Traffic Trace Info
DumpFile: 201103151400.dump
FileSize: 1551.77MB
Id: 201103151400
StartTime: Tue Mar 15 14:00:00 2011
EndTime: Tue Mar 15 14:15:00 2011
TotalTime: 900.24 seconds
TotalCapSize: 1216.14MB CapLen: 96 bytes
# of packets: 21995346 (15076.47MB)
AvgRate: 140.48Mbps stddev:23.37M
IP flow (unique src/dst pair) Information
# of flows: 718586 (avg. 30.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.2% 2.8% 2.7% 2.4% 2.4% 1.9% 1.6% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 442366
Top 10 bandwidth usage (bytes/total in %):
17.0% 7.9% 5.6% 5.2% 3.5% 3.5% 3.2% 3.2% 2.9% 2.9%
# of IPv6 addresses: 3981
Top 10 bandwidth usage (bytes/total in %):
16.1% 12.5% 8.0% 7.8% 6.9% 6.7% 6.6% 6.3% 6.3% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103151400.pktlen.png)
detailed numbers
[ 32- 63]: 4595013
[ 64- 127]: 4981488
[ 128- 255]: 1169831
[ 256- 511]: 666669
[ 512- 1023]: 933031
[ 1024- 2047]: 9649314
Protocol Breakdown
![[protocol breakdown chart]](201103151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21995346 (100.00%) 15808822465 (100.00%) 718.73
ip 21920316 ( 99.66%) 15785353792 ( 99.85%) 720.12
tcp 17218360 ( 78.28%) 13587500628 ( 85.95%) 789.13
http(s) 8075913 ( 36.72%) 10576184360 ( 66.90%) 1309.60
http(c) 3755644 ( 17.07%) 433902229 ( 2.74%) 115.53
squid 243941 ( 1.11%) 92240402 ( 0.58%) 378.13
smtp 108188 ( 0.49%) 50127647 ( 0.32%) 463.34
nntp 10 ( 0.00%) 670 ( 0.00%) 67.00
ftp 49956 ( 0.23%) 4616508 ( 0.03%) 92.41
pop3 28447 ( 0.13%) 31600285 ( 0.20%) 1110.85
imap 17875 ( 0.08%) 1530973 ( 0.01%) 85.65
telnet 487 ( 0.00%) 30136 ( 0.00%) 61.88
ssh 52417 ( 0.24%) 7878171 ( 0.05%) 150.30
dns 7899 ( 0.04%) 845786 ( 0.01%) 107.08
bgp 585 ( 0.00%) 114717 ( 0.00%) 196.10
napster 11 ( 0.00%) 758 ( 0.00%) 68.91
realaud 63 ( 0.00%) 6022 ( 0.00%) 95.59
rtsp 8746 ( 0.04%) 10218118 ( 0.06%) 1168.32
icecast 11089 ( 0.05%) 7871130 ( 0.05%) 709.81
hotline 2 ( 0.00%) 138 ( 0.00%) 69.00
other 4857083 ( 22.08%) 2370332338 ( 14.99%) 488.02
udp 3245633 ( 14.76%) 1811769977 ( 11.46%) 558.22
dns 638712 ( 2.90%) 138107869 ( 0.87%) 216.23
realaud 122 ( 0.00%) 16223 ( 0.00%) 132.98
halflif 15 ( 0.00%) 1269 ( 0.00%) 84.60
starcra 109 ( 0.00%) 20025 ( 0.00%) 183.72
everque 256 ( 0.00%) 51419 ( 0.00%) 200.86
unreal 30 ( 0.00%) 5100 ( 0.00%) 170.00
quake 11 ( 0.00%) 1268 ( 0.00%) 115.27
cuseeme 11 ( 0.00%) 1795 ( 0.00%) 163.18
other 2605892 ( 11.85%) 1673299751 ( 10.58%) 642.12
icmp 347624 ( 1.58%) 56785363 ( 0.36%) 163.35
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 15437 ( 0.07%) 5972524 ( 0.04%) 386.90
ip6 1074263 ( 4.88%) 317099160 ( 2.01%) 295.18
other 18815 ( 0.09%) 6206980 ( 0.04%) 329.90
frag 2010 ( 0.01%) 1938280 ( 0.01%) 964.32
ip6 75030 ( 0.34%) 23468673 ( 0.15%) 312.79
tcp6 18910 ( 0.09%) 10037752 ( 0.06%) 530.82
http(s) 1203 ( 0.01%) 1472873 ( 0.01%) 1224.33
http(c) 2471 ( 0.01%) 297431 ( 0.00%) 120.37
squid 102 ( 0.00%) 9828 ( 0.00%) 96.35
smtp 674 ( 0.00%) 315212 ( 0.00%) 467.67
ftp 11 ( 0.00%) 1038 ( 0.00%) 94.36
dns 2290 ( 0.01%) 590098 ( 0.00%) 257.68
bgp 197 ( 0.00%) 132242 ( 0.00%) 671.28
other 11962 ( 0.05%) 7219030 ( 0.05%) 603.50
udp6 32384 ( 0.15%) 10983217 ( 0.07%) 339.16
dns 30245 ( 0.14%) 10623806 ( 0.07%) 351.26
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2137 ( 0.01%) 359204 ( 0.00%) 168.09
icmp6 23531 ( 0.11%) 2347003 ( 0.01%) 99.74
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 93 ( 0.00%) 85427 ( 0.00%) 918.57
tcpdump file: 201103151400.dump.gz (525.43 MB)