Traffic Trace Info
DumpFile: 201103191400.dump
FileSize: 1795.67MB
Id: 201103191400
StartTime: Sat Mar 19 14:00:00 2011
EndTime: Sat Mar 19 14:15:00 2011
TotalTime: 900.31 seconds
TotalCapSize: 1410.88MB CapLen: 96 bytes
# of packets: 25216941 (17811.03MB)
AvgRate: 165.92Mbps stddev:40.09M
IP flow (unique src/dst pair) Information
# of flows: 873123 (avg. 28.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.8% 1.7% 1.4% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 537940
Top 10 bandwidth usage (bytes/total in %):
29.3% 6.9% 5.9% 4.8% 3.4% 2.7% 2.5% 2.3% 2.2% 2.2%
# of IPv6 addresses: 6347
Top 10 bandwidth usage (bytes/total in %):
42.2% 40.6% 40.3% 40.3% 3.0% 3.0% 2.3% 1.7% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103191400.pktlen.png)
detailed numbers
[ 32- 63]: 5426518
[ 64- 127]: 5573294
[ 128- 255]: 1353763
[ 256- 511]: 710059
[ 512- 1023]: 533952
[ 1024- 2047]: 11619355
Protocol Breakdown
![[protocol breakdown chart]](201103191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25216941 (100.00%) 18676223741 (100.00%) 740.62
ip 24984539 ( 99.08%) 18453670167 ( 98.81%) 738.60
tcp 19198856 ( 76.13%) 16162075812 ( 86.54%) 841.82
http(s) 9641148 ( 38.23%) 13087020735 ( 70.07%) 1357.41
http(c) 4433184 ( 17.58%) 398411567 ( 2.13%) 89.87
squid 255883 ( 1.01%) 77652276 ( 0.42%) 303.47
smtp 213675 ( 0.85%) 144616607 ( 0.77%) 676.81
nntp 1 ( 0.00%) 78 ( 0.00%) 78.00
ftp 103980 ( 0.41%) 7685683 ( 0.04%) 73.92
pop3 11739 ( 0.05%) 11149847 ( 0.06%) 949.81
imap 3874 ( 0.02%) 2598245 ( 0.01%) 670.69
telnet 185 ( 0.00%) 12624 ( 0.00%) 68.24
ssh 27398 ( 0.11%) 4231436 ( 0.02%) 154.44
dns 6734 ( 0.03%) 607752 ( 0.00%) 90.25
bgp 628 ( 0.00%) 160056 ( 0.00%) 254.87
napster 1769 ( 0.01%) 115923 ( 0.00%) 65.53
realaud 8 ( 0.00%) 3516 ( 0.00%) 439.50
rtsp 8658 ( 0.03%) 10182546 ( 0.05%) 1176.09
icecast 11694 ( 0.05%) 8725037 ( 0.05%) 746.11
hotline 10 ( 0.00%) 608 ( 0.00%) 60.80
other 4478269 ( 17.76%) 2408900118 ( 12.90%) 537.91
udp 3456635 ( 13.71%) 1616993883 ( 8.66%) 467.79
dns 525958 ( 2.09%) 107169064 ( 0.57%) 203.76
realaud 13 ( 0.00%) 1240 ( 0.00%) 95.38
halflif 36 ( 0.00%) 4496 ( 0.00%) 124.89
starcra 19481 ( 0.08%) 1300089 ( 0.01%) 66.74
everque 109 ( 0.00%) 24722 ( 0.00%) 226.81
unreal 23 ( 0.00%) 3906 ( 0.00%) 169.83
quake 8 ( 0.00%) 816 ( 0.00%) 102.00
cuseeme 1468 ( 0.01%) 88518 ( 0.00%) 60.30
other 2909374 ( 11.54%) 1508308806 ( 8.08%) 518.43
icmp 549774 ( 2.18%) 87242013 ( 0.47%) 158.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8124 ( 0.03%) 2377168 ( 0.01%) 292.61
ip6 1752594 ( 6.95%) 579615522 ( 3.10%) 330.72
other 18371 ( 0.07%) 5346499 ( 0.03%) 291.03
frag 1071 ( 0.00%) 1080595 ( 0.01%) 1008.96
ip6 232402 ( 0.92%) 222553574 ( 1.19%) 957.62
tcp6 169204 ( 0.67%) 204694836 ( 1.10%) 1209.75
http(s) 5504 ( 0.02%) 6408327 ( 0.03%) 1164.30
http(c) 17994 ( 0.07%) 1568513 ( 0.01%) 87.17
squid 159 ( 0.00%) 14946 ( 0.00%) 94.00
smtp 314 ( 0.00%) 76874 ( 0.00%) 244.82
ftp 38 ( 0.00%) 3358 ( 0.00%) 88.37
dns 138 ( 0.00%) 32419 ( 0.00%) 234.92
bgp 91 ( 0.00%) 15988 ( 0.00%) 175.69
other 144966 ( 0.57%) 196574411 ( 1.05%) 1356.00
udp6 38508 ( 0.15%) 12891989 ( 0.07%) 334.79
dns 20388 ( 0.08%) 6792012 ( 0.04%) 333.14
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 18119 ( 0.07%) 6099870 ( 0.03%) 336.66
icmp6 20465 ( 0.08%) 2044198 ( 0.01%) 99.89
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4111 ( 0.02%) 2907041 ( 0.02%) 707.14
tcpdump file: 201103191400.dump.gz (603.78 MB)