Traffic Trace Info
DumpFile: 201103271400.dump
FileSize: 2267.99MB
Id: 201103271400
StartTime: Sun Mar 27 14:00:00 2011
EndTime: Sun Mar 27 14:15:01 2011
TotalTime: 900.62 seconds
TotalCapSize: 1780.67MB CapLen: 96 bytes
# of packets: 31936581 (22158.62MB)
AvgRate: 206.37Mbps stddev:47.64M
IP flow (unique src/dst pair) Information
# of flows: 690044 (avg. 46.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.4% 1.2% 1.1% 0.9% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 406844
Top 10 bandwidth usage (bytes/total in %):
43.0% 6.1% 6.0% 2.8% 2.2% 2.1% 1.8% 1.7% 1.7% 1.6%
# of IPv6 addresses: 4383
Top 10 bandwidth usage (bytes/total in %):
20.3% 19.8% 17.9% 12.6% 12.1% 12.1% 9.5% 9.4% 8.0% 7.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103271400.pktlen.png)
detailed numbers
[ 32- 63]: 7883442
[ 64- 127]: 6580260
[ 128- 255]: 1686910
[ 256- 511]: 829847
[ 512- 1023]: 569634
[ 1024- 2047]: 14386488
Protocol Breakdown
![[protocol breakdown chart]](201103271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31936581 (100.00%) 23234992047 (100.00%) 727.54
ip 31733848 ( 99.37%) 23121062719 ( 99.51%) 728.59
tcp 25368593 ( 79.43%) 20269602403 ( 87.24%) 799.00
http(s) 12638865 ( 39.57%) 17516182780 ( 75.39%) 1385.90
http(c) 5172889 ( 16.20%) 498216979 ( 2.14%) 96.31
squid 532562 ( 1.67%) 148143196 ( 0.64%) 278.17
smtp 83849 ( 0.26%) 23218466 ( 0.10%) 276.91
ftp 39556 ( 0.12%) 16134696 ( 0.07%) 407.90
pop3 10090 ( 0.03%) 3524895 ( 0.02%) 349.35
imap 2776 ( 0.01%) 885601 ( 0.00%) 319.02
telnet 419 ( 0.00%) 28639 ( 0.00%) 68.35
ssh 121809 ( 0.38%) 19940979 ( 0.09%) 163.71
dns 316974 ( 0.99%) 320636766 ( 1.38%) 1011.56
bgp 591 ( 0.00%) 117690 ( 0.00%) 199.14
napster 595 ( 0.00%) 38658 ( 0.00%) 64.97
realaud 191 ( 0.00%) 12592 ( 0.00%) 65.93
rtsp 6249 ( 0.02%) 7689592 ( 0.03%) 1230.53
icecast 2168 ( 0.01%) 177148 ( 0.00%) 81.71
hotline 5 ( 0.00%) 659 ( 0.00%) 131.80
other 6438999 ( 20.16%) 1714652599 ( 7.38%) 266.29
udp 3971798 ( 12.44%) 2053507784 ( 8.84%) 517.02
dns 508414 ( 1.59%) 95069330 ( 0.41%) 186.99
realaud 58 ( 0.00%) 8967 ( 0.00%) 154.60
halflif 53 ( 0.00%) 4351 ( 0.00%) 82.09
starcra 47 ( 0.00%) 5190 ( 0.00%) 110.43
everque 1465 ( 0.00%) 1500760 ( 0.01%) 1024.41
unreal 17 ( 0.00%) 2578 ( 0.00%) 151.65
quake 5 ( 0.00%) 441 ( 0.00%) 88.20
cuseeme 2 ( 0.00%) 159 ( 0.00%) 79.50
other 3461597 ( 10.84%) 1956840158 ( 8.42%) 565.30
icmp 381544 ( 1.19%) 74437233 ( 0.32%) 195.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4856 ( 0.02%) 1462360 ( 0.01%) 301.14
ip6 1989003 ( 6.23%) 716687825 ( 3.08%) 360.33
other 17869 ( 0.06%) 5345844 ( 0.02%) 299.17
frag 686 ( 0.00%) 686043 ( 0.00%) 1000.06
ip6 202733 ( 0.63%) 113929328 ( 0.49%) 561.97
tcp6 132399 ( 0.41%) 97582427 ( 0.42%) 737.03
http(s) 2788 ( 0.01%) 2928476 ( 0.01%) 1050.39
http(c) 12113 ( 0.04%) 1168392 ( 0.01%) 96.46
squid 87 ( 0.00%) 28215 ( 0.00%) 324.31
smtp 67 ( 0.00%) 29785 ( 0.00%) 444.55
ftp 100 ( 0.00%) 8819 ( 0.00%) 88.19
ssh 173 ( 0.00%) 19694 ( 0.00%) 113.84
dns 170 ( 0.00%) 41168 ( 0.00%) 242.16
bgp 88 ( 0.00%) 14032 ( 0.00%) 159.45
other 116813 ( 0.37%) 93343846 ( 0.40%) 799.09
udp6 36327 ( 0.11%) 8378399 ( 0.04%) 230.64
dns 27444 ( 0.09%) 7001855 ( 0.03%) 255.13
starcra 1 ( 0.00%) 200 ( 0.00%) 200.00
everque 2 ( 0.00%) 212 ( 0.00%) 106.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 8879 ( 0.03%) 1376026 ( 0.01%) 154.98
icmp6 27580 ( 0.09%) 3494988 ( 0.02%) 126.72
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6314 ( 0.02%) 4458072 ( 0.02%) 706.06
tcpdump file: 201103271400.dump.gz (776.95 MB)