Traffic Trace Info
DumpFile: 201103201400.dump
FileSize: 1859.31MB
Id: 201103201400
StartTime: Sun Mar 20 14:00:00 2011
EndTime: Sun Mar 20 14:15:00 2011
TotalTime: 900.15 seconds
TotalCapSize: 1468.44MB CapLen: 96 bytes
# of packets: 25615552 (16135.00MB)
AvgRate: 150.35Mbps stddev:16.49M
IP flow (unique src/dst pair) Information
# of flows: 985631 (avg. 25.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.3% 2.3% 2.1% 1.3% 1.1% 1.1% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 649308
Top 10 bandwidth usage (bytes/total in %):
18.0% 7.5% 7.1% 4.2% 3.7% 3.0% 3.0% 3.0% 2.5% 2.4%
# of IPv6 addresses: 5901
Top 10 bandwidth usage (bytes/total in %):
18.2% 11.5% 8.6% 8.6% 8.6% 8.6% 8.4% 6.3% 5.0% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103201400.pktlen.png)
detailed numbers
[ 32- 63]: 5459979
[ 64- 127]: 7311046
[ 128- 255]: 1269090
[ 256- 511]: 775009
[ 512- 1023]: 462641
[ 1024- 2047]: 10337787
Protocol Breakdown
![[protocol breakdown chart]](201103201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25615552 (100.00%) 16918778442 (100.00%) 660.49
ip 25524396 ( 99.64%) 16892768199 ( 99.85%) 661.83
tcp 19544459 ( 76.30%) 14453927264 ( 85.43%) 739.54
http(s) 8983220 ( 35.07%) 11308068703 ( 66.84%) 1258.80
http(c) 4890312 ( 19.09%) 490979249 ( 2.90%) 100.40
squid 220400 ( 0.86%) 73293394 ( 0.43%) 332.55
smtp 106950 ( 0.42%) 31272393 ( 0.18%) 292.40
nntp 3 ( 0.00%) 316 ( 0.00%) 105.33
ftp 37140 ( 0.14%) 3555432 ( 0.02%) 95.73
pop3 6726 ( 0.03%) 3261393 ( 0.02%) 484.89
imap 2205 ( 0.01%) 1221283 ( 0.01%) 553.87
telnet 688 ( 0.00%) 45646 ( 0.00%) 66.35
ssh 65016 ( 0.25%) 10350449 ( 0.06%) 159.20
dns 6023 ( 0.02%) 524516 ( 0.00%) 87.09
bgp 581 ( 0.00%) 102625 ( 0.00%) 176.64
napster 110 ( 0.00%) 9167 ( 0.00%) 83.34
realaud 36 ( 0.00%) 4958 ( 0.00%) 137.72
rtsp 23328 ( 0.09%) 25956834 ( 0.15%) 1112.69
icecast 2368 ( 0.01%) 174258 ( 0.00%) 73.59
hotline 18 ( 0.00%) 1483 ( 0.00%) 82.39
other 5199334 ( 20.30%) 2505105105 ( 14.81%) 481.81
udp 3435431 ( 13.41%) 1815239558 ( 10.73%) 528.39
dns 512539 ( 2.00%) 96505776 ( 0.57%) 188.29
realaud 9 ( 0.00%) 711 ( 0.00%) 79.00
halflif 22 ( 0.00%) 2316 ( 0.00%) 105.27
starcra 39 ( 0.00%) 3910 ( 0.00%) 100.26
everque 305 ( 0.00%) 70377 ( 0.00%) 230.74
unreal 326 ( 0.00%) 77507 ( 0.00%) 237.75
quake 9 ( 0.00%) 1134 ( 0.00%) 126.00
cuseeme 2 ( 0.00%) 193 ( 0.00%) 96.50
other 2922014 ( 11.41%) 1718465156 ( 10.16%) 588.11
icmp 592139 ( 2.31%) 87060118 ( 0.51%) 147.03
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8792 ( 0.03%) 2326136 ( 0.01%) 264.57
ip6 1924564 ( 7.51%) 528183079 ( 3.12%) 274.44
other 18826 ( 0.07%) 6012774 ( 0.04%) 319.39
frag 834 ( 0.00%) 863341 ( 0.01%) 1035.18
ip6 91156 ( 0.36%) 26010243 ( 0.15%) 285.34
tcp6 41854 ( 0.16%) 13558752 ( 0.08%) 323.95
http(s) 948 ( 0.00%) 584078 ( 0.00%) 616.12
http(c) 769 ( 0.00%) 78686 ( 0.00%) 102.32
squid 20 ( 0.00%) 1880 ( 0.00%) 94.00
smtp 2469 ( 0.01%) 2251877 ( 0.01%) 912.06
ftp 79 ( 0.00%) 65336 ( 0.00%) 827.04
dns 150 ( 0.00%) 36959 ( 0.00%) 246.39
bgp 91 ( 0.00%) 16281 ( 0.00%) 178.91
other 37328 ( 0.15%) 10523655 ( 0.06%) 281.92
udp6 32437 ( 0.13%) 10584021 ( 0.06%) 326.29
dns 17929 ( 0.07%) 5301094 ( 0.03%) 295.67
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 14506 ( 0.06%) 5282715 ( 0.03%) 364.17
icmp6 16629 ( 0.06%) 1735422 ( 0.01%) 104.36
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 126 ( 0.00%) 117028 ( 0.00%) 928.79
tcpdump file: 201103201400.dump.gz (638.75 MB)