Traffic Trace Info
DumpFile: 201103161400.dump
FileSize: 1697.15MB
Id: 201103161400
StartTime: Wed Mar 16 14:00:01 2011
EndTime: Wed Mar 16 14:15:00 2011
TotalTime: 899.56 seconds
TotalCapSize: 1331.60MB CapLen: 96 bytes
# of packets: 23956253 (15836.89MB)
AvgRate: 147.69Mbps stddev:27.59M
IP flow (unique src/dst pair) Information
# of flows: 653888 (avg. 36.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 1.5% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 391353
Top 10 bandwidth usage (bytes/total in %):
24.2% 8.7% 7.0% 4.1% 3.8% 2.8% 2.8% 2.6% 2.3% 2.2%
# of IPv6 addresses: 3605
Top 10 bandwidth usage (bytes/total in %):
65.5% 36.8% 12.3% 11.9% 11.0% 10.2% 2.9% 2.9% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103161400.pktlen.png)
detailed numbers
[ 32- 63]: 5933448
[ 64- 127]: 5207197
[ 128- 255]: 1156747
[ 256- 511]: 608992
[ 512- 1023]: 1003304
[ 1024- 2047]: 10046565
Protocol Breakdown
![[protocol breakdown chart]](201103161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23956253 (100.00%) 16606179115 (100.00%) 693.19
ip 23609704 ( 98.55%) 16491777122 ( 99.31%) 698.52
tcp 19005170 ( 79.33%) 14509591022 ( 87.37%) 763.45
http(s) 8630748 ( 36.03%) 11651916073 ( 70.17%) 1350.05
http(c) 5160365 ( 21.54%) 503609081 ( 3.03%) 97.59
squid 273497 ( 1.14%) 140258650 ( 0.84%) 512.83
smtp 257926 ( 1.08%) 241116521 ( 1.45%) 934.83
nntp 12 ( 0.00%) 744 ( 0.00%) 62.00
ftp 23612 ( 0.10%) 2417629 ( 0.01%) 102.39
pop3 13444 ( 0.06%) 7333551 ( 0.04%) 545.49
imap 4456 ( 0.02%) 2385687 ( 0.01%) 535.39
telnet 658 ( 0.00%) 43114 ( 0.00%) 65.52
ssh 34284 ( 0.14%) 14021490 ( 0.08%) 408.98
dns 19974 ( 0.08%) 1637835 ( 0.01%) 82.00
bgp 553 ( 0.00%) 98437 ( 0.00%) 178.01
napster 80 ( 0.00%) 5231 ( 0.00%) 65.39
rtsp 8751 ( 0.04%) 10252667 ( 0.06%) 1171.60
icecast 344 ( 0.00%) 33053 ( 0.00%) 96.08
hotline 71 ( 0.00%) 5452 ( 0.00%) 76.79
other 4576379 ( 19.10%) 1934454847 ( 11.65%) 422.70
udp 2958672 ( 12.35%) 1524674607 ( 9.18%) 515.32
dns 656023 ( 2.74%) 136038690 ( 0.82%) 207.37
realaud 22 ( 0.00%) 3396 ( 0.00%) 154.36
halflif 14 ( 0.00%) 1415 ( 0.00%) 101.07
starcra 42 ( 0.00%) 3809 ( 0.00%) 90.69
everque 342 ( 0.00%) 72673 ( 0.00%) 212.49
unreal 61 ( 0.00%) 10384 ( 0.00%) 170.23
quake 39 ( 0.00%) 3763 ( 0.00%) 96.49
cuseeme 16 ( 0.00%) 1972 ( 0.00%) 123.25
other 2301883 ( 9.61%) 1388384481 ( 8.36%) 603.15
icmp 369403 ( 1.54%) 58823330 ( 0.35%) 159.24
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3056 ( 0.01%) 1104976 ( 0.01%) 361.58
ip6 1254443 ( 5.24%) 392101274 ( 2.36%) 312.57
other 18775 ( 0.08%) 5462643 ( 0.03%) 290.95
frag 9990 ( 0.04%) 11610196 ( 0.07%) 1162.18
ip6 346549 ( 1.45%) 114401993 ( 0.69%) 330.12
tcp6 285234 ( 1.19%) 97201988 ( 0.59%) 340.78
http(s) 12952 ( 0.05%) 18491074 ( 0.11%) 1427.66
http(c) 215669 ( 0.90%) 16409742 ( 0.10%) 76.09
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 1123 ( 0.00%) 1396188 ( 0.01%) 1243.27
ftp 18 ( 0.00%) 1566 ( 0.00%) 87.00
dns 232 ( 0.00%) 55019 ( 0.00%) 237.15
bgp 89 ( 0.00%) 15676 ( 0.00%) 176.13
other 55145 ( 0.23%) 60832215 ( 0.37%) 1103.13
udp6 38171 ( 0.16%) 11814466 ( 0.07%) 309.51
dns 33602 ( 0.14%) 11297353 ( 0.07%) 336.21
realaud 2 ( 0.00%) 214 ( 0.00%) 107.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 4566 ( 0.02%) 516792 ( 0.00%) 113.18
icmp6 18347 ( 0.08%) 2006482 ( 0.01%) 109.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4767 ( 0.02%) 3374977 ( 0.02%) 707.99
tcpdump file: 201103161400.dump.gz (564.04 MB)