.50
quake 37 ( 0.00%) 3294 ( 0.00%) 89.03
cuseeme 5 ( 0.00%) 381 ( 0.00%) 76.20
other 8439525 ( 18.63%) 8425904230 ( 21.46%) 998.39
icmp 643783 ( 1.42%) 99190769 ( 0.25%) 154.07
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 386 ( 0.00%) 114108 ( 0.00%) 295.62
ip6 754802 ( 1.67%) 482109868 ( 1.23%) 638.72
other 16748 ( 0.04%) 4926165 ( 0.01%) 294.13
frag 4713968 ( 10.40%) 6514292026 ( 16.59%) 1381.91
ip6 136664 ( 0.30%) 27372511 ( 0.07%) 200.29
tcp6 80202 ( 0.18%) 12502565 ( 0.03%) 155.89
http(s) 11184 ( 0.02%) 6249107 ( 0.02%) 558.75
http(c) 17269 ( 0.04%) 1494810 ( 0.00%) 86.56
squid 17 ( 0.00%) 1410 ( 0.00%) 82.94
smtp 8998 ( 0.02%) 805031 ( 0.00%) 89.47
ftp 37 ( 0.00%) 3292 ( 0.00%) 88.97
ssh 154 ( 0.00%) 41852 ( 0.00%) 271.77
dns 1020 ( 0.00%) 251179 ( 0.00%) 246.25
bgp 93 ( 0.00%) 18560 ( 0.00%) 199.57
other 41430 ( 0.09%) 3637324 ( 0.01%) 87.79
udp6 40423 ( 0.09%) 12695360 ( 0.03%) 314.06
dns 39579 ( 0.09%) 12535638 ( 0.03%) 316.72
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 842 ( 0.00%) 159516 ( 0.00%) 189.45
icmp6 15529 ( 0.03%) 1764328 ( 0.00%) 113.62
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 398 ( 0.00%) 394952 ( 0.00%) 992.34
tcpdump file: 201102281400.dump.gz (992.76 MB)