Traffic Trace Info
DumpFile: 201103171400.dump
FileSize: 1719.85MB
Id: 201103171400
StartTime: Thu Mar 17 14:00:00 2011
EndTime: Thu Mar 17 14:15:00 2011
TotalTime: 899.78 seconds
TotalCapSize: 1357.26MB CapLen: 96 bytes
# of packets: 23761821 (14921.86MB)
AvgRate: 139.14Mbps stddev:23.16M
IP flow (unique src/dst pair) Information
# of flows: 925380 (avg. 25.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 3.0% 1.7% 1.6% 1.6% 1.3% 1.3% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 611393
Top 10 bandwidth usage (bytes/total in %):
18.6% 8.3% 6.6% 6.3% 4.3% 3.3% 3.2% 3.2% 3.2% 3.1%
# of IPv6 addresses: 4001
Top 10 bandwidth usage (bytes/total in %):
50.9% 36.8% 9.1% 8.4% 8.4% 7.4% 7.4% 3.3% 3.3% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103171400.pktlen.png)
detailed numbers
[ 32- 63]: 4740852
[ 64- 127]: 6918645
[ 128- 255]: 1206025
[ 256- 511]: 721463
[ 512- 1023]: 589500
[ 1024- 2047]: 9585336
Protocol Breakdown
![[protocol breakdown chart]](201103171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23761821 (100.00%) 15646700729 (100.00%) 658.48
ip 23531411 ( 99.03%) 15534843372 ( 99.29%) 660.17
tcp 17465412 ( 73.50%) 12742488137 ( 81.44%) 729.58
http(s) 7671498 ( 32.28%) 9214846139 ( 58.89%) 1201.18
http(c) 4101383 ( 17.26%) 622640693 ( 3.98%) 151.81
squid 317068 ( 1.33%) 128926076 ( 0.82%) 406.62
smtp 137209 ( 0.58%) 90513364 ( 0.58%) 659.68
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 39524 ( 0.17%) 5106965 ( 0.03%) 129.21
pop3 24823 ( 0.10%) 21279101 ( 0.14%) 857.23
imap 1280 ( 0.01%) 189143 ( 0.00%) 147.77
telnet 55 ( 0.00%) 3738 ( 0.00%) 67.96
ssh 10010 ( 0.04%) 1867253 ( 0.01%) 186.54
dns 3353 ( 0.01%) 221901 ( 0.00%) 66.18
bgp 586 ( 0.00%) 132850 ( 0.00%) 226.71
napster 51 ( 0.00%) 4638 ( 0.00%) 90.94
realaud 21 ( 0.00%) 1396 ( 0.00%) 66.48
rtsp 6221 ( 0.03%) 7678280 ( 0.05%) 1234.25
icecast 22702 ( 0.10%) 15959916 ( 0.10%) 703.02
hotline 275 ( 0.00%) 17658 ( 0.00%) 64.21
other 5129312 ( 21.59%) 2633096560 ( 16.83%) 513.34
udp 3569773 ( 15.02%) 1677968080 ( 10.72%) 470.05
dns 577502 ( 2.43%) 124841755 ( 0.80%) 216.18
realaud 9 ( 0.00%) 1138 ( 0.00%) 126.44
halflif 19 ( 0.00%) 3254 ( 0.00%) 171.26
starcra 82 ( 0.00%) 11571 ( 0.00%) 141.11
everque 175 ( 0.00%) 28584 ( 0.00%) 163.34
unreal 15 ( 0.00%) 1969 ( 0.00%) 131.27
quake 14 ( 0.00%) 1254 ( 0.00%) 89.57
cuseeme 19 ( 0.00%) 1614 ( 0.00%) 84.95
other 2991747 ( 12.59%) 1552941490 ( 9.93%) 519.08
icmp 531490 ( 2.24%) 83312143 ( 0.53%) 156.75
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 10974 ( 0.05%) 3179604 ( 0.02%) 289.74
ip6 1935139 ( 8.14%) 1021556299 ( 6.53%) 527.90
other 18437 ( 0.08%) 6319729 ( 0.04%) 342.77
frag 1748 ( 0.01%) 1962022 ( 0.01%) 1122.44
ip6 230410 ( 0.97%) 111857357 ( 0.71%) 485.47
tcp6 162840 ( 0.69%) 92621039 ( 0.59%) 568.79
http(s) 9649 ( 0.04%) 11959173 ( 0.08%) 1239.42
http(c) 84767 ( 0.36%) 6661389 ( 0.04%) 78.58
squid 225 ( 0.00%) 20734 ( 0.00%) 92.15
smtp 253 ( 0.00%) 47669 ( 0.00%) 188.42
ftp 31 ( 0.00%) 2716 ( 0.00%) 87.61
dns 131 ( 0.00%) 31149 ( 0.00%) 237.78
bgp 93 ( 0.00%) 29000 ( 0.00%) 311.83
other 67691 ( 0.28%) 73869209 ( 0.47%) 1091.27
udp6 47615 ( 0.20%) 16002863 ( 0.10%) 336.09
dns 40771 ( 0.17%) 14012559 ( 0.09%) 343.69
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
other 6842 ( 0.03%) 1990091 ( 0.01%) 290.86
icmp6 18157 ( 0.08%) 2018229 ( 0.01%) 111.15
ip6 90 ( 0.00%) 12120 ( 0.00%) 134.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1678 ( 0.01%) 1199026 ( 0.01%) 714.56
tcpdump file: 201103171400.dump.gz (584.88 MB)