Traffic Trace Info
DumpFile: 201103311400.dump
FileSize: 2076.47MB
Id: 201103311400
StartTime: Thu Mar 31 14:00:01 2011
EndTime: Thu Mar 31 14:15:01 2011
TotalTime: 899.62 seconds
TotalCapSize: 1632.59MB CapLen: 96 bytes
# of packets: 29089799 (18818.72MB)
AvgRate: 175.45Mbps stddev:33.29M
IP flow (unique src/dst pair) Information
# of flows: 869049 (avg. 33.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.6% 1.5% 1.3% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 474136
Top 10 bandwidth usage (bytes/total in %):
15.0% 8.3% 6.5% 3.7% 3.5% 2.7% 2.7% 2.1% 2.1% 2.0%
# of IPv6 addresses: 4883
Top 10 bandwidth usage (bytes/total in %):
56.7% 46.5% 11.6% 9.6% 9.6% 7.0% 7.0% 6.1% 6.1% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103311400.pktlen.png)
detailed numbers
[ 32- 63]: 6528467
[ 64- 127]: 7112929
[ 128- 255]: 1820353
[ 256- 511]: 807517
[ 512- 1023]: 753668
[ 1024- 2047]: 12066865
Protocol Breakdown
![[protocol breakdown chart]](201103311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29089799 (100.00%) 19732856505 (100.00%) 678.34
ip 28832102 ( 99.11%) 19540745630 ( 99.03%) 677.74
tcp 22856781 ( 78.57%) 17012470068 ( 86.21%) 744.31
http(s) 9082887 ( 31.22%) 12143575339 ( 61.54%) 1336.97
http(c) 7287672 ( 25.05%) 1553934913 ( 7.87%) 213.23
squid 358314 ( 1.23%) 147157161 ( 0.75%) 410.69
smtp 288740 ( 0.99%) 208260250 ( 1.06%) 721.27
nntp 10 ( 0.00%) 606 ( 0.00%) 60.60
ftp 43641 ( 0.15%) 4051237 ( 0.02%) 92.83
pop3 49406 ( 0.17%) 7363429 ( 0.04%) 149.04
imap 26994 ( 0.09%) 31830045 ( 0.16%) 1179.15
telnet 102 ( 0.00%) 7338 ( 0.00%) 71.94
ssh 140918 ( 0.48%) 25539659 ( 0.13%) 181.24
dns 8612 ( 0.03%) 793531 ( 0.00%) 92.14
bgp 656 ( 0.00%) 120621 ( 0.00%) 183.87
napster 58 ( 0.00%) 5946 ( 0.00%) 102.52
realaud 17 ( 0.00%) 1683 ( 0.00%) 99.00
rtsp 6270 ( 0.02%) 7687687 ( 0.04%) 1226.11
icecast 17090 ( 0.06%) 10910513 ( 0.06%) 638.42
hotline 19 ( 0.00%) 1603 ( 0.00%) 84.37
other 5545331 ( 19.06%) 2871225867 ( 14.55%) 517.77
udp 4150246 ( 14.27%) 2112247118 ( 10.70%) 508.95
dns 659529 ( 2.27%) 146025654 ( 0.74%) 221.41
realaud 17 ( 0.00%) 2721 ( 0.00%) 160.06
halflif 102 ( 0.00%) 18840 ( 0.00%) 184.71
starcra 116 ( 0.00%) 15431 ( 0.00%) 133.03
everque 130 ( 0.00%) 26601 ( 0.00%) 204.62
unreal 15 ( 0.00%) 2443 ( 0.00%) 162.87
quake 10 ( 0.00%) 1262 ( 0.00%) 126.20
cuseeme 26 ( 0.00%) 2208 ( 0.00%) 84.92
other 3489925 ( 12.00%) 1965960557 ( 9.96%) 563.32
icmp 397776 ( 1.37%) 73299760 ( 0.37%) 184.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2289 ( 0.01%) 826346 ( 0.00%) 361.01
ip6 1401303 ( 4.82%) 333774934 ( 1.69%) 238.19
other 23522 ( 0.08%) 8108134 ( 0.04%) 344.70
frag 1277 ( 0.00%) 1191194 ( 0.01%) 932.81
ip6 257697 ( 0.89%) 192110875 ( 0.97%) 745.49
tcp6 161887 ( 0.56%) 158701034 ( 0.80%) 980.32
http(s) 1434 ( 0.00%) 1788815 ( 0.01%) 1247.43
http(c) 29608 ( 0.10%) 2635267 ( 0.01%) 89.01
squid 75 ( 0.00%) 6230 ( 0.00%) 83.07
smtp 214 ( 0.00%) 43677 ( 0.00%) 204.10
ftp 43 ( 0.00%) 3814 ( 0.00%) 88.70
dns 324 ( 0.00%) 80308 ( 0.00%) 247.86
bgp 91 ( 0.00%) 15194 ( 0.00%) 166.97
realaud 30 ( 0.00%) 4273 ( 0.00%) 142.43
other 130068 ( 0.45%) 154123456 ( 0.78%) 1184.95
udp6 37710 ( 0.13%) 10645765 ( 0.05%) 282.31
dns 34176 ( 0.12%) 9955017 ( 0.05%) 291.29
realaud 8 ( 0.00%) 736 ( 0.00%) 92.00
starcra 1 ( 0.00%) 200 ( 0.00%) 200.00
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
other 3521 ( 0.01%) 689394 ( 0.00%) 195.79
icmp6 31124 ( 0.11%) 3865420 ( 0.02%) 124.19
ip6 78 ( 0.00%) 10704 ( 0.00%) 137.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26868 ( 0.09%) 18883872 ( 0.10%) 702.84
tcpdump file: 201103311400.dump.gz (704.61 MB)