Traffic Trace Info
DumpFile: 201103221400.dump
FileSize: 1655.66MB
Id: 201103221400
StartTime: Tue Mar 22 14:00:00 2011
EndTime: Tue Mar 22 14:15:00 2011
TotalTime: 900.25 seconds
TotalCapSize: 1301.94MB CapLen: 96 bytes
# of packets: 23181165 (13872.37MB)
AvgRate: 129.25Mbps stddev:19.89M
IP flow (unique src/dst pair) Information
# of flows: 722510 (avg. 32.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.3% 2.3% 1.7% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 406080
Top 10 bandwidth usage (bytes/total in %):
9.7% 5.7% 3.6% 3.5% 3.3% 2.8% 2.6% 2.4% 2.4% 2.4%
# of IPv6 addresses: 5671
Top 10 bandwidth usage (bytes/total in %):
43.5% 10.9% 6.8% 5.8% 5.6% 5.6% 4.9% 4.7% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103221400.pktlen.png)
detailed numbers
[ 32- 63]: 5139359
[ 64- 127]: 6050066
[ 128- 255]: 1568432
[ 256- 511]: 1130199
[ 512- 1023]: 630005
[ 1024- 2047]: 8663104
Protocol Breakdown
![[protocol breakdown chart]](201103221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23181165 (100.00%) 14546239385 (100.00%) 627.50
ip 23046312 ( 99.42%) 14485247186 ( 99.58%) 628.53
tcp 16585570 ( 71.55%) 11472028945 ( 78.87%) 691.69
http(s) 6596028 ( 28.45%) 8443338230 ( 58.04%) 1280.06
http(c) 4694729 ( 20.25%) 1096358357 ( 7.54%) 233.53
squid 335558 ( 1.45%) 89953465 ( 0.62%) 268.07
smtp 372602 ( 1.61%) 214684883 ( 1.48%) 576.18
nntp 1 ( 0.00%) 66 ( 0.00%) 66.00
ftp 37102 ( 0.16%) 3555223 ( 0.02%) 95.82
pop3 20871 ( 0.09%) 8005261 ( 0.06%) 383.56
imap 26442 ( 0.11%) 6697843 ( 0.05%) 253.30
telnet 2133 ( 0.01%) 137856 ( 0.00%) 64.63
ssh 100765 ( 0.43%) 49503692 ( 0.34%) 491.28
dns 4767 ( 0.02%) 329047 ( 0.00%) 69.03
bgp 538 ( 0.00%) 118274 ( 0.00%) 219.84
napster 86 ( 0.00%) 8459 ( 0.00%) 98.36
realaud 113 ( 0.00%) 9438 ( 0.00%) 83.52
rtsp 6962 ( 0.03%) 8311532 ( 0.06%) 1193.84
icecast 15434 ( 0.07%) 11704731 ( 0.08%) 758.37
hotline 20 ( 0.00%) 1606 ( 0.00%) 80.30
other 4371380 ( 18.86%) 1539308642 ( 10.58%) 352.13
udp 4565258 ( 19.69%) 2489974134 ( 17.12%) 545.42
dns 676597 ( 2.92%) 150079023 ( 1.03%) 221.81
realaud 11 ( 0.00%) 1602 ( 0.00%) 145.64
halflif 58 ( 0.00%) 9962 ( 0.00%) 171.76
starcra 155 ( 0.00%) 12736 ( 0.00%) 82.17
everque 102 ( 0.00%) 22539 ( 0.00%) 220.97
unreal 15 ( 0.00%) 2745 ( 0.00%) 183.00
quake 16 ( 0.00%) 1731 ( 0.00%) 108.19
cuseeme 5 ( 0.00%) 738 ( 0.00%) 147.60
other 3711323 ( 16.01%) 2327697419 ( 16.00%) 627.19
icmp 327735 ( 1.41%) 55970306 ( 0.38%) 170.78
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18686 ( 0.08%) 4913424 ( 0.03%) 262.95
ip6 1525980 ( 6.58%) 453980495 ( 3.12%) 297.50
other 22898 ( 0.10%) 8360612 ( 0.06%) 365.12
frag 430717 ( 1.86%) 318604347 ( 2.19%) 739.71
ip6 134853 ( 0.58%) 60992199 ( 0.42%) 452.29
tcp6 65778 ( 0.28%) 41776828 ( 0.29%) 635.12
http(s) 6016 ( 0.03%) 8011862 ( 0.06%) 1331.76
http(c) 17832 ( 0.08%) 1657944 ( 0.01%) 92.98
squid 9 ( 0.00%) 754 ( 0.00%) 83.78
smtp 111 ( 0.00%) 21224 ( 0.00%) 191.21
ftp 85 ( 0.00%) 11749 ( 0.00%) 138.22
dns 196 ( 0.00%) 40696 ( 0.00%) 207.63
bgp 89 ( 0.00%) 14571 ( 0.00%) 163.72
other 41440 ( 0.18%) 32018028 ( 0.22%) 772.64
udp6 46787 ( 0.20%) 15109295 ( 0.10%) 322.94
dns 31884 ( 0.14%) 9734638 ( 0.07%) 305.31
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 2 ( 0.00%) 205 ( 0.00%) 102.50
quake 1 ( 0.00%) 100 ( 0.00%) 100.00
cuseeme 1 ( 0.00%) 102 ( 0.00%) 102.00
other 14897 ( 0.06%) 5374036 ( 0.04%) 360.75
icmp6 20222 ( 0.09%) 2704693 ( 0.02%) 133.75
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1955 ( 0.01%) 1386245 ( 0.01%) 709.08
tcpdump file: 201103221400.dump.gz (579.42 MB)