Traffic Trace Info
DumpFile: 201103241400.dump
FileSize: 2230.40MB
Id: 201103241400
StartTime: Thu Mar 24 14:00:00 2011
EndTime: Thu Mar 24 14:15:01 2011
TotalTime: 900.41 seconds
TotalCapSize: 1759.57MB CapLen: 96 bytes
# of packets: 30855413 (19871.95MB)
AvgRate: 185.14Mbps stddev:22.95M
IP flow (unique src/dst pair) Information
# of flows: 665164 (avg. 46.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.8% 2.3% 2.0% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 356742
Top 10 bandwidth usage (bytes/total in %):
15.9% 12.1% 6.6% 5.2% 4.1% 4.0% 3.5% 2.6% 2.4% 2.4%
# of IPv6 addresses: 3814
Top 10 bandwidth usage (bytes/total in %):
78.2% 47.6% 19.3% 4.5% 3.8% 3.8% 2.1% 1.3% 1.0% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103241400.pktlen.png)
detailed numbers
[ 32- 63]: 6510317
[ 64- 127]: 7760942
[ 128- 255]: 1832628
[ 256- 511]: 1046140
[ 512- 1023]: 1088066
[ 1024- 2047]: 12617320
Protocol Breakdown
![[protocol breakdown chart]](201103241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30855413 (100.00%) 20837246721 (100.00%) 675.32
ip 30707400 ( 99.52%) 20740970175 ( 99.54%) 675.44
tcp 23811388 ( 77.17%) 17597453860 ( 84.45%) 739.04
http(s) 10417875 ( 33.76%) 13430980965 ( 64.46%) 1289.22
http(c) 6787804 ( 22.00%) 1473790754 ( 7.07%) 217.12
squid 300041 ( 0.97%) 82066298 ( 0.39%) 273.52
smtp 204078 ( 0.66%) 150218522 ( 0.72%) 736.08
ftp 59123 ( 0.19%) 30960551 ( 0.15%) 523.66
pop3 29641 ( 0.10%) 16704498 ( 0.08%) 563.56
imap 5777 ( 0.02%) 2503865 ( 0.01%) 433.42
telnet 131 ( 0.00%) 8576 ( 0.00%) 65.47
ssh 950965 ( 3.08%) 150401641 ( 0.72%) 158.16
dns 443027 ( 1.44%) 447796700 ( 2.15%) 1010.77
bgp 567 ( 0.00%) 112986 ( 0.00%) 199.27
napster 19 ( 0.00%) 2065 ( 0.00%) 108.68
realaud 46 ( 0.00%) 3606 ( 0.00%) 78.39
rtsp 11727 ( 0.04%) 11721063 ( 0.06%) 999.49
icecast 51636 ( 0.17%) 46141281 ( 0.22%) 893.59
hotline 17 ( 0.00%) 1797 ( 0.00%) 105.71
other 4548902 ( 14.74%) 1754037972 ( 8.42%) 385.60
udp 3878142 ( 12.57%) 1778365702 ( 8.53%) 458.56
dns 744204 ( 2.41%) 157646737 ( 0.76%) 211.83
realaud 5 ( 0.00%) 437 ( 0.00%) 87.40
halflif 25 ( 0.00%) 2426 ( 0.00%) 97.04
starcra 40 ( 0.00%) 6629 ( 0.00%) 165.72
everque 238 ( 0.00%) 36313 ( 0.00%) 152.58
unreal 12 ( 0.00%) 1419 ( 0.00%) 118.25
quake 17 ( 0.00%) 1393 ( 0.00%) 81.94
cuseeme 11 ( 0.00%) 1158 ( 0.00%) 105.27
other 3133269 ( 10.15%) 1620462237 ( 7.78%) 517.18
icmp 374317 ( 1.21%) 45222716 ( 0.22%) 120.81
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5682 ( 0.02%) 1916440 ( 0.01%) 337.28
ip6 2307328 ( 7.48%) 1119700225 ( 5.37%) 485.28
other 330359 ( 1.07%) 198292072 ( 0.95%) 600.23
frag 1637 ( 0.01%) 1684223 ( 0.01%) 1028.85
ip6 148013 ( 0.48%) 96276546 ( 0.46%) 650.46
tcp6 93074 ( 0.30%) 82705696 ( 0.40%) 888.60
http(s) 22426 ( 0.07%) 29718403 ( 0.14%) 1325.18
http(c) 20855 ( 0.07%) 1769408 ( 0.01%) 84.84
squid 12 ( 0.00%) 1016 ( 0.00%) 84.67
smtp 67 ( 0.00%) 29026 ( 0.00%) 433.22
ftp 92 ( 0.00%) 8234 ( 0.00%) 89.50
dns 188 ( 0.00%) 44028 ( 0.00%) 234.19
bgp 100 ( 0.00%) 23193 ( 0.00%) 231.93
other 49334 ( 0.16%) 51112388 ( 0.25%) 1036.05
udp6 39327 ( 0.13%) 10795045 ( 0.05%) 274.49
dns 35872 ( 0.12%) 10333820 ( 0.05%) 288.07
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 3453 ( 0.01%) 461017 ( 0.00%) 133.51
icmp6 15350 ( 0.05%) 2615389 ( 0.01%) 170.38
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 150 ( 0.00%) 145160 ( 0.00%) 967.73
tcpdump file: 201103241400.dump.gz (763.40 MB)