Traffic Trace Info
DumpFile: 201103291400.dump
FileSize: 2123.92MB
Id: 201103291400
StartTime: Tue Mar 29 14:00:00 2011
EndTime: Tue Mar 29 14:15:00 2011
TotalTime: 900.10 seconds
TotalCapSize: 1675.46MB CapLen: 96 bytes
# of packets: 29389841 (20258.92MB)
AvgRate: 188.75Mbps stddev:29.18M
IP flow (unique src/dst pair) Information
# of flows: 819911 (avg. 35.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 3.0% 2.6% 2.3% 1.8% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 451916
Top 10 bandwidth usage (bytes/total in %):
13.6% 9.4% 6.1% 3.1% 3.0% 3.0% 2.8% 2.6% 2.4% 2.4%
# of IPv6 addresses: 4393
Top 10 bandwidth usage (bytes/total in %):
34.4% 31.0% 16.7% 12.7% 9.5% 5.8% 5.7% 4.6% 4.6% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103291400.pktlen.png)
detailed numbers
[ 32- 63]: 6367546
[ 64- 127]: 6717624
[ 128- 255]: 1624112
[ 256- 511]: 854759
[ 512- 1023]: 783104
[ 1024- 2047]: 13042696
Protocol Breakdown
![[protocol breakdown chart]](201103291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29389841 (100.00%) 21243015941 (100.00%) 722.80
ip 29207707 ( 99.38%) 21126600106 ( 99.45%) 723.32
tcp 23283524 ( 79.22%) 18753864785 ( 88.28%) 805.46
http(s) 10495237 ( 35.71%) 14258387484 ( 67.12%) 1358.56
http(c) 5957764 ( 20.27%) 985945000 ( 4.64%) 165.49
squid 381181 ( 1.30%) 95298338 ( 0.45%) 250.01
smtp 212992 ( 0.72%) 158004149 ( 0.74%) 741.83
ftp 18675 ( 0.06%) 2695194 ( 0.01%) 144.32
pop3 16134 ( 0.05%) 3573443 ( 0.02%) 221.49
imap 30257 ( 0.10%) 4892125 ( 0.02%) 161.69
telnet 1882 ( 0.01%) 415923 ( 0.00%) 221.00
ssh 42805 ( 0.15%) 7862092 ( 0.04%) 183.67
dns 8639 ( 0.03%) 826141 ( 0.00%) 95.63
bgp 749 ( 0.00%) 199156 ( 0.00%) 265.90
napster 142 ( 0.00%) 10586 ( 0.00%) 74.55
realaud 47 ( 0.00%) 3274 ( 0.00%) 69.66
rtsp 6326 ( 0.02%) 7708251 ( 0.04%) 1218.50
icecast 3465 ( 0.01%) 245646 ( 0.00%) 70.89
hotline 19 ( 0.00%) 1206 ( 0.00%) 63.47
other 6107189 ( 20.78%) 3227795489 ( 15.19%) 528.52
udp 3611654 ( 12.29%) 1679180234 ( 7.90%) 464.93
dns 754951 ( 2.57%) 163626807 ( 0.77%) 216.74
realaud 57 ( 0.00%) 7441 ( 0.00%) 130.54
halflif 46 ( 0.00%) 4396 ( 0.00%) 95.57
starcra 21 ( 0.00%) 2879 ( 0.00%) 137.10
everque 379 ( 0.00%) 50022 ( 0.00%) 131.98
unreal 57 ( 0.00%) 10972 ( 0.00%) 192.49
quake 76 ( 0.00%) 8735 ( 0.00%) 114.93
cuseeme 8 ( 0.00%) 1026 ( 0.00%) 128.25
other 2855822 ( 9.72%) 1515344685 ( 7.13%) 530.62
icmp 407596 ( 1.39%) 62047870 ( 0.29%) 152.23
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6854 ( 0.02%) 3417596 ( 0.02%) 498.63
ip6 1877273 ( 6.39%) 622476992 ( 2.93%) 331.59
other 20621 ( 0.07%) 5593359 ( 0.03%) 271.25
frag 1802 ( 0.01%) 1515777 ( 0.01%) 841.16
ip6 182134 ( 0.62%) 116415835 ( 0.55%) 639.18
tcp6 111491 ( 0.38%) 99386927 ( 0.47%) 891.43
http(s) 5623 ( 0.02%) 6298094 ( 0.03%) 1120.06
http(c) 15903 ( 0.05%) 1443427 ( 0.01%) 90.76
squid 43 ( 0.00%) 3638 ( 0.00%) 84.60
smtp 312 ( 0.00%) 77564 ( 0.00%) 248.60
ftp 52 ( 0.00%) 4660 ( 0.00%) 89.62
dns 264 ( 0.00%) 62469 ( 0.00%) 236.62
bgp 85 ( 0.00%) 18493 ( 0.00%) 217.56
hotline 3 ( 0.00%) 222 ( 0.00%) 74.00
other 89206 ( 0.30%) 91478360 ( 0.43%) 1025.47
udp6 42275 ( 0.14%) 11198519 ( 0.05%) 264.90
dns 37334 ( 0.13%) 10566387 ( 0.05%) 283.02
realaud 5 ( 0.00%) 475 ( 0.00%) 95.00
starcra 2 ( 0.00%) 228 ( 0.00%) 114.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 4933 ( 0.02%) 631321 ( 0.00%) 127.98
icmp6 25011 ( 0.09%) 3494846 ( 0.02%) 139.73
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3244 ( 0.01%) 2320151 ( 0.01%) 715.21
tcpdump file: 201103291400.dump.gz (719.21 MB)