Traffic Trace Info
DumpFile: 201103051400.dump
FileSize: 3210.05MB
Id: 201103051400
StartTime: Sat Mar 5 14:00:00 2011
EndTime: Sat Mar 5 14:15:01 2011
TotalTime: 900.55 seconds
TotalCapSize: -1578.69MB CapLen: 96 bytes
# of packets: 45398810 (36952.14MB)
AvgRate: 344.19Mbps stddev:58.17M
IP flow (unique src/dst pair) Information
# of flows: 857229 (avg. 52.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.4% 1.1% 1.1% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 488274
Top 10 bandwidth usage (bytes/total in %):
19.1% 13.5% 13.5% 10.2% 4.7% 4.3% 3.6% 2.8% 1.9% 1.7%
# of IPv6 addresses: 4382
Top 10 bandwidth usage (bytes/total in %):
33.9% 19.2% 18.6% 17.1% 7.8% 7.5% 5.5% 5.4% 4.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103051400.pktlen.png)
detailed numbers
[ 32- 63]: 7907114
[ 64- 127]: 9842030
[ 128- 255]: 1190186
[ 256- 511]: 892138
[ 512- 1023]: 1248912
[ 1024- 2047]: 24318430
Protocol Breakdown
![[protocol breakdown chart]](201103051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45398810 (100.00%) 38747126713 (100.00%) 853.48
ip 45282012 ( 99.74%) 38702763244 ( 99.89%) 854.71
tcp 39369349 ( 86.72%) 35751720588 ( 92.27%) 908.11
http(s) 18399451 ( 40.53%) 24390910203 ( 62.95%) 1325.63
http(c) 14723953 ( 32.43%) 7318459185 ( 18.89%) 497.04
squid 263335 ( 0.58%) 86407551 ( 0.22%) 328.13
smtp 199836 ( 0.44%) 106261530 ( 0.27%) 531.74
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 24119 ( 0.05%) 2167406 ( 0.01%) 89.86
pop3 37191 ( 0.08%) 10800465 ( 0.03%) 290.41
imap 3947 ( 0.01%) 2085007 ( 0.01%) 528.25
telnet 201 ( 0.00%) 12762 ( 0.00%) 63.49
ssh 21516 ( 0.05%) 3132908 ( 0.01%) 145.61
dns 21445 ( 0.05%) 1613738 ( 0.00%) 75.25
bgp 567 ( 0.00%) 104845 ( 0.00%) 184.91
napster 298 ( 0.00%) 23864 ( 0.00%) 80.08
realaud 58 ( 0.00%) 6344 ( 0.00%) 109.38
rtsp 6602 ( 0.01%) 7700214 ( 0.02%) 1166.35
icecast 486 ( 0.00%) 58606 ( 0.00%) 120.59
hotline 113 ( 0.00%) 9378 ( 0.00%) 82.99
other 5666229 ( 12.48%) 3821966462 ( 9.86%) 674.52
udp 4920589 ( 10.84%) 2631915189 ( 6.79%) 534.88
dns 816712 ( 1.80%) 149655903 ( 0.39%) 183.24
realaud 72 ( 0.00%) 13322 ( 0.00%) 185.03
halflif 30 ( 0.00%) 2891 ( 0.00%) 96.37
starcra 34312 ( 0.08%) 2295420 ( 0.01%) 66.90
everque 224 ( 0.00%) 49742 ( 0.00%) 222.06
unreal 46 ( 0.00%) 8259 ( 0.00%) 179.54
quake 31 ( 0.00%) 3626 ( 0.00%) 116.97
cuseeme 3 ( 0.00%) 216 ( 0.00%) 72.00
other 4069030 ( 8.96%) 2479802961 ( 6.40%) 609.43
icmp 403231 ( 0.89%) 87125196 ( 0.22%) 216.07
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4257 ( 0.01%) 3070690 ( 0.01%) 721.33
ip6 566327 ( 1.25%) 224890467 ( 0.58%) 397.10
other 18074 ( 0.04%) 4021844 ( 0.01%) 222.52
frag 697 ( 0.00%) 734836 ( 0.00%) 1054.28
ip6 116798 ( 0.26%) 44363469 ( 0.11%) 379.83
tcp6 63706 ( 0.14%) 33246756 ( 0.09%) 521.88
http(s) 8137 ( 0.02%) 4345441 ( 0.01%) 534.03
http(c) 25758 ( 0.06%) 2363222 ( 0.01%) 91.75
smtp 181 ( 0.00%) 103587 ( 0.00%) 572.30
ftp 56 ( 0.00%) 5018 ( 0.00%) 89.61
dns 426 ( 0.00%) 100668 ( 0.00%) 236.31
bgp 92 ( 0.00%) 14631 ( 0.00%) 159.03
other 29056 ( 0.06%) 26314189 ( 0.07%) 905.64
udp6 28898 ( 0.06%) 8600586 ( 0.02%) 297.62
dns 27632 ( 0.06%) 8401636 ( 0.02%) 304.05
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1265 ( 0.00%) 198842 ( 0.00%) 157.19
icmp6 23870 ( 0.05%) 2300431 ( 0.01%) 96.37
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 211 ( 0.00%) 200304 ( 0.00%) 949.31
tcpdump file: 201103051400.dump.gz (1034.31 MB)