Traffic Trace Info
DumpFile: 201103131400.dump
FileSize: 1612.00MB
Id: 201103131400
StartTime: Sun Mar 13 14:00:00 2011
EndTime: Sun Mar 13 14:15:00 2011
TotalTime: 899.97 seconds
TotalCapSize: 1262.40MB CapLen: 96 bytes
# of packets: 22910707 (17099.16MB)
AvgRate: 159.41Mbps stddev:25.44M
IP flow (unique src/dst pair) Information
# of flows: 735251 (avg. 31.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
33.1% 2.4% 1.7% 1.3% 1.3% 1.2% 1.2% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 411401
Top 10 bandwidth usage (bytes/total in %):
33.8% 33.8% 9.5% 4.4% 3.8% 3.8% 2.5% 2.5% 2.2% 1.9%
# of IPv6 addresses: 3871
Top 10 bandwidth usage (bytes/total in %):
52.7% 52.7% 20.1% 20.1% 12.4% 12.4% 3.9% 3.9% 2.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103131400.pktlen.png)
detailed numbers
[ 32- 63]: 4736009
[ 64- 127]: 4721098
[ 128- 255]: 803059
[ 256- 511]: 752490
[ 512- 1023]: 938535
[ 1024- 2047]: 10959516
Protocol Breakdown
![[protocol breakdown chart]](201103131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22910707 (100.00%) 17929770843 (100.00%) 782.59
ip 22759688 ( 99.34%) 17795140996 ( 99.25%) 781.87
tcp 18985303 ( 82.87%) 16508019543 ( 92.07%) 869.52
http(s) 6778266 ( 29.59%) 7249072600 ( 40.43%) 1069.46
http(c) 7456709 ( 32.55%) 6824149148 ( 38.06%) 915.17
squid 226082 ( 0.99%) 65083816 ( 0.36%) 287.88
smtp 116453 ( 0.51%) 35636381 ( 0.20%) 306.02
ftp 25029 ( 0.11%) 2611421 ( 0.01%) 104.34
pop3 5869 ( 0.03%) 3057755 ( 0.02%) 521.00
imap 7968 ( 0.03%) 6092924 ( 0.03%) 764.67
telnet 124 ( 0.00%) 8924 ( 0.00%) 71.97
ssh 16723 ( 0.07%) 4975575 ( 0.03%) 297.53
dns 10437 ( 0.05%) 1004207 ( 0.01%) 96.22
bgp 692 ( 0.00%) 237826 ( 0.00%) 343.68
napster 694 ( 0.00%) 46874 ( 0.00%) 67.54
realaud 104 ( 0.00%) 43104 ( 0.00%) 414.46
rtsp 13412 ( 0.06%) 5874133 ( 0.03%) 437.98
icecast 268 ( 0.00%) 32584 ( 0.00%) 121.58
hotline 18 ( 0.00%) 2271 ( 0.00%) 126.17
other 4326454 ( 18.88%) 2310089940 ( 12.88%) 533.95
udp 2739817 ( 11.96%) 1062827495 ( 5.93%) 387.92
dns 601909 ( 2.63%) 100612155 ( 0.56%) 167.16
realaud 144 ( 0.00%) 25649 ( 0.00%) 178.12
halflif 19 ( 0.00%) 1510 ( 0.00%) 79.47
starcra 59 ( 0.00%) 6748 ( 0.00%) 114.37
everque 401 ( 0.00%) 68126 ( 0.00%) 169.89
unreal 22 ( 0.00%) 3987 ( 0.00%) 181.23
quake 16 ( 0.00%) 1784 ( 0.00%) 111.50
cuseeme 3 ( 0.00%) 294 ( 0.00%) 98.00
other 2137157 ( 9.33%) 962032214 ( 5.37%) 450.15
icmp 595183 ( 2.60%) 87273898 ( 0.49%) 146.63
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 4777 ( 0.02%) 996718 ( 0.01%) 208.65
ip6 417884 ( 1.82%) 131335357 ( 0.73%) 314.29
other 16540 ( 0.07%) 4668813 ( 0.03%) 282.27
frag 677 ( 0.00%) 774758 ( 0.00%) 1144.40
ip6 151019 ( 0.66%) 134629847 ( 0.75%) 891.48
tcp6 104012 ( 0.45%) 122888348 ( 0.69%) 1181.48
http(s) 7092 ( 0.03%) 1934275 ( 0.01%) 272.74
http(c) 2878 ( 0.01%) 428017 ( 0.00%) 148.72
squid 13 ( 0.00%) 1082 ( 0.00%) 83.23
smtp 597 ( 0.00%) 105746 ( 0.00%) 177.13
ftp 42 ( 0.00%) 3728 ( 0.00%) 88.76
dns 463 ( 0.00%) 116258 ( 0.00%) 251.10
bgp 92 ( 0.00%) 19709 ( 0.00%) 214.23
icecast 3 ( 0.00%) 254 ( 0.00%) 84.67
other 92832 ( 0.41%) 120279279 ( 0.67%) 1295.67
udp6 30721 ( 0.13%) 9685387 ( 0.05%) 315.27
dns 27572 ( 0.12%) 9129476 ( 0.05%) 331.11
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3148 ( 0.01%) 555805 ( 0.00%) 176.56
icmp6 15980 ( 0.07%) 1841569 ( 0.01%) 115.24
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 195 ( 0.00%) 199355 ( 0.00%) 1022.33
tcpdump file: 201103131400.dump.gz (524.65 MB)