Traffic Trace Info
DumpFile: 201103181400.dump
FileSize: 1742.06MB
Id: 201103181400
StartTime: Fri Mar 18 14:00:00 2011
EndTime: Fri Mar 18 14:15:00 2011
TotalTime: 899.92 seconds
TotalCapSize: 1374.95MB CapLen: 96 bytes
# of packets: 24058371 (15361.15MB)
AvgRate: 143.20Mbps stddev:25.92M
IP flow (unique src/dst pair) Information
# of flows: 1015347 (avg. 23.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.7% 1.6% 1.3% 1.2% 1.0% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 554071
Top 10 bandwidth usage (bytes/total in %):
13.7% 6.4% 6.1% 5.8% 5.1% 3.8% 3.8% 3.3% 2.4% 2.0%
# of IPv6 addresses: 4312
Top 10 bandwidth usage (bytes/total in %):
68.5% 64.5% 11.5% 6.1% 2.9% 2.8% 2.4% 2.3% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103181400.pktlen.png)
detailed numbers
[ 32- 63]: 4878881
[ 64- 127]: 6571367
[ 128- 255]: 1424454
[ 256- 511]: 768161
[ 512- 1023]: 657714
[ 1024- 2047]: 9757794
Protocol Breakdown
![[protocol breakdown chart]](201103181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24058371 (100.00%) 16107336169 (100.00%) 669.51
ip 23900086 ( 99.34%) 15996583614 ( 99.31%) 669.31
tcp 18792865 ( 78.11%) 13976582854 ( 86.77%) 743.72
http(s) 8130971 ( 33.80%) 10340604880 ( 64.20%) 1271.76
http(c) 4307187 ( 17.90%) 799652568 ( 4.96%) 185.66
squid 235464 ( 0.98%) 85495802 ( 0.53%) 363.10
smtp 499925 ( 2.08%) 221119367 ( 1.37%) 442.31
nntp 18 ( 0.00%) 1098 ( 0.00%) 61.00
ftp 31236 ( 0.13%) 4499415 ( 0.03%) 144.05
pop3 14145 ( 0.06%) 5717837 ( 0.04%) 404.23
imap 10017 ( 0.04%) 5073168 ( 0.03%) 506.46
telnet 1204 ( 0.01%) 102330 ( 0.00%) 84.99
ssh 17887 ( 0.07%) 4098812 ( 0.03%) 229.15
dns 14873 ( 0.06%) 1421273 ( 0.01%) 95.56
bgp 548 ( 0.00%) 96186 ( 0.00%) 175.52
napster 50 ( 0.00%) 4894 ( 0.00%) 97.88
realaud 39 ( 0.00%) 3871 ( 0.00%) 99.26
rtsp 6213 ( 0.03%) 7676904 ( 0.05%) 1235.62
icecast 1212 ( 0.01%) 111251 ( 0.00%) 91.79
hotline 17 ( 0.00%) 1068 ( 0.00%) 62.82
other 5521858 ( 22.95%) 2500902070 ( 15.53%) 452.91
udp 3328368 ( 13.83%) 1513802247 ( 9.40%) 454.82
dns 812418 ( 3.38%) 172312218 ( 1.07%) 212.10
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 22 ( 0.00%) 3901 ( 0.00%) 177.32
halflif 51 ( 0.00%) 4151 ( 0.00%) 81.39
starcra 31 ( 0.00%) 4190 ( 0.00%) 135.16
everque 261 ( 0.00%) 38882 ( 0.00%) 148.97
unreal 21 ( 0.00%) 3089 ( 0.00%) 147.10
quake 28 ( 0.00%) 2574 ( 0.00%) 91.93
cuseeme 3 ( 0.00%) 488 ( 0.00%) 162.67
other 2509326 ( 10.43%) 1340879065 ( 8.32%) 534.36
icmp 402494 ( 1.67%) 70116146 ( 0.44%) 174.20
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2954 ( 0.01%) 915796 ( 0.01%) 310.02
ip6 1355298 ( 5.63%) 430024848 ( 2.67%) 317.29
other 17923 ( 0.07%) 5122563 ( 0.03%) 285.81
frag 17361 ( 0.07%) 13278594 ( 0.08%) 764.85
ip6 158285 ( 0.66%) 110752555 ( 0.69%) 699.70
tcp6 104491 ( 0.43%) 98868414 ( 0.61%) 946.19
http(s) 3378 ( 0.01%) 4603489 ( 0.03%) 1362.79
http(c) 18700 ( 0.08%) 1641679 ( 0.01%) 87.79
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 277 ( 0.00%) 159052 ( 0.00%) 574.19
ftp 53 ( 0.00%) 4654 ( 0.00%) 87.81
dns 116 ( 0.00%) 34845 ( 0.00%) 300.39
bgp 96 ( 0.00%) 17874 ( 0.00%) 186.19
other 81868 ( 0.34%) 92406567 ( 0.57%) 1128.73
udp6 28743 ( 0.12%) 9545889 ( 0.06%) 332.11
dns 26702 ( 0.11%) 9261413 ( 0.06%) 346.84
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2040 ( 0.01%) 284369 ( 0.00%) 139.40
icmp6 24882 ( 0.10%) 2276245 ( 0.01%) 91.48
ip6 90 ( 0.00%) 12120 ( 0.00%) 134.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 48 ( 0.00%) 45671 ( 0.00%) 951.48
tcpdump file: 201103181400.dump.gz (619.68 MB)