Traffic Trace Info
DumpFile: 201103041400.dump
FileSize: 2805.92MB
Id: 201103041400
StartTime: Fri Mar 4 14:00:00 2011
EndTime: Fri Mar 4 14:15:01 2011
TotalTime: 900.79 seconds
TotalCapSize: -1894.15MB CapLen: 96 bytes
# of packets: 39587633 (29654.14MB)
AvgRate: 276.14Mbps stddev:48.94M
IP flow (unique src/dst pair) Information
# of flows: 1161368 (avg. 34.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 2.5% 1.8% 1.4% 1.3% 1.1% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 631042
Top 10 bandwidth usage (bytes/total in %):
11.5% 11.5% 10.6% 3.9% 3.7% 3.7% 3.6% 2.7% 2.6% 2.5%
# of IPv6 addresses: 4349
Top 10 bandwidth usage (bytes/total in %):
74.8% 74.8% 6.2% 5.0% 3.1% 3.1% 1.8% 1.7% 1.6% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103041400.pktlen.png)
detailed numbers
[ 32- 63]: 7589275
[ 64- 127]: 9081264
[ 128- 255]: 1522002
[ 256- 511]: 937652
[ 512- 1023]: 1233232
[ 1024- 2047]: 19224208
Protocol Breakdown
![[protocol breakdown chart]](201103041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39587633 (100.00%) 31094619850 (100.00%) 785.46
ip 39305231 ( 99.29%) 30937600086 ( 99.50%) 787.11
tcp 33066892 ( 83.53%) 28210210600 ( 90.72%) 853.13
http(s) 15506062 ( 39.17%) 19883038289 ( 63.94%) 1282.28
http(c) 12339935 ( 31.17%) 5597959273 ( 18.00%) 453.65
squid 321099 ( 0.81%) 101881475 ( 0.33%) 317.29
smtp 257445 ( 0.65%) 153650685 ( 0.49%) 596.83
ftp 33591 ( 0.08%) 2768645 ( 0.01%) 82.42
pop3 27272 ( 0.07%) 18666282 ( 0.06%) 684.45
imap 8273 ( 0.02%) 4107848 ( 0.01%) 496.54
telnet 966 ( 0.00%) 62526 ( 0.00%) 64.73
ssh 44282 ( 0.11%) 4642441 ( 0.01%) 104.84
dns 14718 ( 0.04%) 1122553 ( 0.00%) 76.27
bgp 921 ( 0.00%) 110093 ( 0.00%) 119.54
napster 565 ( 0.00%) 37740 ( 0.00%) 66.80
realaud 135 ( 0.00%) 22068 ( 0.00%) 163.47
rtsp 18308 ( 0.05%) 15717996 ( 0.05%) 858.53
icecast 366 ( 0.00%) 76319 ( 0.00%) 208.52
hotline 6 ( 0.00%) 390 ( 0.00%) 65.00
other 4492941 ( 11.35%) 2426345557 ( 7.80%) 540.04
udp 4813880 ( 12.16%) 2306545538 ( 7.42%) 479.14
dns 876793 ( 2.21%) 180820767 ( 0.58%) 206.23
realaud 64 ( 0.00%) 11417 ( 0.00%) 178.39
halflif 486 ( 0.00%) 175317 ( 0.00%) 360.73
starcra 38 ( 0.00%) 6300 ( 0.00%) 165.79
everque 333 ( 0.00%) 56939 ( 0.00%) 170.99
unreal 40 ( 0.00%) 6294 ( 0.00%) 157.35
quake 29 ( 0.00%) 3953 ( 0.00%) 136.31
cuseeme 2 ( 0.00%) 184 ( 0.00%) 92.00
other 3935829 ( 9.94%) 2125311733 ( 6.83%) 539.99
icmp 555280 ( 1.40%) 84062878 ( 0.27%) 151.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 312979 ( 0.79%) 49702430 ( 0.16%) 158.80
ip6 539833 ( 1.36%) 282945885 ( 0.91%) 524.14
other 16182 ( 0.04%) 4113485 ( 0.01%) 254.20
frag 1741 ( 0.00%) 1780589 ( 0.01%) 1022.74
ip6 282402 ( 0.71%) 157019764 ( 0.50%) 556.02
tcp6 218127 ( 0.55%) 141904554 ( 0.46%) 650.56
http(s) 7086 ( 0.02%) 2849657 ( 0.01%) 402.15
http(c) 15842 ( 0.04%) 1497231 ( 0.00%) 94.51
smtp 491 ( 0.00%) 101935 ( 0.00%) 207.61
ftp 56 ( 0.00%) 5018 ( 0.00%) 89.61
dns 482 ( 0.00%) 116423 ( 0.00%) 241.54
bgp 89 ( 0.00%) 13876 ( 0.00%) 155.91
other 194081 ( 0.49%) 137320414 ( 0.44%) 707.54
udp6 39575 ( 0.10%) 12330277 ( 0.04%) 311.57
dns 38105 ( 0.10%) 12070913 ( 0.04%) 316.78
other 1470 ( 0.00%) 259364 ( 0.00%) 176.44
icmp6 24080 ( 0.06%) 2346127 ( 0.01%) 97.43
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 504 ( 0.00%) 423010 ( 0.00%) 839.31
tcpdump file: 201103041400.dump.gz (928.94 MB)