Traffic Trace Info
DumpFile: 201103071400.dump
FileSize: 3714.24MB
Id: 201103071400
StartTime: Mon Mar 7 14:00:01 2011
EndTime: Mon Mar 7 14:15:01 2011
TotalTime: 900.00 seconds
TotalCapSize: -1195.99MB CapLen: 96 bytes
# of packets: 53360687 (44072.76MB)
AvgRate: 410.78Mbps stddev:45.96M
IP flow (unique src/dst pair) Information
# of flows: 943992 (avg. 56.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.4% 3.5% 3.2% 2.4% 2.4% 2.4% 2.2% 1.8% 1.7% 1.7%
IP address Information
# of IPv4 addresses: 507360
Top 10 bandwidth usage (bytes/total in %):
20.9% 18.7% 18.7% 6.6% 4.2% 4.0% 4.0% 3.5% 3.5% 3.3%
# of IPv6 addresses: 3636
Top 10 bandwidth usage (bytes/total in %):
62.6% 62.6% 4.0% 2.9% 2.5% 2.5% 2.3% 2.0% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103071400.pktlen.png)
detailed numbers
[ 32- 63]: 10963894
[ 64- 127]: 9122701
[ 128- 255]: 1499533
[ 256- 511]: 1156413
[ 512- 1023]: 1606411
[ 1024- 2047]: 29011735
Protocol Breakdown
![[protocol breakdown chart]](201103071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53360687 (100.00%) 46213640566 (100.00%) 866.06
ip 53225008 ( 99.75%) 46145592639 ( 99.85%) 866.99
tcp 47283214 ( 88.61%) 43206991408 ( 93.49%) 913.79
http(s) 23543303 ( 44.12%) 29117024560 ( 63.01%) 1236.74
http(c) 17645000 ( 33.07%) 10804452999 ( 23.38%) 612.32
squid 297679 ( 0.56%) 105916713 ( 0.23%) 355.81
smtp 235766 ( 0.44%) 128641376 ( 0.28%) 545.63
nntp 8 ( 0.00%) 536 ( 0.00%) 67.00
ftp 64431 ( 0.12%) 6805320 ( 0.01%) 105.62
pop3 69380 ( 0.13%) 30147961 ( 0.07%) 434.53
imap 8440 ( 0.02%) 6973987 ( 0.02%) 826.30
telnet 669 ( 0.00%) 42212 ( 0.00%) 63.10
ssh 216089 ( 0.40%) 24048504 ( 0.05%) 111.29
dns 10913 ( 0.02%) 950113 ( 0.00%) 87.06
bgp 855 ( 0.00%) 100813 ( 0.00%) 117.91
napster 23 ( 0.00%) 7554 ( 0.00%) 328.43
realaud 5147 ( 0.01%) 7592781 ( 0.02%) 1475.19
rtsp 12942 ( 0.02%) 8188407 ( 0.02%) 632.70
icecast 826 ( 0.00%) 66022 ( 0.00%) 79.93
hotline 9 ( 0.00%) 600 ( 0.00%) 66.67
other 5171734 ( 9.69%) 2966030950 ( 6.42%) 573.51
udp 4937917 ( 9.25%) 2612009191 ( 5.65%) 528.97
dns 871704 ( 1.63%) 180577793 ( 0.39%) 207.15
realaud 10147 ( 0.02%) 4262595 ( 0.01%) 420.08
halflif 20 ( 0.00%) 1913 ( 0.00%) 95.65
starcra 55 ( 0.00%) 10640 ( 0.00%) 193.45
everque 1342 ( 0.00%) 426476 ( 0.00%) 317.79
unreal 45 ( 0.00%) 8368 ( 0.00%) 185.96
quake 35 ( 0.00%) 3454 ( 0.00%) 98.69
cuseeme 2 ( 0.00%) 583 ( 0.00%) 291.50
other 4049014 ( 7.59%) 2426326345 ( 5.25%) 599.24
icmp 424775 ( 0.80%) 83001506 ( 0.18%) 195.40
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 6156 ( 0.01%) 3207412 ( 0.01%) 521.02
ip6 430887 ( 0.81%) 169450668 ( 0.37%) 393.26
other 141873 ( 0.27%) 70913074 ( 0.15%) 499.83
frag 18825 ( 0.04%) 14527291 ( 0.03%) 771.70
ip6 135679 ( 0.25%) 68047927 ( 0.15%) 501.54
tcp6 78072 ( 0.15%) 52572481 ( 0.11%) 673.38
http(s) 9143 ( 0.02%) 4229334 ( 0.01%) 462.58
http(c) 32566 ( 0.06%) 2828384 ( 0.01%) 86.85
smtp 420 ( 0.00%) 85454 ( 0.00%) 203.46
ftp 56 ( 0.00%) 5078 ( 0.00%) 90.68
dns 851 ( 0.00%) 208092 ( 0.00%) 244.53
bgp 93 ( 0.00%) 18053 ( 0.00%) 194.12
other 34943 ( 0.07%) 45198086 ( 0.10%) 1293.48
udp6 41829 ( 0.08%) 13489685 ( 0.03%) 322.50
dns 38846 ( 0.07%) 12837055 ( 0.03%) 330.46
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2980 ( 0.01%) 652308 ( 0.00%) 218.90
icmp6 15411 ( 0.03%) 1744953 ( 0.00%) 113.23
ip6 79 ( 0.00%) 10822 ( 0.00%) 136.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 258 ( 0.00%) 225906 ( 0.00%) 875.60
tcpdump file: 201103071400.dump.gz (1179.86 MB)