Traffic Trace Info
DumpFile: 201104021400.dump
FileSize: 4019.12MB
Id: 201104021400
StartTime: Sat Apr 2 14:00:00 2011
EndTime: Sat Apr 2 14:15:00 2011
TotalTime: 899.87 seconds
TotalCapSize: -1062.74MB CapLen: 96 bytes
# of packets: 64608487 (63995.18MB)
AvgRate: 596.60Mbps stddev:110.85M
IP flow (unique src/dst pair) Information
# of flows: 858087 (avg. 75.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.8% 9.3% 8.6% 7.8% 6.3% 4.9% 3.3% 3.2% 2.8% 2.5%
IP address Information
# of IPv4 addresses: 490865
Top 10 bandwidth usage (bytes/total in %):
60.4% 9.9% 9.3% 8.6% 8.4% 7.8% 6.3% 5.0% 4.4% 3.5%
# of IPv6 addresses: 4788
Top 10 bandwidth usage (bytes/total in %):
72.7% 56.2% 21.6% 8.5% 8.5% 4.5% 2.8% 2.7% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104021400.pktlen.png)
detailed numbers
[ 32- 63]: 6181566
[ 64- 127]: 8843294
[ 128- 255]: 2030000
[ 256- 511]: 1514807
[ 512- 1023]: 5158107
[ 1024- 2047]: 40880713
Protocol Breakdown
![[protocol breakdown chart]](201104021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64608487 (100.00%) 67103805401 (100.00%) 1038.62
ip 64191160 ( 99.35%) 66685348573 ( 99.38%) 1038.86
tcp 27740690 ( 42.94%) 23225066378 ( 34.61%) 837.22
http(s) 12172574 ( 18.84%) 16594972893 ( 24.73%) 1363.31
http(c) 5447702 ( 8.43%) 889544765 ( 1.33%) 163.29
squid 410698 ( 0.64%) 103847359 ( 0.15%) 252.86
smtp 118440 ( 0.18%) 73715744 ( 0.11%) 622.39
ftp 40913 ( 0.06%) 3951069 ( 0.01%) 96.57
pop3 12362 ( 0.02%) 3372054 ( 0.01%) 272.78
imap 3471 ( 0.01%) 1912024 ( 0.00%) 550.86
telnet 155 ( 0.00%) 29005 ( 0.00%) 187.13
ssh 269477 ( 0.42%) 42312863 ( 0.06%) 157.02
dns 18153 ( 0.03%) 1325854 ( 0.00%) 73.04
bgp 580 ( 0.00%) 110094 ( 0.00%) 189.82
napster 291 ( 0.00%) 20751 ( 0.00%) 71.31
realaud 58 ( 0.00%) 8584 ( 0.00%) 148.00
rtsp 483595 ( 0.75%) 58864668 ( 0.09%) 121.72
icecast 12527 ( 0.02%) 15335088 ( 0.02%) 1224.16
hotline 260 ( 0.00%) 186202 ( 0.00%) 716.16
other 8749434 ( 13.54%) 5435557361 ( 8.10%) 621.25
udp 33435856 ( 51.75%) 42362490791 ( 63.13%) 1266.98
dns 605708 ( 0.94%) 137116733 ( 0.20%) 226.37
rip 903 ( 0.00%) 1254278 ( 0.00%) 1389.01
realaud 822 ( 0.00%) 1134839 ( 0.00%) 1380.58
halflif 45 ( 0.00%) 3493 ( 0.00%) 77.62
starcra 898 ( 0.00%) 1200209 ( 0.00%) 1336.54
everque 1099 ( 0.00%) 1238810 ( 0.00%) 1127.22
unreal 27 ( 0.00%) 3570 ( 0.00%) 132.22
quake 1794 ( 0.00%) 2455787 ( 0.00%) 1368.89
cuseeme 6 ( 0.00%) 808 ( 0.00%) 134.67
other 32793445 ( 50.76%) 42175788741 ( 62.85%) 1286.10
icmp 424737 ( 0.66%) 78476035 ( 0.12%) 184.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1915 ( 0.00%) 660694 ( 0.00%) 345.01
ip6 2518749 ( 3.90%) 990252322 ( 1.48%) 393.15
other 69028 ( 0.11%) 28383083 ( 0.04%) 411.18
frag 29010893 ( 44.90%) 40308433021 ( 60.07%) 1389.42
ip6 417327 ( 0.65%) 418456828 ( 0.62%) 1002.71
tcp6 339327 ( 0.53%) 400610249 ( 0.60%) 1180.60
http(s) 13811 ( 0.02%) 20250226 ( 0.03%) 1466.24
http(c) 33745 ( 0.05%) 2868769 ( 0.00%) 85.01
squid 44 ( 0.00%) 3672 ( 0.00%) 83.45
smtp 191 ( 0.00%) 31672 ( 0.00%) 165.82
ftp 76 ( 0.00%) 6696 ( 0.00%) 88.11
dns 258 ( 0.00%) 61024 ( 0.00%) 236.53
bgp 92 ( 0.00%) 18012 ( 0.00%) 195.78
other 291110 ( 0.45%) 377370178 ( 0.56%) 1296.31
udp6 41450 ( 0.06%) 10095524 ( 0.02%) 243.56
dns 31042 ( 0.05%) 8361736 ( 0.01%) 269.37
starcra 1 ( 0.00%) 175 ( 0.00%) 175.00
everque 5 ( 0.00%) 538 ( 0.00%) 107.60
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 2 ( 0.00%) 214 ( 0.00%) 107.00
other 10399 ( 0.02%) 1732748 ( 0.00%) 166.63
icmp6 30952 ( 0.05%) 3839817 ( 0.01%) 124.06
ip6 79 ( 0.00%) 10822 ( 0.00%) 136.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5489 ( 0.01%) 3896336 ( 0.01%) 709.84
tcpdump file: 201104021400.dump.gz (1160.49 MB)