Traffic Trace Info
DumpFile: 201103281400.dump
FileSize: 1873.89MB
Id: 201103281400
StartTime: Mon Mar 28 14:00:00 2011
EndTime: Mon Mar 28 14:15:00 2011
TotalTime: 899.66 seconds
TotalCapSize: 1470.71MB CapLen: 96 bytes
# of packets: 26422719 (16826.41MB)
AvgRate: 156.91Mbps stddev:30.30M
IP flow (unique src/dst pair) Information
# of flows: 1006312 (avg. 26.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.7% 2.5% 1.4% 1.3% 1.2% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 572234
Top 10 bandwidth usage (bytes/total in %):
19.8% 7.3% 7.2% 4.2% 3.8% 3.1% 3.1% 2.9% 2.8% 2.6%
# of IPv6 addresses: 4657
Top 10 bandwidth usage (bytes/total in %):
42.0% 27.5% 22.3% 21.9% 19.7% 6.2% 6.2% 3.4% 2.8% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103281400.pktlen.png)
detailed numbers
[ 32- 63]: 6581720
[ 64- 127]: 5923623
[ 128- 255]: 1544817
[ 256- 511]: 964166
[ 512- 1023]: 710138
[ 1024- 2047]: 10698255
Protocol Breakdown
![[protocol breakdown chart]](201103281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26422719 (100.00%) 17643769996 (100.00%) 667.75
ip 26214972 ( 99.21%) 17515178474 ( 99.27%) 668.14
tcp 19855280 ( 75.14%) 14539087451 ( 82.40%) 732.25
http(s) 7901295 ( 29.90%) 10473711877 ( 59.36%) 1325.57
http(c) 5601634 ( 21.20%) 959663260 ( 5.44%) 171.32
squid 454410 ( 1.72%) 123154133 ( 0.70%) 271.02
smtp 161210 ( 0.61%) 91424777 ( 0.52%) 567.12
nntp 6 ( 0.00%) 396 ( 0.00%) 66.00
ftp 52967 ( 0.20%) 19237133 ( 0.11%) 363.19
pop3 29778 ( 0.11%) 5902562 ( 0.03%) 198.22
imap 10287 ( 0.04%) 5957858 ( 0.03%) 579.16
telnet 143 ( 0.00%) 10473 ( 0.00%) 73.24
ssh 398348 ( 1.51%) 454076227 ( 2.57%) 1139.90
dns 369632 ( 1.40%) 371589428 ( 2.11%) 1005.30
bgp 701 ( 0.00%) 112763 ( 0.00%) 160.86
napster 520 ( 0.00%) 33402 ( 0.00%) 64.23
realaud 28 ( 0.00%) 2809 ( 0.00%) 100.32
rtsp 8815 ( 0.03%) 10101980 ( 0.06%) 1146.00
icecast 7359 ( 0.03%) 453214 ( 0.00%) 61.59
hotline 17 ( 0.00%) 4239 ( 0.00%) 249.35
other 4858114 ( 18.39%) 2023649960 ( 11.47%) 416.55
udp 4339960 ( 16.43%) 2383048790 ( 13.51%) 549.09
dns 738033 ( 2.79%) 158360198 ( 0.90%) 214.57
realaud 16 ( 0.00%) 2399 ( 0.00%) 149.94
halflif 11 ( 0.00%) 1324 ( 0.00%) 120.36
starcra 80 ( 0.00%) 9472 ( 0.00%) 118.40
everque 228 ( 0.00%) 40238 ( 0.00%) 176.48
unreal 61 ( 0.00%) 12399 ( 0.00%) 203.26
quake 20 ( 0.00%) 1937 ( 0.00%) 96.85
cuseeme 6 ( 0.00%) 435 ( 0.00%) 72.50
other 3601205 ( 13.63%) 2224462424 ( 12.61%) 617.70
icmp 411532 ( 1.56%) 74854873 ( 0.42%) 181.89
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7014 ( 0.03%) 2980164 ( 0.02%) 424.89
ip6 1582285 ( 5.99%) 510998817 ( 2.90%) 322.95
other 18716 ( 0.07%) 4189109 ( 0.02%) 223.83
frag 1147 ( 0.00%) 1134638 ( 0.01%) 989.22
ip6 207747 ( 0.79%) 128591522 ( 0.73%) 618.98
tcp6 144476 ( 0.55%) 114073536 ( 0.65%) 789.57
http(s) 6413 ( 0.02%) 8567102 ( 0.05%) 1335.90
http(c) 40108 ( 0.15%) 3337310 ( 0.02%) 83.21
squid 27 ( 0.00%) 2286 ( 0.00%) 84.67
smtp 111 ( 0.00%) 18709 ( 0.00%) 168.55
ftp 92 ( 0.00%) 8234 ( 0.00%) 89.50
dns 209 ( 0.00%) 51321 ( 0.00%) 245.56
bgp 94 ( 0.00%) 16222 ( 0.00%) 172.57
other 97422 ( 0.37%) 102072352 ( 0.58%) 1047.73
udp6 38778 ( 0.15%) 10969785 ( 0.06%) 282.89
dns 33763 ( 0.13%) 9758981 ( 0.06%) 289.04
starcra 2 ( 0.00%) 184 ( 0.00%) 92.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 202 ( 0.00%) 101.00
other 5009 ( 0.02%) 1210204 ( 0.01%) 241.61
icmp6 23974 ( 0.09%) 3214957 ( 0.02%) 134.10
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 409 ( 0.00%) 318224 ( 0.00%) 778.05
tcpdump file: 201103281400.dump.gz (650.40 MB)