Traffic Trace Info
DumpFile: 201103301400.dump
FileSize: 2107.10MB
Id: 201103301400
StartTime: Wed Mar 30 14:00:01 2011
EndTime: Wed Mar 30 14:15:01 2011
TotalTime: 900.02 seconds
TotalCapSize: 1660.87MB CapLen: 96 bytes
# of packets: 29243161 (21438.32MB)
AvgRate: 199.80Mbps stddev:37.92M
IP flow (unique src/dst pair) Information
# of flows: 801571 (avg. 36.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 2.4% 2.2% 1.5% 1.5% 1.5% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 445644
Top 10 bandwidth usage (bytes/total in %):
15.6% 12.5% 5.3% 4.3% 4.3% 3.1% 3.0% 2.5% 2.5% 2.4%
# of IPv6 addresses: 4803
Top 10 bandwidth usage (bytes/total in %):
39.3% 39.2% 29.4% 29.4% 11.6% 11.6% 3.4% 3.4% 2.1% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103301400.pktlen.png)
detailed numbers
[ 32- 63]: 6196095
[ 64- 127]: 6344077
[ 128- 255]: 1306030
[ 256- 511]: 731090
[ 512- 1023]: 612559
[ 1024- 2047]: 14053310
Protocol Breakdown
![[protocol breakdown chart]](201103301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29243161 (100.00%) 22479706675 (100.00%) 768.72
ip 28913666 ( 98.87%) 22167948127 ( 98.61%) 766.69
tcp 24903333 ( 85.16%) 20639368437 ( 91.81%) 828.78
http(s) 11817679 ( 40.41%) 16191496830 ( 72.03%) 1370.11
http(c) 7977506 ( 27.28%) 1271643123 ( 5.66%) 159.40
squid 356061 ( 1.22%) 115998079 ( 0.52%) 325.78
smtp 171037 ( 0.58%) 103321768 ( 0.46%) 604.09
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 27705 ( 0.09%) 5057195 ( 0.02%) 182.54
pop3 19317 ( 0.07%) 3727003 ( 0.02%) 192.94
imap 4864 ( 0.02%) 1546525 ( 0.01%) 317.95
telnet 436 ( 0.00%) 59461 ( 0.00%) 136.38
ssh 52416 ( 0.18%) 6906297 ( 0.03%) 131.76
dns 9362 ( 0.03%) 928632 ( 0.00%) 99.19
bgp 572 ( 0.00%) 105448 ( 0.00%) 184.35
napster 29 ( 0.00%) 3197 ( 0.00%) 110.24
realaud 13 ( 0.00%) 1181 ( 0.00%) 90.85
rtsp 11483 ( 0.04%) 8022439 ( 0.04%) 698.64
icecast 34507 ( 0.12%) 30301023 ( 0.13%) 878.11
hotline 7 ( 0.00%) 426 ( 0.00%) 60.86
other 4420312 ( 15.12%) 2900248190 ( 12.90%) 656.12
udp 2549021 ( 8.72%) 1118884064 ( 4.98%) 438.95
dns 682293 ( 2.33%) 152143969 ( 0.68%) 222.99
realaud 919 ( 0.00%) 56736 ( 0.00%) 61.74
halflif 29 ( 0.00%) 3785 ( 0.00%) 130.52
starcra 66 ( 0.00%) 8101 ( 0.00%) 122.74
everque 157 ( 0.00%) 30523 ( 0.00%) 194.41
unreal 32 ( 0.00%) 4961 ( 0.00%) 155.03
quake 22 ( 0.00%) 3426 ( 0.00%) 155.73
cuseeme 2 ( 0.00%) 191 ( 0.00%) 95.50
other 1865320 ( 6.38%) 966531442 ( 4.30%) 518.16
icmp 410925 ( 1.41%) 61886831 ( 0.28%) 150.60
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6460 ( 0.02%) 2048756 ( 0.01%) 317.14
ip6 1020919 ( 3.49%) 339393283 ( 1.51%) 332.44
other 22824 ( 0.08%) 6347596 ( 0.03%) 278.11
frag 845 ( 0.00%) 809146 ( 0.00%) 957.57
ip6 329495 ( 1.13%) 311758548 ( 1.39%) 946.17
tcp6 255566 ( 0.87%) 295616027 ( 1.32%) 1156.71
http(s) 63963 ( 0.22%) 96061454 ( 0.43%) 1501.83
http(c) 36177 ( 0.12%) 3344090 ( 0.01%) 92.44
squid 78 ( 0.00%) 6572 ( 0.00%) 84.26
smtp 308 ( 0.00%) 94320 ( 0.00%) 306.23
ftp 43 ( 0.00%) 3814 ( 0.00%) 88.70
dns 232 ( 0.00%) 55293 ( 0.00%) 238.33
bgp 89 ( 0.00%) 14204 ( 0.00%) 159.60
other 154676 ( 0.53%) 196036280 ( 0.87%) 1267.40
udp6 42867 ( 0.15%) 11628122 ( 0.05%) 271.26
dns 36055 ( 0.12%) 10552619 ( 0.05%) 292.68
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
starcra 1 ( 0.00%) 178 ( 0.00%) 178.00
unreal 3 ( 0.00%) 328 ( 0.00%) 109.33
other 6806 ( 0.02%) 1074770 ( 0.00%) 157.92
icmp6 29923 ( 0.10%) 3727778 ( 0.02%) 124.58
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1028 ( 0.00%) 771465 ( 0.00%) 750.45
tcpdump file: 201103301400.dump.gz (689.38 MB)