Traffic Trace Info
DumpFile: 201103061400.dump
FileSize: 2244.74MB
Id: 201103061400
StartTime: Sun Mar 6 14:00:00 2011
EndTime: Sun Mar 6 14:15:00 2011
TotalTime: 900.10 seconds
TotalCapSize: 1757.13MB CapLen: 96 bytes
# of packets: 31955275 (24692.56MB)
AvgRate: 230.17Mbps stddev:39.19M
IP flow (unique src/dst pair) Information
# of flows: 1007676 (avg. 31.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 2.0% 1.6% 1.5% 1.3% 1.3% 1.3% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 592023
Top 10 bandwidth usage (bytes/total in %):
23.6% 8.3% 5.3% 4.7% 3.2% 2.1% 2.1% 2.0% 1.9% 1.8%
# of IPv6 addresses: 4138
Top 10 bandwidth usage (bytes/total in %):
38.1% 38.1% 14.1% 7.0% 6.9% 3.9% 3.0% 3.0% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103061400.pktlen.png)
detailed numbers
[ 32- 63]: 6132215
[ 64- 127]: 6935702
[ 128- 255]: 999204
[ 256- 511]: 734499
[ 512- 1023]: 1010108
[ 1024- 2047]: 16143547
Protocol Breakdown
![[protocol breakdown chart]](201103061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31955275 (100.00%) 25892025178 (100.00%) 810.26
ip 31839044 ( 99.64%) 25860156195 ( 99.88%) 812.22
tcp 26560321 ( 83.12%) 23337751527 ( 90.13%) 878.67
http(s) 12794321 ( 40.04%) 17595329093 ( 67.96%) 1375.25
http(c) 7014429 ( 21.95%) 1233876053 ( 4.77%) 175.91
squid 277239 ( 0.87%) 65358955 ( 0.25%) 235.75
smtp 124813 ( 0.39%) 36293356 ( 0.14%) 290.78
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 30822 ( 0.10%) 3092200 ( 0.01%) 100.32
pop3 8679 ( 0.03%) 6241577 ( 0.02%) 719.16
imap 11014 ( 0.03%) 13321570 ( 0.05%) 1209.51
telnet 1080 ( 0.00%) 69446 ( 0.00%) 64.30
ssh 42408 ( 0.13%) 8004818 ( 0.03%) 188.76
dns 9044 ( 0.03%) 707889 ( 0.00%) 78.27
bgp 443 ( 0.00%) 61697 ( 0.00%) 139.27
napster 112 ( 0.00%) 7888 ( 0.00%) 70.43
realaud 95 ( 0.00%) 7234 ( 0.00%) 76.15
rtsp 21897 ( 0.07%) 23571775 ( 0.09%) 1076.48
icecast 441 ( 0.00%) 44111 ( 0.00%) 100.02
hotline 15 ( 0.00%) 1169 ( 0.00%) 77.93
other 6223467 ( 19.48%) 4351762562 ( 16.81%) 699.25
udp 4494945 ( 14.07%) 2302699438 ( 8.89%) 512.29
dns 705222 ( 2.21%) 133062802 ( 0.51%) 188.68
realaud 44 ( 0.00%) 5484 ( 0.00%) 124.64
halflif 32 ( 0.00%) 4336 ( 0.00%) 135.50
starcra 73 ( 0.00%) 16509 ( 0.00%) 226.15
everque 2881 ( 0.01%) 1442998 ( 0.01%) 500.87
unreal 77 ( 0.00%) 15223 ( 0.00%) 197.70
quake 39 ( 0.00%) 4722 ( 0.00%) 121.08
cuseeme 9 ( 0.00%) 1069 ( 0.00%) 118.78
other 3786295 ( 11.85%) 2168041966 ( 8.37%) 572.60
icmp 382024 ( 1.20%) 69795630 ( 0.27%) 182.70
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 1864 ( 0.01%) 755828 ( 0.00%) 405.49
ip6 380968 ( 1.19%) 143415849 ( 0.55%) 376.45
other 18736 ( 0.06%) 5718543 ( 0.02%) 305.22
frag 1205 ( 0.00%) 1114994 ( 0.00%) 925.31
ip6 116231 ( 0.36%) 31868983 ( 0.12%) 274.19
tcp6 65074 ( 0.20%) 20774353 ( 0.08%) 319.24
http(s) 14460 ( 0.05%) 13146437 ( 0.05%) 909.16
http(c) 31868 ( 0.10%) 2955272 ( 0.01%) 92.73
squid 12 ( 0.00%) 984 ( 0.00%) 82.00
smtp 218 ( 0.00%) 57989 ( 0.00%) 266.00
ftp 35 ( 0.00%) 3138 ( 0.00%) 89.66
dns 459 ( 0.00%) 107001 ( 0.00%) 233.12
bgp 96 ( 0.00%) 16021 ( 0.00%) 166.89
other 17926 ( 0.06%) 4487511 ( 0.02%) 250.34
udp6 29997 ( 0.09%) 8872526 ( 0.03%) 295.78
dns 28608 ( 0.09%) 8650503 ( 0.03%) 302.38
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1387 ( 0.00%) 221807 ( 0.00%) 159.92
icmp6 20900 ( 0.07%) 2073446 ( 0.01%) 99.21
ip6 79 ( 0.00%) 10872 ( 0.00%) 137.62
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 150 ( 0.00%) 133570 ( 0.00%) 890.47
tcpdump file: 201103061400.dump.gz (747.33 MB)