Traffic Trace Info
DumpFile: 201104031400.dump
FileSize: 3488.53MB
Id: 201104031400
StartTime: Sun Apr 3 14:00:01 2011
EndTime: Sun Apr 3 14:15:01 2011
TotalTime: 900.01 seconds
TotalCapSize: -1483.52MB CapLen: 96 bytes
# of packets: 57412601 (56935.45MB)
AvgRate: 530.36Mbps stddev:320.63M
IP flow (unique src/dst pair) Information
# of flows: 993640 (avg. 57.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.1% 16.0% 12.8% 5.3% 3.7% 3.5% 3.3% 2.4% 2.3% 1.9%
IP address Information
# of IPv4 addresses: 585989
Top 10 bandwidth usage (bytes/total in %):
65.0% 16.1% 16.0% 12.9% 10.0% 5.3% 3.7% 3.5% 3.3% 2.8%
# of IPv6 addresses: 4736
Top 10 bandwidth usage (bytes/total in %):
31.0% 29.5% 29.5% 28.4% 9.1% 8.3% 4.7% 4.5% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104031400.pktlen.png)
detailed numbers
[ 32- 63]: 5523539
[ 64- 127]: 7713935
[ 128- 255]: 1916171
[ 256- 511]: 1381994
[ 512- 1023]: 4613495
[ 1024- 2047]: 36263467
Protocol Breakdown
![[protocol breakdown chart]](201104031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57412601 (100.00%) 59701142661 (100.00%) 1039.86
ip 57192261 ( 99.62%) 59562131302 ( 99.77%) 1041.44
tcp 22275009 ( 38.80%) 17835179897 ( 29.87%) 800.68
http(s) 10298690 ( 17.94%) 14094991295 ( 23.61%) 1368.62
http(c) 4995260 ( 8.70%) 628882242 ( 1.05%) 125.90
squid 426995 ( 0.74%) 74498123 ( 0.12%) 174.47
smtp 137244 ( 0.24%) 41529731 ( 0.07%) 302.60
nntp 18 ( 0.00%) 1098 ( 0.00%) 61.00
ftp 37932 ( 0.07%) 9900311 ( 0.02%) 261.00
pop3 5276 ( 0.01%) 2182774 ( 0.00%) 413.72
imap 2763 ( 0.00%) 1130241 ( 0.00%) 409.06
telnet 335 ( 0.00%) 21524 ( 0.00%) 64.25
ssh 113673 ( 0.20%) 20006819 ( 0.03%) 176.00
dns 8488 ( 0.01%) 760416 ( 0.00%) 89.59
bgp 587 ( 0.00%) 108719 ( 0.00%) 185.21
napster 54 ( 0.00%) 6853 ( 0.00%) 126.91
realaud 87 ( 0.00%) 36980 ( 0.00%) 425.06
rtsp 136476 ( 0.24%) 97348072 ( 0.16%) 713.30
icecast 1064 ( 0.00%) 73958 ( 0.00%) 69.51
hotline 49 ( 0.00%) 3328 ( 0.00%) 67.92
other 6110018 ( 10.64%) 2863697413 ( 4.80%) 468.69
udp 32430650 ( 56.49%) 41028606918 ( 68.72%) 1265.12
dns 516011 ( 0.90%) 108672177 ( 0.18%) 210.60
rip 192 ( 0.00%) 266784 ( 0.00%) 1389.50
realaud 157 ( 0.00%) 202024 ( 0.00%) 1286.78
halflif 298 ( 0.00%) 18968 ( 0.00%) 63.65
starcra 278 ( 0.00%) 282903 ( 0.00%) 1017.64
everque 372 ( 0.00%) 295611 ( 0.00%) 794.65
unreal 16 ( 0.00%) 2433 ( 0.00%) 152.06
quake 366 ( 0.00%) 465832 ( 0.00%) 1272.77
cuseeme 12 ( 0.00%) 1535 ( 0.00%) 127.92
other 30876131 ( 53.78%) 39502231553 ( 66.17%) 1279.38
icmp 448827 ( 0.78%) 64935372 ( 0.11%) 144.68
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 13688 ( 0.02%) 6600744 ( 0.01%) 482.23
ip6 2006443 ( 3.49%) 621686614 ( 1.04%) 309.85
other 17460 ( 0.03%) 5102585 ( 0.01%) 292.24
frag 27875909 ( 48.55%) 38742083697 ( 64.89%) 1389.81
ip6 220340 ( 0.38%) 139011359 ( 0.23%) 630.89
tcp6 122980 ( 0.21%) 109239590 ( 0.18%) 888.27
http(s) 1863 ( 0.00%) 2452458 ( 0.00%) 1316.40
http(c) 15064 ( 0.03%) 1405154 ( 0.00%) 93.28
smtp 309 ( 0.00%) 106117 ( 0.00%) 343.42
ftp 61 ( 0.00%) 5471 ( 0.00%) 89.69
dns 244 ( 0.00%) 57348 ( 0.00%) 235.03
bgp 86 ( 0.00%) 11806 ( 0.00%) 137.28
other 105353 ( 0.18%) 105201236 ( 0.18%) 998.56
udp6 46488 ( 0.08%) 9294050 ( 0.02%) 199.92
dns 27353 ( 0.05%) 7055152 ( 0.01%) 257.93
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
starcra 1 ( 0.00%) 175 ( 0.00%) 175.00
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 19129 ( 0.03%) 2238174 ( 0.00%) 117.00
icmp6 26477 ( 0.05%) 3514642 ( 0.01%) 132.74
ip6 79 ( 0.00%) 10822 ( 0.00%) 136.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24286 ( 0.04%) 16948175 ( 0.03%) 697.86
tcpdump file: 201104031400.dump.gz (983.43 MB)