Traffic Trace Info
DumpFile: 201104091400.dump
FileSize: 2340.79MB
Id: 201104091400
StartTime: Sat Apr 9 14:00:01 2011
EndTime: Sat Apr 9 14:15:00 2011
TotalTime: 899.72 seconds
TotalCapSize: 1837.50MB CapLen: 96 bytes
# of packets: 32983039 (24260.49MB)
AvgRate: 226.20Mbps stddev:48.38M
IP flow (unique src/dst pair) Information
# of flows: 941156 (avg. 35.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.2% 1.9% 1.8% 1.8% 1.5% 1.3% 1.2% 0.9% 0.6%
IP address Information
# of IPv4 addresses: 541907
Top 10 bandwidth usage (bytes/total in %):
34.3% 11.0% 3.8% 3.2% 3.2% 2.9% 2.4% 2.2% 2.0% 1.9%
# of IPv6 addresses: 4200
Top 10 bandwidth usage (bytes/total in %):
23.7% 10.4% 9.8% 8.8% 8.3% 8.3% 8.1% 7.5% 7.3% 7.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104091400.pktlen.png)
detailed numbers
[ 32- 63]: 7516343
[ 64- 127]: 6251573
[ 128- 255]: 1629173
[ 256- 511]: 889706
[ 512- 1023]: 958433
[ 1024- 2047]: 15737811
Protocol Breakdown
![[protocol breakdown chart]](201104091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32983039 (100.00%) 25438971955 (100.00%) 771.27
ip 32810481 ( 99.48%) 25307044562 ( 99.48%) 771.31
tcp 26638419 ( 80.76%) 22691371870 ( 89.20%) 851.83
http(s) 14145669 ( 42.89%) 19446984140 ( 76.45%) 1374.77
http(c) 6127996 ( 18.58%) 864379587 ( 3.40%) 141.05
squid 395778 ( 1.20%) 152521857 ( 0.60%) 385.37
smtp 162582 ( 0.49%) 60812106 ( 0.24%) 374.04
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 37223 ( 0.11%) 16102966 ( 0.06%) 432.61
pop3 13950 ( 0.04%) 3197188 ( 0.01%) 229.19
imap 6845 ( 0.02%) 3567901 ( 0.01%) 521.24
telnet 4783 ( 0.01%) 969630 ( 0.00%) 202.72
ssh 382389 ( 1.16%) 35593652 ( 0.14%) 93.08
dns 9021 ( 0.03%) 865251 ( 0.00%) 95.92
bgp 552 ( 0.00%) 90131 ( 0.00%) 163.28
napster 129 ( 0.00%) 13346 ( 0.00%) 103.46
realaud 40 ( 0.00%) 4314 ( 0.00%) 107.85
rtsp 220849 ( 0.67%) 308913596 ( 1.21%) 1398.75
icecast 444 ( 0.00%) 40211 ( 0.00%) 90.57
hotline 176 ( 0.00%) 17168 ( 0.00%) 97.55
other 5129990 ( 15.55%) 1797298646 ( 7.07%) 350.35
udp 4098060 ( 12.42%) 1877868640 ( 7.38%) 458.23
dns 560052 ( 1.70%) 113216725 ( 0.45%) 202.15
realaud 19 ( 0.00%) 3199 ( 0.00%) 168.37
halflif 17520 ( 0.05%) 1052626 ( 0.00%) 60.08
starcra 52 ( 0.00%) 5013 ( 0.00%) 96.40
everque 184 ( 0.00%) 28801 ( 0.00%) 156.53
unreal 51 ( 0.00%) 10801 ( 0.00%) 211.78
quake 27 ( 0.00%) 3895 ( 0.00%) 144.26
cuseeme 4 ( 0.00%) 337 ( 0.00%) 84.25
other 3520006 ( 10.67%) 1763470473 ( 6.93%) 500.99
icmp 544067 ( 1.65%) 82350408 ( 0.32%) 151.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3645 ( 0.01%) 769438 ( 0.00%) 211.09
ip6 1500203 ( 4.55%) 646162239 ( 2.54%) 430.72
other 25902 ( 0.08%) 8502697 ( 0.03%) 328.26
frag 26193 ( 0.08%) 21018275 ( 0.08%) 802.44
ip6 172556 ( 0.52%) 131927273 ( 0.52%) 764.55
tcp6 117976 ( 0.36%) 118284648 ( 0.46%) 1002.62
http(s) 8814 ( 0.03%) 12757899 ( 0.05%) 1447.46
http(c) 6510 ( 0.02%) 689161 ( 0.00%) 105.86
squid 138 ( 0.00%) 11648 ( 0.00%) 84.41
smtp 257 ( 0.00%) 66702 ( 0.00%) 259.54
ftp 43 ( 0.00%) 3814 ( 0.00%) 88.70
dns 217 ( 0.00%) 47487 ( 0.00%) 218.83
bgp 95 ( 0.00%) 19531 ( 0.00%) 205.59
other 101902 ( 0.31%) 104688406 ( 0.41%) 1027.34
udp6 32460 ( 0.10%) 8667047 ( 0.03%) 267.01
dns 27824 ( 0.08%) 7996762 ( 0.03%) 287.41
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 4633 ( 0.01%) 669948 ( 0.00%) 144.60
icmp6 19067 ( 0.06%) 2857360 ( 0.01%) 149.86
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2941 ( 0.01%) 2102962 ( 0.01%) 715.05
tcpdump file: 201104091400.dump.gz (791.43 MB)