Traffic Trace Info
DumpFile: 201103121400.dump
FileSize: 1199.08MB
Id: 201103121400
StartTime: Sat Mar 12 14:00:00 2011
EndTime: Sat Mar 12 14:15:00 2011
TotalTime: 900.05 seconds
TotalCapSize: 940.56MB CapLen: 96 bytes
# of packets: 16941790 (10583.22MB)
AvgRate: 98.63Mbps stddev:16.33M
IP flow (unique src/dst pair) Information
# of flows: 672596 (avg. 25.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.4% 3.6% 2.6% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 372142
Top 10 bandwidth usage (bytes/total in %):
15.9% 15.9% 6.3% 5.2% 4.1% 3.9% 3.8% 3.3% 2.6% 2.6%
# of IPv6 addresses: 3701
Top 10 bandwidth usage (bytes/total in %):
45.7% 45.7% 22.6% 22.5% 8.8% 8.7% 8.2% 8.2% 1.7% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103121400.pktlen.png)
detailed numbers
[ 32- 63]: 3375145
[ 64- 127]: 4932181
[ 128- 255]: 872981
[ 256- 511]: 600190
[ 512- 1023]: 502393
[ 1024- 2047]: 6658900
Protocol Breakdown
![[protocol breakdown chart]](201103121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16941790 (100.00%) 11097308968 (100.00%) 655.03
ip 16752355 ( 98.88%) 10948531684 ( 98.66%) 653.55
tcp 12827982 ( 75.72%) 9531738453 ( 85.89%) 743.04
http(s) 4757408 ( 28.08%) 5690951804 ( 51.28%) 1196.23
http(c) 4460079 ( 26.33%) 2342675266 ( 21.11%) 525.25
squid 248836 ( 1.47%) 68502148 ( 0.62%) 275.29
smtp 134600 ( 0.79%) 36066975 ( 0.33%) 267.96
nntp 12 ( 0.00%) 732 ( 0.00%) 61.00
ftp 32091 ( 0.19%) 3421229 ( 0.03%) 106.61
pop3 9922 ( 0.06%) 2323716 ( 0.02%) 234.20
imap 5095 ( 0.03%) 2343562 ( 0.02%) 459.97
telnet 493 ( 0.00%) 47786 ( 0.00%) 96.93
ssh 15752 ( 0.09%) 2437835 ( 0.02%) 154.76
dns 10395 ( 0.06%) 982849 ( 0.01%) 94.55
bgp 719 ( 0.00%) 100204 ( 0.00%) 139.37
napster 24 ( 0.00%) 3486 ( 0.00%) 145.25
realaud 178 ( 0.00%) 16629 ( 0.00%) 93.42
rtsp 2573 ( 0.02%) 2563012 ( 0.02%) 996.12
icecast 33814 ( 0.20%) 23858672 ( 0.21%) 705.59
hotline 36 ( 0.00%) 2860 ( 0.00%) 79.44
other 3115955 ( 18.39%) 1355439688 ( 12.21%) 435.00
udp 3082493 ( 18.19%) 1188510141 ( 10.71%) 385.57
dns 769957 ( 4.54%) 140443469 ( 1.27%) 182.40
realaud 212 ( 0.00%) 25605 ( 0.00%) 120.78
halflif 20 ( 0.00%) 1602 ( 0.00%) 80.10
starcra 65 ( 0.00%) 7219 ( 0.00%) 111.06
everque 394 ( 0.00%) 71399 ( 0.00%) 181.22
unreal 35 ( 0.00%) 7041 ( 0.00%) 201.17
quake 30 ( 0.00%) 3111 ( 0.00%) 103.70
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 2311638 ( 13.64%) 1047833852 ( 9.44%) 453.29
icmp 409963 ( 2.42%) 73007611 ( 0.66%) 178.08
ipip 182 ( 0.00%) 18964 ( 0.00%) 104.20
ipsec 1177 ( 0.01%) 441030 ( 0.00%) 374.71
ip6 413401 ( 2.44%) 148988818 ( 1.34%) 360.40
other 17157 ( 0.10%) 5826667 ( 0.05%) 339.61
frag 1137 ( 0.01%) 1328451 ( 0.01%) 1168.38
ip6 189435 ( 1.12%) 148777284 ( 1.34%) 785.37
tcp6 138704 ( 0.82%) 135222062 ( 1.22%) 974.90
http(s) 7629 ( 0.05%) 2293964 ( 0.02%) 300.69
http(c) 12986 ( 0.08%) 1144695 ( 0.01%) 88.15
squid 43 ( 0.00%) 3634 ( 0.00%) 84.51
smtp 316 ( 0.00%) 60298 ( 0.00%) 190.82
ftp 2306 ( 0.01%) 214886 ( 0.00%) 93.19
ssh 15 ( 0.00%) 1290 ( 0.00%) 86.00
dns 1240 ( 0.01%) 327040 ( 0.00%) 263.74
bgp 90 ( 0.00%) 15050 ( 0.00%) 167.22
other 114079 ( 0.67%) 131161205 ( 1.18%) 1149.74
udp6 33710 ( 0.20%) 10735978 ( 0.10%) 318.48
dns 28840 ( 0.17%) 9649770 ( 0.09%) 334.60
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 4868 ( 0.03%) 1085984 ( 0.01%) 223.09
icmp6 15484 ( 0.09%) 1783604 ( 0.02%) 115.19
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1427 ( 0.01%) 1020620 ( 0.01%) 715.22
tcpdump file: 201103121400.dump.gz (427.24 MB)