Traffic Trace Info
DumpFile: 201104061400.dump
FileSize: 3027.65MB
Id: 201104061400
StartTime: Wed Apr 6 14:00:00 2011
EndTime: Wed Apr 6 14:15:00 2011
TotalTime: 899.65 seconds
TotalCapSize: -1779.53MB CapLen: 96 bytes
# of packets: 46607370 (40916.32MB)
AvgRate: 381.56Mbps stddev:236.62M
IP flow (unique src/dst pair) Information
# of flows: 925605 (avg. 50.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
31.9% 15.9% 2.0% 2.0% 1.0% 1.0% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 482993
Top 10 bandwidth usage (bytes/total in %):
47.9% 32.0% 15.9% 7.8% 2.8% 2.4% 2.1% 2.0% 2.0% 1.9%
# of IPv6 addresses: 5129
Top 10 bandwidth usage (bytes/total in %):
30.1% 17.6% 15.4% 15.4% 11.4% 11.3% 9.9% 9.9% 7.7% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104061400.pktlen.png)
detailed numbers
[ 32- 63]: 5732560
[ 64- 127]: 8628780
[ 128- 255]: 2089059
[ 256- 511]: 1191974
[ 512- 1023]: 2880116
[ 1024- 2047]: 26084881
Protocol Breakdown
![[protocol breakdown chart]](201104061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46607370 (100.00%) 42903871542 (100.00%) 920.54
ip 46392386 ( 99.54%) 42786665898 ( 99.73%) 922.28
tcp 25092369 ( 53.84%) 19501807056 ( 45.45%) 777.20
http(s) 10844879 ( 23.27%) 14719987452 ( 34.31%) 1357.32
http(c) 8042788 ( 17.26%) 1892021765 ( 4.41%) 235.24
squid 407019 ( 0.87%) 121427286 ( 0.28%) 298.33
smtp 200955 ( 0.43%) 88688250 ( 0.21%) 441.33
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 37237 ( 0.08%) 17366160 ( 0.04%) 466.37
pop3 27559 ( 0.06%) 11260104 ( 0.03%) 408.58
imap 4785 ( 0.01%) 2402683 ( 0.01%) 502.13
telnet 2140 ( 0.00%) 313439 ( 0.00%) 146.47
ssh 1210903 ( 2.60%) 939153418 ( 2.19%) 775.58
dns 13059 ( 0.03%) 1200526 ( 0.00%) 91.93
bgp 593 ( 0.00%) 126100 ( 0.00%) 212.65
napster 162 ( 0.00%) 24159 ( 0.00%) 149.13
realaud 36 ( 0.00%) 3707 ( 0.00%) 102.97
rtsp 6605 ( 0.01%) 7692637 ( 0.02%) 1164.67
icecast 1447 ( 0.00%) 105965 ( 0.00%) 73.23
hotline 14 ( 0.00%) 1235 ( 0.00%) 88.21
other 4292187 ( 9.21%) 1700032110 ( 3.96%) 396.08
udp 19138927 ( 41.06%) 22530136645 ( 52.51%) 1177.19
dns 730650 ( 1.57%) 161238904 ( 0.38%) 220.68
rip 480 ( 0.00%) 666960 ( 0.00%) 1389.50
realaud 492 ( 0.00%) 665206 ( 0.00%) 1352.04
halflif 21 ( 0.00%) 2524 ( 0.00%) 120.19
starcra 504 ( 0.00%) 664714 ( 0.00%) 1318.88
everque 1238 ( 0.00%) 761111 ( 0.00%) 614.79
unreal 13 ( 0.00%) 3375 ( 0.00%) 259.62
quake 931 ( 0.00%) 1269525 ( 0.00%) 1363.61
cuseeme 2 ( 0.00%) 135 ( 0.00%) 67.50
other 18365924 ( 39.41%) 22312332742 ( 52.01%) 1214.88
icmp 474622 ( 1.02%) 78235443 ( 0.18%) 164.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10369 ( 0.02%) 5018434 ( 0.01%) 483.98
ip6 1653216 ( 3.55%) 661233246 ( 1.54%) 399.97
other 22698 ( 0.05%) 10215804 ( 0.02%) 450.08
frag 14753832 ( 31.66%) 20497486595 ( 47.78%) 1389.30
ip6 214984 ( 0.46%) 117205644 ( 0.27%) 545.18
tcp6 122337 ( 0.26%) 98954408 ( 0.23%) 808.87
http(s) 11846 ( 0.03%) 16586148 ( 0.04%) 1400.15
http(c) 24199 ( 0.05%) 2139936 ( 0.00%) 88.43
smtp 1412 ( 0.00%) 1932473 ( 0.00%) 1368.61
ftp 794 ( 0.00%) 375013 ( 0.00%) 472.31
dns 227 ( 0.00%) 53591 ( 0.00%) 236.08
bgp 93 ( 0.00%) 19000 ( 0.00%) 204.30
other 83766 ( 0.18%) 77848247 ( 0.18%) 929.35
udp6 65000 ( 0.14%) 13036892 ( 0.03%) 200.57
dns 35791 ( 0.08%) 9821679 ( 0.02%) 274.42
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
starcra 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 29206 ( 0.06%) 3214911 ( 0.01%) 110.08
icmp6 24769 ( 0.05%) 3242759 ( 0.01%) 130.92
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2766 ( 0.01%) 1956311 ( 0.00%) 707.27
tcpdump file: 201104061400.dump.gz (940.28 MB)