Traffic Trace Info
DumpFile: 201104071400.dump
FileSize: 2146.52MB
Id: 201104071400
StartTime: Thu Apr 7 14:00:00 2011
EndTime: Thu Apr 7 14:15:01 2011
TotalTime: 900.40 seconds
TotalCapSize: 1693.62MB CapLen: 96 bytes
# of packets: 29680462 (19757.63MB)
AvgRate: 183.99Mbps stddev:45.21M
IP flow (unique src/dst pair) Information
# of flows: 831010 (avg. 35.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.4% 2.2% 1.5% 1.3% 1.3% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 459303
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.3% 7.2% 6.8% 3.1% 3.1% 3.1% 2.6% 2.5% 2.5%
# of IPv6 addresses: 4194
Top 10 bandwidth usage (bytes/total in %):
61.1% 61.1% 24.4% 17.5% 5.7% 2.6% 2.6% 1.9% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104071400.pktlen.png)
detailed numbers
[ 32- 63]: 5569012
[ 64- 127]: 7592370
[ 128- 255]: 2104379
[ 256- 511]: 881327
[ 512- 1023]: 784845
[ 1024- 2047]: 12748529
Protocol Breakdown
![[protocol breakdown chart]](201104071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29680462 (100.00%) 20717371593 (100.00%) 698.01
ip 29313346 ( 98.76%) 20340723934 ( 98.18%) 693.91
tcp 21814847 ( 73.50%) 16915557786 ( 81.65%) 775.41
http(s) 9839891 ( 33.15%) 12998633012 ( 62.74%) 1321.01
http(c) 5996083 ( 20.20%) 1219803432 ( 5.89%) 203.43
squid 343380 ( 1.16%) 98197515 ( 0.47%) 285.97
smtp 175153 ( 0.59%) 72400497 ( 0.35%) 413.36
nntp 4 ( 0.00%) 258 ( 0.00%) 64.50
ftp 66109 ( 0.22%) 49871523 ( 0.24%) 754.38
pop3 28952 ( 0.10%) 11591899 ( 0.06%) 400.38
imap 4859 ( 0.02%) 1482730 ( 0.01%) 305.15
telnet 2008 ( 0.01%) 435604 ( 0.00%) 216.93
ssh 135937 ( 0.46%) 19372687 ( 0.09%) 142.51
dns 15586 ( 0.05%) 1520577 ( 0.01%) 97.56
bgp 577 ( 0.00%) 97433 ( 0.00%) 168.86
napster 110 ( 0.00%) 15201 ( 0.00%) 138.19
realaud 159 ( 0.00%) 13621 ( 0.00%) 85.67
rtsp 139228 ( 0.47%) 140006962 ( 0.68%) 1005.59
icecast 861 ( 0.00%) 107469 ( 0.00%) 124.82
hotline 21 ( 0.00%) 1718 ( 0.00%) 81.81
other 5065928 ( 17.07%) 2302005588 ( 11.11%) 454.41
udp 4968995 ( 16.74%) 2649485294 ( 12.79%) 533.20
dns 680969 ( 2.29%) 150568072 ( 0.73%) 221.11
realaud 28 ( 0.00%) 4037 ( 0.00%) 144.18
halflif 18 ( 0.00%) 1421 ( 0.00%) 78.94
starcra 49 ( 0.00%) 4654 ( 0.00%) 94.98
everque 1000 ( 0.00%) 111271 ( 0.00%) 111.27
unreal 21 ( 0.00%) 3430 ( 0.00%) 163.33
quake 22 ( 0.00%) 1879 ( 0.00%) 85.41
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 4286564 ( 14.44%) 2498612686 ( 12.06%) 582.89
icmp 446252 ( 1.50%) 64591457 ( 0.31%) 144.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8374 ( 0.03%) 2334244 ( 0.01%) 278.75
ip6 2056359 ( 6.93%) 702069836 ( 3.39%) 341.41
other 18334 ( 0.06%) 6666047 ( 0.03%) 363.59
frag 1365 ( 0.00%) 1330172 ( 0.01%) 974.48
ip6 367116 ( 1.24%) 376647659 ( 1.82%) 1025.96
tcp6 306079 ( 1.03%) 362063272 ( 1.75%) 1182.91
http(s) 210315 ( 0.71%) 305157907 ( 1.47%) 1450.96
http(c) 38539 ( 0.13%) 3086454 ( 0.01%) 80.09
smtp 237 ( 0.00%) 47958 ( 0.00%) 202.35
ftp 73 ( 0.00%) 6474 ( 0.00%) 88.68
dns 232 ( 0.00%) 60416 ( 0.00%) 260.41
bgp 93 ( 0.00%) 14371 ( 0.00%) 154.53
other 56590 ( 0.19%) 53689692 ( 0.26%) 948.75
udp6 40065 ( 0.13%) 11191567 ( 0.05%) 279.34
dns 35202 ( 0.12%) 10439160 ( 0.05%) 296.55
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 4862 ( 0.02%) 752302 ( 0.00%) 154.73
icmp6 20369 ( 0.07%) 2994515 ( 0.01%) 147.01
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 492 ( 0.00%) 383167 ( 0.00%) 778.79
tcpdump file: 201104071400.dump.gz (724.90 MB)