Traffic Trace Info
DumpFile: 201103211400.dump
FileSize: 1910.87MB
Id: 201103211400
StartTime: Mon Mar 21 14:00:00 2011
EndTime: Mon Mar 21 14:15:01 2011
TotalTime: 900.38 seconds
TotalCapSize: 1512.92MB CapLen: 96 bytes
# of packets: 26079993 (18031.84MB)
AvgRate: 168.00Mbps stddev:16.72M
IP flow (unique src/dst pair) Information
# of flows: 830633 (avg. 31.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
23.7% 3.8% 2.3% 1.6% 1.5% 1.5% 1.4% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 474470
Top 10 bandwidth usage (bytes/total in %):
25.3% 24.2% 5.3% 4.8% 4.5% 4.0% 3.8% 3.8% 3.4% 3.2%
# of IPv6 addresses: 3634
Top 10 bandwidth usage (bytes/total in %):
40.6% 30.4% 17.3% 12.6% 12.6% 4.7% 3.8% 3.8% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103211400.pktlen.png)
detailed numbers
[ 32- 63]: 4937291
[ 64- 127]: 7024949
[ 128- 255]: 1245214
[ 256- 511]: 754415
[ 512- 1023]: 454752
[ 1024- 2047]: 11663372
Protocol Breakdown
![[protocol breakdown chart]](201103211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26079993 (100.00%) 18907757869 (100.00%) 724.99
ip 25957445 ( 99.53%) 18852648233 ( 99.71%) 726.29
tcp 19999231 ( 76.68%) 16268574922 ( 86.04%) 813.46
http(s) 6728833 ( 25.80%) 9070503664 ( 47.97%) 1348.01
http(c) 3399776 ( 13.04%) 330022554 ( 1.75%) 97.07
squid 319803 ( 1.23%) 105750406 ( 0.56%) 330.67
smtp 110827 ( 0.42%) 50282206 ( 0.27%) 453.70
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 35454 ( 0.14%) 3418742 ( 0.02%) 96.43
pop3 4976 ( 0.02%) 2336100 ( 0.01%) 469.47
imap 2280 ( 0.01%) 1000265 ( 0.01%) 438.71
telnet 35 ( 0.00%) 2476 ( 0.00%) 70.74
ssh 488076 ( 1.87%) 720996025 ( 3.81%) 1477.22
dns 5971 ( 0.02%) 513392 ( 0.00%) 85.98
bgp 584 ( 0.00%) 109847 ( 0.00%) 188.09
napster 27 ( 0.00%) 1794 ( 0.00%) 66.44
realaud 125 ( 0.00%) 9776 ( 0.00%) 78.21
rtsp 6226 ( 0.02%) 7677850 ( 0.04%) 1233.19
icecast 860 ( 0.00%) 88402 ( 0.00%) 102.79
hotline 37 ( 0.00%) 2322 ( 0.00%) 62.76
other 8895329 ( 34.11%) 5975858381 ( 31.61%) 671.80
udp 3650558 ( 14.00%) 1693476398 ( 8.96%) 463.90
dns 612320 ( 2.35%) 135482265 ( 0.72%) 221.26
realaud 21 ( 0.00%) 2632 ( 0.00%) 125.33
halflif 26 ( 0.00%) 2765 ( 0.00%) 106.35
starcra 18896 ( 0.07%) 27171034 ( 0.14%) 1437.93
everque 317 ( 0.00%) 49015 ( 0.00%) 154.62
unreal 22 ( 0.00%) 3249 ( 0.00%) 147.68
quake 23 ( 0.00%) 2876 ( 0.00%) 125.04
cuseeme 5 ( 0.00%) 515 ( 0.00%) 103.00
other 3018776 ( 11.58%) 1530647679 ( 8.10%) 507.04
icmp 439299 ( 1.68%) 73553485 ( 0.39%) 167.43
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6180 ( 0.02%) 2591752 ( 0.01%) 419.38
ip6 1836321 ( 7.04%) 808469416 ( 4.28%) 440.27
other 25671 ( 0.10%) 5962990 ( 0.03%) 232.29
frag 828 ( 0.00%) 903212 ( 0.00%) 1090.84
ip6 122548 ( 0.47%) 55109636 ( 0.29%) 449.70
tcp6 76364 ( 0.29%) 45459534 ( 0.24%) 595.30
http(s) 3846 ( 0.01%) 5189852 ( 0.03%) 1349.42
http(c) 17659 ( 0.07%) 1681471 ( 0.01%) 95.22
squid 174 ( 0.00%) 16356 ( 0.00%) 94.00
smtp 275 ( 0.00%) 83253 ( 0.00%) 302.74
ftp 78 ( 0.00%) 6871 ( 0.00%) 88.09
dns 149 ( 0.00%) 36009 ( 0.00%) 241.67
bgp 87 ( 0.00%) 18165 ( 0.00%) 208.79
other 54096 ( 0.21%) 38427557 ( 0.20%) 710.36
udp6 26345 ( 0.10%) 7283521 ( 0.04%) 276.47
dns 20329 ( 0.08%) 6579951 ( 0.03%) 323.67
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 2 ( 0.00%) 220 ( 0.00%) 110.00
cuseeme 2 ( 0.00%) 211 ( 0.00%) 105.50
other 6011 ( 0.02%) 703034 ( 0.00%) 116.96
icmp6 19227 ( 0.07%) 1976289 ( 0.01%) 102.79
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 498 ( 0.00%) 374782 ( 0.00%) 752.57
tcpdump file: 201103211400.dump.gz (628.42 MB)