Traffic Trace Info
DumpFile: 201103251400.dump
FileSize: 2004.33MB
Id: 201103251400
StartTime: Fri Mar 25 14:00:00 2011
EndTime: Fri Mar 25 14:15:00 2011
TotalTime: 900.19 seconds
TotalCapSize: 1581.25MB CapLen: 96 bytes
# of packets: 27726758 (16253.55MB)
AvgRate: 151.47Mbps stddev:19.73M
IP flow (unique src/dst pair) Information
# of flows: 754416 (avg. 36.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.1% 2.1% 1.4% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 422835
Top 10 bandwidth usage (bytes/total in %):
7.7% 7.0% 5.3% 3.9% 3.8% 3.3% 3.3% 3.2% 2.7% 2.5%
# of IPv6 addresses: 4600
Top 10 bandwidth usage (bytes/total in %):
41.7% 39.0% 18.7% 18.7% 6.2% 6.2% 5.9% 5.8% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103251400.pktlen.png)
detailed numbers
[ 32- 63]: 6720573
[ 64- 127]: 7375799
[ 128- 255]: 1637463
[ 256- 511]: 974302
[ 512- 1023]: 758370
[ 1024- 2047]: 10260251
Protocol Breakdown
![[protocol breakdown chart]](201103251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27726758 (100.00%) 17043081656 (100.00%) 614.68
ip 27509174 ( 99.22%) 16921098655 ( 99.28%) 615.11
tcp 21563925 ( 77.77%) 14465453266 ( 84.88%) 670.82
http(s) 8286047 ( 29.88%) 10508776448 ( 61.66%) 1268.25
http(c) 6038184 ( 21.78%) 1279535524 ( 7.51%) 211.91
squid 441051 ( 1.59%) 122480740 ( 0.72%) 277.70
smtp 193192 ( 0.70%) 109308648 ( 0.64%) 565.80
ftp 19139 ( 0.07%) 1639632 ( 0.01%) 85.67
pop3 19777 ( 0.07%) 5796586 ( 0.03%) 293.10
imap 5425 ( 0.02%) 1798801 ( 0.01%) 331.58
telnet 634 ( 0.00%) 45246 ( 0.00%) 71.37
ssh 248116 ( 0.89%) 35984161 ( 0.21%) 145.03
dns 410213 ( 1.48%) 412005902 ( 2.42%) 1004.37
bgp 619 ( 0.00%) 145799 ( 0.00%) 235.54
napster 84 ( 0.00%) 7833 ( 0.00%) 93.25
realaud 78 ( 0.00%) 7814 ( 0.00%) 100.18
rtsp 7183 ( 0.03%) 7740969 ( 0.05%) 1077.68
icecast 927 ( 0.00%) 87390 ( 0.00%) 94.27
hotline 39 ( 0.00%) 4424 ( 0.00%) 113.44
other 5893214 ( 21.25%) 1980087169 ( 11.62%) 335.99
udp 3604756 ( 13.00%) 1780326919 ( 10.45%) 493.88
dns 724657 ( 2.61%) 155248837 ( 0.91%) 214.24
realaud 24 ( 0.00%) 2763 ( 0.00%) 115.12
halflif 27 ( 0.00%) 2133 ( 0.00%) 79.00
starcra 44 ( 0.00%) 4504 ( 0.00%) 102.36
everque 150 ( 0.00%) 26052 ( 0.00%) 173.68
unreal 19 ( 0.00%) 3185 ( 0.00%) 167.63
quake 18 ( 0.00%) 1917 ( 0.00%) 106.50
cuseeme 2 ( 0.00%) 154 ( 0.00%) 77.00
other 2879537 ( 10.39%) 1624881956 ( 9.53%) 564.29
icmp 644369 ( 2.32%) 88709220 ( 0.52%) 137.67
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2512 ( 0.01%) 817428 ( 0.00%) 325.41
ip6 1616610 ( 5.83%) 547645533 ( 3.21%) 338.76
other 76817 ( 0.28%) 38127019 ( 0.22%) 496.34
frag 1411 ( 0.01%) 1397935 ( 0.01%) 990.74
ip6 217584 ( 0.78%) 121983001 ( 0.72%) 560.62
tcp6 114808 ( 0.41%) 84321196 ( 0.49%) 734.45
http(s) 2474 ( 0.01%) 2631509 ( 0.02%) 1063.67
http(c) 29090 ( 0.10%) 2469691 ( 0.01%) 84.90
squid 55 ( 0.00%) 4658 ( 0.00%) 84.69
smtp 385 ( 0.00%) 399655 ( 0.00%) 1038.06
ftp 67 ( 0.00%) 5937 ( 0.00%) 88.61
dns 191 ( 0.00%) 41793 ( 0.00%) 218.81
bgp 128 ( 0.00%) 20217 ( 0.00%) 157.95
other 82418 ( 0.30%) 78747736 ( 0.46%) 955.47
udp6 45428 ( 0.16%) 11340689 ( 0.07%) 249.64
dns 33751 ( 0.12%) 9961385 ( 0.06%) 295.14
halflif 1 ( 0.00%) 98 ( 0.00%) 98.00
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 11674 ( 0.04%) 1379000 ( 0.01%) 118.13
icmp6 24547 ( 0.09%) 3324066 ( 0.02%) 135.42
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 32686 ( 0.12%) 22981372 ( 0.13%) 703.10
tcpdump file: 201103251400.dump.gz (694.57 MB)