Traffic Trace Info
DumpFile: 201103231400.dump
FileSize: 1923.11MB
Id: 201103231400
StartTime: Wed Mar 23 14:00:01 2011
EndTime: Wed Mar 23 14:15:00 2011
TotalTime: 899.93 seconds
TotalCapSize: 1519.04MB CapLen: 96 bytes
# of packets: 26480613 (16800.07MB)
AvgRate: 156.64Mbps stddev:20.27M
IP flow (unique src/dst pair) Information
# of flows: 787378 (avg. 33.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 2.9% 2.7% 2.3% 2.1% 1.5% 1.4% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 459362
Top 10 bandwidth usage (bytes/total in %):
15.7% 8.9% 8.9% 5.9% 3.4% 3.0% 2.9% 2.8% 2.4% 2.4%
# of IPv6 addresses: 3930
Top 10 bandwidth usage (bytes/total in %):
24.7% 24.7% 20.5% 20.5% 11.7% 11.7% 10.9% 10.9% 5.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103231400.pktlen.png)
detailed numbers
[ 32- 63]: 5384310
[ 64- 127]: 7267730
[ 128- 255]: 1473743
[ 256- 511]: 844356
[ 512- 1023]: 851774
[ 1024- 2047]: 10658700
Protocol Breakdown
![[protocol breakdown chart]](201103231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26480613 (100.00%) 17616146096 (100.00%) 665.25
ip 26340538 ( 99.47%) 17527314586 ( 99.50%) 665.41
tcp 20945870 ( 79.10%) 15163651987 ( 86.08%) 723.94
http(s) 8231848 ( 31.09%) 10708798316 ( 60.79%) 1300.90
http(c) 5256749 ( 19.85%) 881794133 ( 5.01%) 167.75
squid 469450 ( 1.77%) 171774023 ( 0.98%) 365.90
smtp 305751 ( 1.15%) 189501951 ( 1.08%) 619.79
nntp 30 ( 0.00%) 1830 ( 0.00%) 61.00
ftp 64685 ( 0.24%) 22110132 ( 0.13%) 341.81
pop3 29058 ( 0.11%) 16771235 ( 0.10%) 577.16
imap 37693 ( 0.14%) 48848933 ( 0.28%) 1295.97
telnet 1585 ( 0.01%) 103488 ( 0.00%) 65.29
ssh 992586 ( 3.75%) 155414401 ( 0.88%) 156.58
dns 13515 ( 0.05%) 1078713 ( 0.01%) 79.82
bgp 592 ( 0.00%) 99387 ( 0.00%) 167.88
napster 48 ( 0.00%) 6408 ( 0.00%) 133.50
realaud 148 ( 0.00%) 19736 ( 0.00%) 133.35
rtsp 1 ( 0.00%) 74 ( 0.00%) 74.00
icecast 43894 ( 0.17%) 34950735 ( 0.20%) 796.25
hotline 21 ( 0.00%) 1798 ( 0.00%) 85.62
other 5498195 ( 20.76%) 2932375434 ( 16.65%) 533.33
udp 3745853 ( 14.15%) 1900167639 ( 10.79%) 507.27
dns 745917 ( 2.82%) 158754533 ( 0.90%) 212.83
realaud 7 ( 0.00%) 571 ( 0.00%) 81.57
halflif 486 ( 0.00%) 105272 ( 0.00%) 216.61
starcra 34 ( 0.00%) 5197 ( 0.00%) 152.85
everque 170 ( 0.00%) 28315 ( 0.00%) 166.56
unreal 33 ( 0.00%) 5907 ( 0.00%) 179.00
quake 12 ( 0.00%) 1927 ( 0.00%) 160.58
cuseeme 7 ( 0.00%) 592 ( 0.00%) 84.57
other 2998956 ( 11.33%) 1741102442 ( 9.88%) 580.57
icmp 412469 ( 1.56%) 77814624 ( 0.44%) 188.66
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1732 ( 0.01%) 419564 ( 0.00%) 242.24
ip6 1215412 ( 4.59%) 379833036 ( 2.16%) 312.51
other 19018 ( 0.07%) 5408576 ( 0.03%) 284.39
frag 1024 ( 0.00%) 1069248 ( 0.01%) 1044.19
ip6 140075 ( 0.53%) 88831510 ( 0.50%) 634.17
tcp6 75755 ( 0.29%) 71914347 ( 0.41%) 949.30
http(s) 1163 ( 0.00%) 1204805 ( 0.01%) 1035.95
http(c) 7265 ( 0.03%) 704591 ( 0.00%) 96.98
squid 74 ( 0.00%) 6212 ( 0.00%) 83.95
smtp 130 ( 0.00%) 57657 ( 0.00%) 443.52
ftp 25 ( 0.00%) 2280 ( 0.00%) 91.20
dns 174 ( 0.00%) 39529 ( 0.00%) 227.18
bgp 92 ( 0.00%) 16035 ( 0.00%) 174.29
other 66832 ( 0.25%) 69883238 ( 0.40%) 1045.66
udp6 41154 ( 0.16%) 11761344 ( 0.07%) 285.79
dns 36177 ( 0.14%) 10247805 ( 0.06%) 283.27
cuseeme 2 ( 0.00%) 218 ( 0.00%) 109.00
other 4975 ( 0.02%) 1513321 ( 0.01%) 304.19
icmp6 19902 ( 0.08%) 2927881 ( 0.02%) 147.11
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3149 ( 0.01%) 2212310 ( 0.01%) 702.54
tcpdump file: 201103231400.dump.gz (664.72 MB)