Traffic Trace Info
DumpFile: 201104041400.dump
FileSize: 3305.65MB
Id: 201104041400
StartTime: Mon Apr 4 14:00:00 2011
EndTime: Mon Apr 4 14:15:00 2011
TotalTime: 899.75 seconds
TotalCapSize: -1579.49MB CapLen: 96 bytes
# of packets: 51716577 (47674.10MB)
AvgRate: 444.28Mbps stddev:245.21M
IP flow (unique src/dst pair) Information
# of flows: 969649 (avg. 53.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.9% 10.4% 9.5% 8.5% 5.5% 3.4% 2.0% 1.7% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 533138
Top 10 bandwidth usage (bytes/total in %):
50.2% 12.9% 10.4% 9.5% 8.5% 8.0% 5.5% 4.5% 3.4% 3.4%
# of IPv6 addresses: 3906
Top 10 bandwidth usage (bytes/total in %):
36.9% 27.2% 9.7% 9.7% 5.9% 5.9% 5.4% 4.3% 4.3% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104041400.pktlen.png)
detailed numbers
[ 32- 63]: 6624588
[ 64- 127]: 7768402
[ 128- 255]: 2022854
[ 256- 511]: 1269681
[ 512- 1023]: 3498002
[ 1024- 2047]: 30533050
Protocol Breakdown
![[protocol breakdown chart]](201104041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51716577 (100.00%) 49989913921 (100.00%) 966.61
ip 51503453 ( 99.59%) 49910197365 ( 99.84%) 969.07
tcp 26664939 ( 51.56%) 21978886914 ( 43.97%) 824.26
http(s) 13324933 ( 25.77%) 18357367072 ( 36.72%) 1377.67
http(c) 8165948 ( 15.79%) 1338776718 ( 2.68%) 163.95
squid 394779 ( 0.76%) 102026033 ( 0.20%) 258.44
smtp 239481 ( 0.46%) 145796423 ( 0.29%) 608.80
ftp 30271 ( 0.06%) 10741402 ( 0.02%) 354.84
pop3 49494 ( 0.10%) 7472532 ( 0.01%) 150.98
imap 7133 ( 0.01%) 4063214 ( 0.01%) 569.64
telnet 256 ( 0.00%) 16336 ( 0.00%) 63.81
ssh 110523 ( 0.21%) 18502256 ( 0.04%) 167.41
dns 11451 ( 0.02%) 1066431 ( 0.00%) 93.13
bgp 581 ( 0.00%) 132587 ( 0.00%) 228.20
napster 38 ( 0.00%) 39009 ( 0.00%) 1026.55
realaud 21 ( 0.00%) 3698 ( 0.00%) 176.10
rtsp 8245 ( 0.02%) 7772862 ( 0.02%) 942.74
icecast 15404 ( 0.03%) 11642282 ( 0.02%) 755.80
hotline 6 ( 0.00%) 390 ( 0.00%) 65.00
other 4306368 ( 8.33%) 1973467249 ( 3.95%) 458.27
udp 22531909 ( 43.57%) 27176132249 ( 54.36%) 1206.12
dns 674522 ( 1.30%) 137323880 ( 0.27%) 203.59
rip 569 ( 0.00%) 791794 ( 0.00%) 1391.55
realaud 578 ( 0.00%) 786513 ( 0.00%) 1360.75
halflif 34 ( 0.00%) 3864 ( 0.00%) 113.65
starcra 572 ( 0.00%) 729536 ( 0.00%) 1275.41
everque 1010 ( 0.00%) 839041 ( 0.00%) 830.73
unreal 53 ( 0.00%) 11180 ( 0.00%) 210.94
quake 1121 ( 0.00%) 1511488 ( 0.00%) 1348.34
cuseeme 7 ( 0.00%) 629 ( 0.00%) 89.86
other 21735782 ( 42.03%) 26873932306 ( 53.76%) 1236.39
icmp 406538 ( 0.79%) 76363542 ( 0.15%) 187.84
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4201 ( 0.01%) 1290874 ( 0.00%) 307.28
ip6 1876775 ( 3.63%) 673285882 ( 1.35%) 358.75
other 18907 ( 0.04%) 4218744 ( 0.01%) 223.13
frag 18036701 ( 34.88%) 25058135615 ( 50.13%) 1389.29
ip6 213124 ( 0.41%) 79716556 ( 0.16%) 374.04
tcp6 147783 ( 0.29%) 61572582 ( 0.12%) 416.64
http(s) 3301 ( 0.01%) 4121068 ( 0.01%) 1248.43
http(c) 57029 ( 0.11%) 5252167 ( 0.01%) 92.10
squid 8 ( 0.00%) 1307 ( 0.00%) 163.38
smtp 258 ( 0.00%) 85884 ( 0.00%) 332.88
ftp 101 ( 0.00%) 8993 ( 0.00%) 89.04
dns 172 ( 0.00%) 40137 ( 0.00%) 233.35
bgp 93 ( 0.00%) 18966 ( 0.00%) 203.94
other 86821 ( 0.17%) 52044060 ( 0.10%) 599.44
udp6 41311 ( 0.08%) 12491335 ( 0.02%) 302.37
dns 38936 ( 0.08%) 12121918 ( 0.02%) 311.33
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
starcra 2 ( 0.00%) 378 ( 0.00%) 189.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 210 ( 0.00%) 105.00
other 2369 ( 0.00%) 368620 ( 0.00%) 155.60
icmp6 20453 ( 0.04%) 3139043 ( 0.01%) 153.48
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3467 ( 0.01%) 2498576 ( 0.00%) 720.67
tcpdump file: 201104041400.dump.gz (997.51 MB)