Traffic Trace Info
DumpFile: 201103081400.dump
FileSize: 2860.70MB
Id: 201103081400
StartTime: Tue Mar 8 14:00:01 2011
EndTime: Tue Mar 8 14:15:00 2011
TotalTime: 899.63 seconds
TotalCapSize: -1856.57MB CapLen: 96 bytes
# of packets: 40715181 (27730.32MB)
AvgRate: 258.56Mbps stddev:92.09M
IP flow (unique src/dst pair) Information
# of flows: 1085006 (avg. 37.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 1.7% 1.6% 1.4% 1.2% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 572891
Top 10 bandwidth usage (bytes/total in %):
8.2% 8.1% 8.1% 7.5% 4.5% 4.0% 2.8% 2.5% 2.3% 1.8%
# of IPv6 addresses: 4357
Top 10 bandwidth usage (bytes/total in %):
78.6% 78.5% 13.2% 13.2% 2.1% 2.1% 0.6% 0.6% 0.6% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103081400.pktlen.png)
detailed numbers
[ 32- 63]: 8184344
[ 64- 127]: 10363485
[ 128- 255]: 1846700
[ 256- 511]: 1113605
[ 512- 1023]: 1516736
[ 1024- 2047]: 17690311
Protocol Breakdown
![[protocol breakdown chart]](201103081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40715181 (100.00%) 29077345788 (100.00%) 714.16
ip 40264406 ( 98.89%) 28564592365 ( 98.24%) 709.43
tcp 32467433 ( 79.74%) 23730429681 ( 81.61%) 730.90
http(s) 13544626 ( 33.27%) 18506356071 ( 63.65%) 1366.32
http(c) 10148409 ( 24.93%) 1716976926 ( 5.90%) 169.19
squid 305281 ( 0.75%) 122874444 ( 0.42%) 402.50
smtp 263414 ( 0.65%) 178027805 ( 0.61%) 675.85
nntp 7 ( 0.00%) 428 ( 0.00%) 61.14
ftp 38378 ( 0.09%) 4096433 ( 0.01%) 106.74
pop3 29983 ( 0.07%) 18705750 ( 0.06%) 623.88
imap 91113 ( 0.22%) 124086345 ( 0.43%) 1361.90
telnet 364 ( 0.00%) 23180 ( 0.00%) 63.68
ssh 2182350 ( 5.36%) 376790914 ( 1.30%) 172.65
dns 9132 ( 0.02%) 834953 ( 0.00%) 91.43
bgp 530 ( 0.00%) 79627 ( 0.00%) 150.24
napster 431 ( 0.00%) 29141 ( 0.00%) 67.61
realaud 107 ( 0.00%) 8883 ( 0.00%) 83.02
rtsp 194 ( 0.00%) 76142 ( 0.00%) 392.48
icecast 434 ( 0.00%) 50418 ( 0.00%) 116.17
hotline 11 ( 0.00%) 704 ( 0.00%) 64.00
other 5852668 ( 14.37%) 2681411457 ( 9.22%) 458.15
udp 6822668 ( 16.76%) 4574556084 ( 15.73%) 670.49
dns 838443 ( 2.06%) 171120532 ( 0.59%) 204.09
realaud 743 ( 0.00%) 52898 ( 0.00%) 71.20
halflif 38 ( 0.00%) 3560 ( 0.00%) 93.68
starcra 58 ( 0.00%) 8044 ( 0.00%) 138.69
everque 386 ( 0.00%) 82200 ( 0.00%) 212.95
unreal 24 ( 0.00%) 4062 ( 0.00%) 169.25
quake 44 ( 0.00%) 3869 ( 0.00%) 87.93
cuseeme 6 ( 0.00%) 458 ( 0.00%) 76.33
other 5982449 ( 14.69%) 4402854689 ( 15.14%) 735.96
icmp 426754 ( 1.05%) 73321054 ( 0.25%) 171.81
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6274 ( 0.02%) 1239176 ( 0.00%) 197.51
ip6 520848 ( 1.28%) 178268403 ( 0.61%) 342.27
other 20244 ( 0.05%) 6758697 ( 0.02%) 333.86
frag 1674713 ( 4.11%) 2326639783 ( 8.00%) 1389.28
ip6 450775 ( 1.11%) 512753423 ( 1.76%) 1137.49
tcp6 378621 ( 0.93%) 491060814 ( 1.69%) 1296.97
http(s) 10832 ( 0.03%) 4588179 ( 0.02%) 423.58
http(c) 12276 ( 0.03%) 1100225 ( 0.00%) 89.62
squid 16 ( 0.00%) 1352 ( 0.00%) 84.50
smtp 603 ( 0.00%) 112899 ( 0.00%) 187.23
ftp 55 ( 0.00%) 4932 ( 0.00%) 89.67
dns 1630 ( 0.00%) 440096 ( 0.00%) 270.00
bgp 99 ( 0.00%) 21230 ( 0.00%) 214.44
other 353110 ( 0.87%) 484791901 ( 1.67%) 1372.92
udp6 47008 ( 0.12%) 17157137 ( 0.06%) 364.98
dns 43131 ( 0.11%) 16417072 ( 0.06%) 380.63
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 3876 ( 0.01%) 739961 ( 0.00%) 190.91
icmp6 21879 ( 0.05%) 2251192 ( 0.01%) 102.89
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3155 ( 0.01%) 2269024 ( 0.01%) 719.18
tcpdump file: 201103081400.dump.gz (977.03 MB)