Traffic Trace Info
DumpFile: 201104051400.dump
FileSize: 2080.01MB
Id: 201104051400
StartTime: Tue Apr 5 14:00:01 2011
EndTime: Tue Apr 5 14:15:01 2011
TotalTime: 899.85 seconds
TotalCapSize: 1637.42MB CapLen: 96 bytes
# of packets: 29004919 (18862.99MB)
AvgRate: 175.82Mbps stddev:36.70M
IP flow (unique src/dst pair) Information
# of flows: 926245 (avg. 31.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.5% 1.9% 1.4% 1.4% 1.3% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 486777
Top 10 bandwidth usage (bytes/total in %):
24.2% 5.7% 3.9% 3.6% 3.5% 3.5% 3.2% 3.1% 2.8% 2.6%
# of IPv6 addresses: 4342
Top 10 bandwidth usage (bytes/total in %):
91.7% 87.1% 3.5% 1.8% 1.8% 1.4% 0.9% 0.7% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104051400.pktlen.png)
detailed numbers
[ 32- 63]: 5860974
[ 64- 127]: 7702641
[ 128- 255]: 1670935
[ 256- 511]: 837680
[ 512- 1023]: 824643
[ 1024- 2047]: 12108046
Protocol Breakdown
![[protocol breakdown chart]](201104051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29004919 (100.00%) 19779273834 (100.00%) 681.93
ip 28610414 ( 98.64%) 19342747818 ( 97.79%) 676.07
tcp 21847897 ( 75.32%) 16548053872 ( 83.66%) 757.42
http(s) 10092488 ( 34.80%) 13670456956 ( 69.12%) 1354.52
http(c) 6856019 ( 23.64%) 921787916 ( 4.66%) 134.45
squid 349251 ( 1.20%) 91663162 ( 0.46%) 262.46
smtp 186279 ( 0.64%) 105264738 ( 0.53%) 565.09
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 45125 ( 0.16%) 24298918 ( 0.12%) 538.48
pop3 21585 ( 0.07%) 13656005 ( 0.07%) 632.66
imap 7039 ( 0.02%) 2575577 ( 0.01%) 365.90
telnet 2464 ( 0.01%) 341664 ( 0.00%) 138.66
ssh 32416 ( 0.11%) 4831064 ( 0.02%) 149.03
dns 9501 ( 0.03%) 922649 ( 0.00%) 97.11
bgp 579 ( 0.00%) 120069 ( 0.00%) 207.37
napster 73 ( 0.00%) 8070 ( 0.00%) 110.55
realaud 33 ( 0.00%) 3852 ( 0.00%) 116.73
rtsp 36548 ( 0.13%) 33554456 ( 0.17%) 918.09
icecast 33346 ( 0.11%) 30777978 ( 0.16%) 922.99
hotline 28 ( 0.00%) 1748 ( 0.00%) 62.43
other 4175119 ( 14.39%) 1647788810 ( 8.33%) 394.67
udp 4593773 ( 15.84%) 2091824826 ( 10.58%) 455.36
dns 649945 ( 2.24%) 128676126 ( 0.65%) 197.98
realaud 2860 ( 0.01%) 2053274 ( 0.01%) 717.93
halflif 96 ( 0.00%) 9336 ( 0.00%) 97.25
starcra 45 ( 0.00%) 7574 ( 0.00%) 168.31
everque 888 ( 0.00%) 102796 ( 0.00%) 115.76
unreal 22 ( 0.00%) 3415 ( 0.00%) 155.23
quake 24 ( 0.00%) 4882 ( 0.00%) 203.42
cuseeme 16 ( 0.00%) 2755 ( 0.00%) 172.19
other 3939693 ( 13.58%) 1960865930 ( 9.91%) 497.72
icmp 557952 ( 1.92%) 87116314 ( 0.44%) 156.14
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9335 ( 0.03%) 3094506 ( 0.02%) 331.50
ip6 1584521 ( 5.46%) 608705034 ( 3.08%) 384.16
other 16751 ( 0.06%) 3933996 ( 0.02%) 234.85
frag 687 ( 0.00%) 662302 ( 0.00%) 964.05
ip6 394505 ( 1.36%) 436526016 ( 2.21%) 1106.52
tcp6 319777 ( 1.10%) 417678159 ( 2.11%) 1306.15
http(s) 4033 ( 0.01%) 5282846 ( 0.03%) 1309.90
http(c) 33730 ( 0.12%) 3030914 ( 0.02%) 89.86
smtp 412 ( 0.00%) 96552 ( 0.00%) 234.35
ftp 99 ( 0.00%) 8974 ( 0.00%) 90.65
dns 236 ( 0.00%) 60484 ( 0.00%) 256.29
bgp 89 ( 0.00%) 15285 ( 0.00%) 171.74
other 281178 ( 0.97%) 409183104 ( 2.07%) 1455.25
udp6 48944 ( 0.17%) 12239808 ( 0.06%) 250.08
dns 35459 ( 0.12%) 10839402 ( 0.05%) 305.69
starcra 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 13483 ( 0.05%) 1400186 ( 0.01%) 103.85
icmp6 20552 ( 0.07%) 2965807 ( 0.01%) 144.31
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5119 ( 0.02%) 3626800 ( 0.02%) 708.50
tcpdump file: 201104051400.dump.gz (712.90 MB)