Traffic Trace Info
DumpFile: 201103021400.dump
FileSize: 4066.55MB
Id: 201103021400
StartTime: Wed Mar 2 14:00:01 2011
EndTime: Wed Mar 2 14:15:00 2011
TotalTime: 899.08 seconds
TotalCapSize: -918.92MB CapLen: 96 bytes
# of packets: 58291700 (47121.75MB)
AvgRate: 439.40Mbps stddev:174.32M
IP flow (unique src/dst pair) Information
# of flows: 900829 (avg. 64.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 6.5% 3.3% 3.2% 2.9% 2.7% 2.3% 1.6% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 465331
Top 10 bandwidth usage (bytes/total in %):
16.2% 13.7% 13.7% 7.5% 6.7% 6.5% 3.8% 3.4% 3.3% 3.3%
# of IPv6 addresses: 4261
Top 10 bandwidth usage (bytes/total in %):
55.0% 50.0% 23.4% 23.4% 6.8% 6.8% 3.2% 2.0% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103021400.pktlen.png)
detailed numbers
[ 32- 63]: 9827571
[ 64- 127]: 12967428
[ 128- 255]: 1503549
[ 256- 511]: 1023712
[ 512- 1023]: 2093458
[ 1024- 2047]: 30875982
Protocol Breakdown
![[protocol breakdown chart]](201103021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58291700 (100.00%) 49410737646 (100.00%) 847.65
ip 57806139 ( 99.17%) 49025848911 ( 99.22%) 848.11
tcp 45681732 ( 78.37%) 38236317998 ( 77.38%) 837.02
http(s) 22890326 ( 39.27%) 31711754779 ( 64.18%) 1385.38
http(c) 16012751 ( 27.47%) 3463789826 ( 7.01%) 216.31
squid 265565 ( 0.46%) 81443130 ( 0.16%) 306.68
smtp 313168 ( 0.54%) 214063917 ( 0.43%) 683.54
nntp 12 ( 0.00%) 744 ( 0.00%) 62.00
ftp 48418 ( 0.08%) 4047418 ( 0.01%) 83.59
pop3 19923 ( 0.03%) 4749487 ( 0.01%) 238.39
imap 10108 ( 0.02%) 4668898 ( 0.01%) 461.90
telnet 7588 ( 0.01%) 509374 ( 0.00%) 67.13
ssh 737043 ( 1.26%) 113111559 ( 0.23%) 153.47
dns 12245 ( 0.02%) 1044835 ( 0.00%) 85.33
bgp 790 ( 0.00%) 123420 ( 0.00%) 156.23
napster 51 ( 0.00%) 8040 ( 0.00%) 157.65
realaud 111 ( 0.00%) 7606 ( 0.00%) 68.52
rtsp 21715 ( 0.04%) 21750784 ( 0.04%) 1001.65
icecast 9078 ( 0.02%) 619439 ( 0.00%) 68.24
other 5332831 ( 9.15%) 2614624202 ( 5.29%) 490.29
udp 11117003 ( 19.07%) 10457352470 ( 21.16%) 940.66
dns 892657 ( 1.53%) 180790290 ( 0.37%) 202.53
rip 182 ( 0.00%) 253540 ( 0.00%) 1393.08
realaud 173 ( 0.00%) 187731 ( 0.00%) 1085.15
halflif 33 ( 0.00%) 4160 ( 0.00%) 126.06
starcra 175 ( 0.00%) 195783 ( 0.00%) 1118.76
everque 395 ( 0.00%) 250107 ( 0.00%) 633.18
unreal 45 ( 0.00%) 8798 ( 0.00%) 195.51
quake 323 ( 0.00%) 382363 ( 0.00%) 1183.79
cuseeme 170 ( 0.00%) 11753 ( 0.00%) 69.14
other 10116382 ( 17.35%) 10130966483 ( 20.50%) 1001.44
icmp 417454 ( 0.72%) 61325837 ( 0.12%) 146.90
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4890 ( 0.01%) 2581540 ( 0.01%) 527.92
ip6 567012 ( 0.97%) 261597590 ( 0.53%) 461.36
other 17864 ( 0.03%) 6654316 ( 0.01%) 372.50
frag 4835987 ( 8.30%) 6711762121 ( 13.58%) 1387.88
ip6 485559 ( 0.83%) 384888615 ( 0.78%) 792.67
tcp6 419504 ( 0.72%) 369053998 ( 0.75%) 879.74
http(s) 24986 ( 0.04%) 25336450 ( 0.05%) 1014.03
http(c) 51345 ( 0.09%) 4336678 ( 0.01%) 84.46
squid 25493 ( 0.04%) 30279237 ( 0.06%) 1187.75
smtp 1438 ( 0.00%) 416725 ( 0.00%) 289.79
ftp 56 ( 0.00%) 5018 ( 0.00%) 89.61
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 1124 ( 0.00%) 294231 ( 0.00%) 261.77
bgp 95 ( 0.00%) 15093 ( 0.00%) 158.87
other 314965 ( 0.54%) 308370394 ( 0.62%) 979.06
udp6 42911 ( 0.07%) 13024844 ( 0.03%) 303.53
dns 41685 ( 0.07%) 12814797 ( 0.03%) 307.42
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1225 ( 0.00%) 209941 ( 0.00%) 171.38
icmp6 22308 ( 0.04%) 2159159 ( 0.00%) 96.79
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 722 ( 0.00%) 635104 ( 0.00%) 879.65
tcpdump file: 201103021400.dump.gz (1268.54 MB)