Traffic Trace Info
DumpFile: 201103111400.dump
FileSize: 3008.75MB
Id: 201103111400
StartTime: Fri Mar 11 14:00:00 2011
EndTime: Fri Mar 11 14:15:00 2011
TotalTime: 899.76 seconds
TotalCapSize: -1724.58MB CapLen: 96 bytes
# of packets: 41767204 (30198.06MB)
AvgRate: 281.49Mbps stddev:42.52M
IP flow (unique src/dst pair) Information
# of flows: 1118171 (avg. 37.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.0% 2.2% 2.1% 1.9% 1.6% 1.5% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 594700
Top 10 bandwidth usage (bytes/total in %):
8.7% 7.3% 6.1% 6.1% 5.5% 5.0% 4.5% 4.0% 3.1% 2.7%
# of IPv6 addresses: 18342
Top 10 bandwidth usage (bytes/total in %):
33.0% 33.0% 24.3% 24.3% 13.9% 13.9% 13.9% 7.4% 2.8% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103111400.pktlen.png)
detailed numbers
[ 32- 63]: 7170944
[ 64- 127]: 10959567
[ 128- 255]: 1560964
[ 256- 511]: 1082598
[ 512- 1023]: 1343140
[ 1024- 2047]: 19649991
Protocol Breakdown
![[protocol breakdown chart]](201103111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41767204 (100.00%) 31664959187 (100.00%) 758.13
ip 41437574 ( 99.21%) 31419908858 ( 99.23%) 758.25
tcp 35571359 ( 85.17%) 28784978864 ( 90.90%) 809.22
http(s) 13696069 ( 32.79%) 18382285954 ( 58.05%) 1342.16
http(c) 10575800 ( 25.32%) 2199487815 ( 6.95%) 207.97
squid 880360 ( 2.11%) 833959330 ( 2.63%) 947.29
smtp 234496 ( 0.56%) 121141378 ( 0.38%) 516.60
ftp 38716 ( 0.09%) 3858955 ( 0.01%) 99.67
pop3 12173 ( 0.03%) 3381424 ( 0.01%) 277.78
imap 9200 ( 0.02%) 4858498 ( 0.02%) 528.10
telnet 793 ( 0.00%) 64137 ( 0.00%) 80.88
ssh 538567 ( 1.29%) 79694104 ( 0.25%) 147.97
dns 12568 ( 0.03%) 1271696 ( 0.00%) 101.19
bgp 579 ( 0.00%) 113807 ( 0.00%) 196.56
napster 6 ( 0.00%) 812 ( 0.00%) 135.33
realaud 5994 ( 0.01%) 9062144 ( 0.03%) 1511.87
rtsp 23433 ( 0.06%) 34905435 ( 0.11%) 1489.58
icecast 10712 ( 0.03%) 9313675 ( 0.03%) 869.46
hotline 50 ( 0.00%) 5285 ( 0.00%) 105.70
other 9531835 ( 22.82%) 7101573641 ( 22.43%) 745.04
udp 4900133 ( 11.73%) 2381765533 ( 7.52%) 486.06
dns 861009 ( 2.06%) 180030607 ( 0.57%) 209.09
rip 6 ( 0.00%) 1050 ( 0.00%) 175.00
realaud 11 ( 0.00%) 1479 ( 0.00%) 134.45
halflif 31 ( 0.00%) 2768 ( 0.00%) 89.29
starcra 63 ( 0.00%) 8439 ( 0.00%) 133.95
everque 267 ( 0.00%) 48427 ( 0.00%) 181.37
unreal 38 ( 0.00%) 6760 ( 0.00%) 177.89
quake 22 ( 0.00%) 3092 ( 0.00%) 140.55
cuseeme 10 ( 0.00%) 1964 ( 0.00%) 196.40
other 4038613 ( 9.67%) 2201623744 ( 6.95%) 545.14
icmp 460896 ( 1.10%) 93446880 ( 0.30%) 202.75
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15666 ( 0.04%) 13336792 ( 0.04%) 851.32
ip6 469466 ( 1.12%) 139000344 ( 0.44%) 296.08
other 19869 ( 0.05%) 7361175 ( 0.02%) 370.49
frag 474 ( 0.00%) 497932 ( 0.00%) 1050.49
ip6 329630 ( 0.79%) 245050329 ( 0.77%) 743.41
tcp6 222489 ( 0.53%) 220897786 ( 0.70%) 992.85
http(s) 109743 ( 0.26%) 98147242 ( 0.31%) 894.34
http(c) 13850 ( 0.03%) 1208932 ( 0.00%) 87.29
squid 15 ( 0.00%) 1270 ( 0.00%) 84.67
smtp 503 ( 0.00%) 148114 ( 0.00%) 294.46
ftp 45 ( 0.00%) 4030 ( 0.00%) 89.56
ssh 15 ( 0.00%) 1290 ( 0.00%) 86.00
dns 1226 ( 0.00%) 302162 ( 0.00%) 246.46
bgp 144 ( 0.00%) 18210 ( 0.00%) 126.46
other 96948 ( 0.23%) 121066536 ( 0.38%) 1248.78
udp6 49212 ( 0.12%) 16991386 ( 0.05%) 345.27
dns 40061 ( 0.10%) 14357002 ( 0.05%) 358.38
everque 4 ( 0.00%) 368 ( 0.00%) 92.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 9146 ( 0.02%) 2633910 ( 0.01%) 287.98
icmp6 55525 ( 0.13%) 5465084 ( 0.02%) 98.43
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2292 ( 0.01%) 1680817 ( 0.01%) 733.34
tcpdump file: 201103111400.dump.gz (975.54 MB)