Traffic Trace Info
DumpFile: 201103031400.dump
FileSize: 2407.69MB
Id: 201103031400
StartTime: Thu Mar 3 14:00:01 2011
EndTime: Thu Mar 3 14:15:00 2011
TotalTime: 899.27 seconds
TotalCapSize: 1885.96MB CapLen: 96 bytes
# of packets: 34191465 (23885.92MB)
AvgRate: 222.83Mbps stddev:26.39M
IP flow (unique src/dst pair) Information
# of flows: 1145259 (avg. 29.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.7% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 566046
Top 10 bandwidth usage (bytes/total in %):
9.5% 9.2% 5.2% 4.8% 4.7% 2.1% 2.1% 2.1% 1.9% 1.8%
# of IPv6 addresses: 3957
Top 10 bandwidth usage (bytes/total in %):
64.1% 64.1% 15.3% 10.8% 10.8% 10.6% 3.4% 2.6% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103031400.pktlen.png)
detailed numbers
[ 32- 63]: 7303882
[ 64- 127]: 7984732
[ 128- 255]: 1374123
[ 256- 511]: 914101
[ 512- 1023]: 1170261
[ 1024- 2047]: 15444366
Protocol Breakdown
![[protocol breakdown chart]](201103031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34191465 (100.00%) 25046204429 (100.00%) 732.53
ip 33109687 ( 96.84%) 24557673212 ( 98.05%) 741.71
tcp 26433548 ( 77.31%) 20718006377 ( 82.72%) 783.78
http(s) 12378271 ( 36.20%) 16864310717 ( 67.33%) 1362.41
http(c) 8723460 ( 25.51%) 1565120734 ( 6.25%) 179.42
squid 281746 ( 0.82%) 105864390 ( 0.42%) 375.74
smtp 264820 ( 0.77%) 118888342 ( 0.47%) 448.94
nntp 5 ( 0.00%) 300 ( 0.00%) 60.00
ftp 31853 ( 0.09%) 2676579 ( 0.01%) 84.03
pop3 56566 ( 0.17%) 8154082 ( 0.03%) 144.15
imap 7235 ( 0.02%) 3828607 ( 0.02%) 529.18
telnet 1254 ( 0.00%) 142911 ( 0.00%) 113.96
ssh 27051 ( 0.08%) 7949152 ( 0.03%) 293.86
dns 24351 ( 0.07%) 1779820 ( 0.01%) 73.09
bgp 595 ( 0.00%) 97742 ( 0.00%) 164.27
napster 30 ( 0.00%) 3505 ( 0.00%) 116.83
realaud 287 ( 0.00%) 31085 ( 0.00%) 108.31
rtsp 16238 ( 0.05%) 15670515 ( 0.06%) 965.05
icecast 961 ( 0.00%) 91807 ( 0.00%) 95.53
hotline 14 ( 0.00%) 950 ( 0.00%) 67.86
other 4618811 ( 13.51%) 2023395139 ( 8.08%) 438.08
udp 5679101 ( 16.61%) 3568391482 ( 14.25%) 628.34
dns 883960 ( 2.59%) 178953982 ( 0.71%) 202.45
realaud 11573 ( 0.03%) 8281563 ( 0.03%) 715.59
halflif 581 ( 0.00%) 215132 ( 0.00%) 370.28
starcra 43 ( 0.00%) 7031 ( 0.00%) 163.51
everque 257 ( 0.00%) 39244 ( 0.00%) 152.70
unreal 73 ( 0.00%) 11258 ( 0.00%) 154.22
quake 29 ( 0.00%) 3935 ( 0.00%) 135.69
cuseeme 4 ( 0.00%) 402 ( 0.00%) 100.50
other 4782456 ( 13.99%) 3380808444 ( 13.50%) 706.92
icmp 460078 ( 1.35%) 72597485 ( 0.29%) 157.79
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4184 ( 0.01%) 1338876 ( 0.01%) 320.00
ip6 499401 ( 1.46%) 190904130 ( 0.76%) 382.27
other 33190 ( 0.10%) 6415592 ( 0.03%) 193.30
frag 887 ( 0.00%) 934683 ( 0.00%) 1053.76
ip6 1081778 ( 3.16%) 488531217 ( 1.95%) 451.60
tcp6 1022898 ( 2.99%) 473621378 ( 1.89%) 463.02
http(s) 18183 ( 0.05%) 15861855 ( 0.06%) 872.35
http(c) 53303 ( 0.16%) 4451395 ( 0.02%) 83.51
smtp 4808 ( 0.01%) 4463395 ( 0.02%) 928.33
ftp 227 ( 0.00%) 23372 ( 0.00%) 102.96
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 864 ( 0.00%) 211000 ( 0.00%) 244.21
bgp 87 ( 0.00%) 17326 ( 0.00%) 199.15
other 945424 ( 2.77%) 448592863 ( 1.79%) 474.49
udp6 39587 ( 0.12%) 12597411 ( 0.05%) 318.22
dns 38928 ( 0.11%) 12493739 ( 0.05%) 320.94
other 659 ( 0.00%) 103672 ( 0.00%) 157.32
icmp6 18898 ( 0.06%) 2025015 ( 0.01%) 107.15
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 283 ( 0.00%) 272157 ( 0.00%) 961.69
tcpdump file: 201103031400.dump.gz (807.82 MB)