Traffic Trace Info
DumpFile: 201103011400.dump
FileSize: 2955.17MB
Id: 201103011400
StartTime: Tue Mar 1 14:00:00 2011
EndTime: Tue Mar 1 14:15:00 2011
TotalTime: 899.76 seconds
TotalCapSize: -1782.39MB CapLen: 96 bytes
# of packets: 42044996 (32992.76MB)
AvgRate: 307.58Mbps stddev:42.67M
IP flow (unique src/dst pair) Information
# of flows: 1090457 (avg. 38.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.3% 1.8% 1.2% 1.1% 1.1% 1.0% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 589781
Top 10 bandwidth usage (bytes/total in %):
17.8% 17.8% 8.6% 5.0% 4.6% 3.8% 3.1% 2.9% 2.2% 2.0%
# of IPv6 addresses: 4179
Top 10 bandwidth usage (bytes/total in %):
77.7% 77.7% 17.6% 17.6% 1.1% 0.5% 0.3% 0.3% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103011400.pktlen.png)
detailed numbers
[ 32- 63]: 7597962
[ 64- 127]: 8708193
[ 128- 255]: 1523356
[ 256- 511]: 1224130
[ 512- 1023]: 1430105
[ 1024- 2047]: 21561250
Protocol Breakdown
![[protocol breakdown chart]](201103011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42044996 (100.00%) 34595419918 (100.00%) 822.82
ip 41562252 ( 98.85%) 34046692662 ( 98.41%) 819.17
tcp 34387979 ( 81.79%) 30399639009 ( 87.87%) 884.02
http(s) 13929185 ( 33.13%) 17237256799 ( 49.83%) 1237.49
http(c) 12499212 ( 29.73%) 8050339049 ( 23.27%) 644.07
squid 299499 ( 0.71%) 85954154 ( 0.25%) 286.99
smtp 307046 ( 0.73%) 216359384 ( 0.63%) 704.65
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 38374 ( 0.09%) 6467951 ( 0.02%) 168.55
pop3 24021 ( 0.06%) 5183371 ( 0.01%) 215.78
imap 6991 ( 0.02%) 3513828 ( 0.01%) 502.62
telnet 378 ( 0.00%) 26208 ( 0.00%) 69.33
ssh 1032743 ( 2.46%) 503395941 ( 1.46%) 487.44
dns 10595 ( 0.03%) 891792 ( 0.00%) 84.17
bgp 585 ( 0.00%) 107965 ( 0.00%) 184.56
napster 28 ( 0.00%) 1868 ( 0.00%) 66.71
realaud 89 ( 0.00%) 11173 ( 0.00%) 125.54
rtsp 18246 ( 0.04%) 15188397 ( 0.04%) 832.42
icecast 8532 ( 0.02%) 581974 ( 0.00%) 68.21
hotline 17 ( 0.00%) 2279 ( 0.00%) 134.06
other 6212432 ( 14.78%) 4274356510 ( 12.36%) 688.03
udp 5996941 ( 14.26%) 3357419138 ( 9.70%) 559.86
dns 650288 ( 1.55%) 156631544 ( 0.45%) 240.86
realaud 33 ( 0.00%) 7037 ( 0.00%) 213.24
halflif 60 ( 0.00%) 8884 ( 0.00%) 148.07
starcra 67 ( 0.00%) 10996 ( 0.00%) 164.12
everque 1150 ( 0.00%) 213896 ( 0.00%) 186.00
unreal 72 ( 0.00%) 15358 ( 0.00%) 213.31
quake 27 ( 0.00%) 3715 ( 0.00%) 137.59
cuseeme 2 ( 0.00%) 144 ( 0.00%) 72.00
other 5344993 ( 12.71%) 3200361955 ( 9.25%) 598.76
icmp 490040 ( 1.17%) 67497631 ( 0.20%) 137.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5558 ( 0.01%) 1238764 ( 0.00%) 222.88
ip6 662210 ( 1.58%) 215918568 ( 0.62%) 326.06
other 19339 ( 0.05%) 4960282 ( 0.01%) 256.49
frag 1158 ( 0.00%) 1249882 ( 0.00%) 1079.35
ip6 482742 ( 1.15%) 548727136 ( 1.59%) 1136.69
tcp6 416773 ( 0.99%) 532188023 ( 1.54%) 1276.93
http(s) 8049 ( 0.02%) 2508357 ( 0.01%) 311.64
http(c) 18320 ( 0.04%) 1731872 ( 0.01%) 94.53
squid 15 ( 0.00%) 1342 ( 0.00%) 89.47
smtp 558 ( 0.00%) 122210 ( 0.00%) 219.01
ftp 61 ( 0.00%) 5426 ( 0.00%) 88.95
dns 1124 ( 0.00%) 280996 ( 0.00%) 250.00
bgp 119 ( 0.00%) 25971 ( 0.00%) 218.24
other 388527 ( 0.92%) 527511849 ( 1.52%) 1357.72
udp6 43054 ( 0.10%) 13713091 ( 0.04%) 318.51
dns 42245 ( 0.10%) 13568343 ( 0.04%) 321.18
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 808 ( 0.00%) 144641 ( 0.00%) 179.01
icmp6 22248 ( 0.05%) 2230015 ( 0.01%) 100.23
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 556 ( 0.00%) 580869 ( 0.00%) 1044.73
tcpdump file: 201103011400.dump.gz (1005.22 MB)