Traffic Trace Info
DumpFile: 201103141400.dump
FileSize: 1519.16MB
Id: 201103141400
StartTime: Mon Mar 14 14:00:00 2011
EndTime: Mon Mar 14 14:15:01 2011
TotalTime: 900.18 seconds
TotalCapSize: 1201.21MB CapLen: 96 bytes
# of packets: 20836912 (12674.07MB)
AvgRate: 118.11Mbps stddev:12.96M
IP flow (unique src/dst pair) Information
# of flows: 767407 (avg. 27.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.9% 2.8% 2.6% 1.6% 1.5% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 414971
Top 10 bandwidth usage (bytes/total in %):
7.6% 6.3% 5.4% 4.9% 3.8% 3.5% 3.5% 3.2% 3.1% 3.0%
# of IPv6 addresses: 3775
Top 10 bandwidth usage (bytes/total in %):
94.1% 93.9% 0.8% 0.5% 0.5% 0.5% 0.5% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103141400.pktlen.png)
detailed numbers
[ 32- 63]: 4248744
[ 64- 127]: 5723736
[ 128- 255]: 1194340
[ 256- 511]: 798434
[ 512- 1023]: 931309
[ 1024- 2047]: 7940349
Protocol Breakdown
![[protocol breakdown chart]](201103141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20836912 (100.00%) 13289725537 (100.00%) 637.80
ip 20492704 ( 98.35%) 12928638402 ( 97.28%) 630.89
tcp 15081262 ( 72.38%) 10418905610 ( 78.40%) 690.85
http(s) 5570447 ( 26.73%) 7193454064 ( 54.13%) 1291.36
http(c) 4283116 ( 20.56%) 1073623342 ( 8.08%) 250.66
squid 248364 ( 1.19%) 62777342 ( 0.47%) 252.76
smtp 288440 ( 1.38%) 221182523 ( 1.66%) 766.82
ftp 14290 ( 0.07%) 1111656 ( 0.01%) 77.79
pop3 16038 ( 0.08%) 5000345 ( 0.04%) 311.78
imap 9218 ( 0.04%) 4359250 ( 0.03%) 472.91
telnet 566 ( 0.00%) 36825 ( 0.00%) 65.06
ssh 184309 ( 0.88%) 19058346 ( 0.14%) 103.40
dns 4315 ( 0.02%) 312078 ( 0.00%) 72.32
bgp 534 ( 0.00%) 90484 ( 0.00%) 169.45
napster 17 ( 0.00%) 1280 ( 0.00%) 75.29
realaud 73 ( 0.00%) 10161 ( 0.00%) 139.19
rtsp 23802 ( 0.11%) 22867381 ( 0.17%) 960.73
icecast 15766 ( 0.08%) 11731530 ( 0.09%) 744.10
other 4421965 ( 21.22%) 1803288883 ( 13.57%) 407.80
udp 3228632 ( 15.49%) 1490200838 ( 11.21%) 461.56
dns 775205 ( 3.72%) 156221257 ( 1.18%) 201.52
realaud 68 ( 0.00%) 11534 ( 0.00%) 169.62
halflif 22 ( 0.00%) 1889 ( 0.00%) 85.86
starcra 45 ( 0.00%) 5997 ( 0.00%) 133.27
everque 215 ( 0.00%) 49354 ( 0.00%) 229.55
unreal 36 ( 0.00%) 6830 ( 0.00%) 189.72
quake 29 ( 0.00%) 2635 ( 0.00%) 90.86
cuseeme 7 ( 0.00%) 686 ( 0.00%) 98.00
other 2452835 ( 11.77%) 1333792630 ( 10.04%) 543.78
icmp 386308 ( 1.85%) 74846347 ( 0.56%) 193.75
ipip 182 ( 0.00%) 18976 ( 0.00%) 104.26
ipsec 4452 ( 0.02%) 1671256 ( 0.01%) 375.39
ip6 1774659 ( 8.52%) 938625239 ( 7.06%) 528.90
other 17209 ( 0.08%) 4370136 ( 0.03%) 253.94
frag 1368 ( 0.01%) 1380219 ( 0.01%) 1008.93
ip6 344208 ( 1.65%) 361087135 ( 2.72%) 1049.04
tcp6 286107 ( 1.37%) 345561710 ( 2.60%) 1207.81
http(s) 1088 ( 0.01%) 1381042 ( 0.01%) 1269.34
http(c) 2107 ( 0.01%) 260607 ( 0.00%) 123.69
squid 9 ( 0.00%) 746 ( 0.00%) 82.89
smtp 300 ( 0.00%) 70020 ( 0.00%) 233.40
ftp 22 ( 0.00%) 1934 ( 0.00%) 87.91
dns 2136 ( 0.01%) 555713 ( 0.00%) 260.17
bgp 90 ( 0.00%) 14987 ( 0.00%) 166.52
other 280355 ( 1.35%) 343276661 ( 2.58%) 1224.44
udp6 37213 ( 0.18%) 12266189 ( 0.09%) 329.62
dns 32895 ( 0.16%) 11220457 ( 0.08%) 341.10
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
other 4317 ( 0.02%) 1045624 ( 0.01%) 242.21
icmp6 18884 ( 0.09%) 1923077 ( 0.01%) 101.84
ip6 79 ( 0.00%) 10822 ( 0.00%) 136.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1895 ( 0.01%) 1321257 ( 0.01%) 697.23
tcpdump file: 201103141400.dump.gz (526.47 MB)