Traffic Trace Info
DumpFile: 201104101400.dump
FileSize: 1985.02MB
Id: 201104101400
StartTime: Sun Apr 10 14:00:00 2011
EndTime: Sun Apr 10 14:15:01 2011
TotalTime: 900.48 seconds
TotalCapSize: 1553.42MB CapLen: 96 bytes
# of packets: 28284279 (19566.16MB)
AvgRate: 182.27Mbps stddev:48.66M
IP flow (unique src/dst pair) Information
# of flows: 909956 (avg. 31.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 1.8% 1.6% 0.7% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 505659
Top 10 bandwidth usage (bytes/total in %):
31.3% 6.6% 6.6% 5.0% 3.1% 3.1% 3.0% 3.0% 2.6% 2.4%
# of IPv6 addresses: 4705
Top 10 bandwidth usage (bytes/total in %):
75.0% 74.9% 14.3% 13.3% 2.4% 0.8% 0.8% 0.8% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104101400.pktlen.png)
detailed numbers
[ 32- 63]: 5666768
[ 64- 127]: 6946173
[ 128- 255]: 1600310
[ 256- 511]: 753219
[ 512- 1023]: 622860
[ 1024- 2047]: 12694949
Protocol Breakdown
![[protocol breakdown chart]](201104101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28284279 (100.00%) 20516606903 (100.00%) 725.37
ip 28098435 ( 99.34%) 20360470959 ( 99.24%) 724.61
tcp 20314680 ( 71.82%) 16887855234 ( 82.31%) 831.31
http(s) 10586733 ( 37.43%) 14214588225 ( 69.28%) 1342.68
http(c) 4588459 ( 16.22%) 708956447 ( 3.46%) 154.51
squid 397911 ( 1.41%) 170448371 ( 0.83%) 428.36
smtp 123237 ( 0.44%) 40911270 ( 0.20%) 331.97
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 29682 ( 0.10%) 4065753 ( 0.02%) 136.98
pop3 13653 ( 0.05%) 10330679 ( 0.05%) 756.66
imap 6195 ( 0.02%) 6008092 ( 0.03%) 969.83
telnet 28 ( 0.00%) 5425 ( 0.00%) 193.75
ssh 300794 ( 1.06%) 27931658 ( 0.14%) 92.86
dns 6240 ( 0.02%) 540382 ( 0.00%) 86.60
bgp 545 ( 0.00%) 80299 ( 0.00%) 147.34
napster 91 ( 0.00%) 13395 ( 0.00%) 147.20
realaud 50 ( 0.00%) 5446 ( 0.00%) 108.92
rtsp 83 ( 0.00%) 31174 ( 0.00%) 375.59
icecast 856 ( 0.00%) 78803 ( 0.00%) 92.06
hotline 69 ( 0.00%) 6104 ( 0.00%) 88.46
other 4260047 ( 15.06%) 1703853285 ( 8.30%) 399.96
udp 5273540 ( 18.64%) 2831959038 ( 13.80%) 537.01
dns 520323 ( 1.84%) 101792726 ( 0.50%) 195.63
realaud 82 ( 0.00%) 15046 ( 0.00%) 183.49
halflif 17161 ( 0.06%) 1031070 ( 0.01%) 60.08
starcra 33 ( 0.00%) 4242 ( 0.00%) 128.55
everque 191 ( 0.00%) 42734 ( 0.00%) 223.74
unreal 61 ( 0.00%) 6809 ( 0.00%) 111.62
quake 9 ( 0.00%) 808 ( 0.00%) 89.78
cuseeme 1 ( 0.00%) 140 ( 0.00%) 140.00
other 4735495 ( 16.74%) 2728965132 ( 13.30%) 576.28
icmp 919209 ( 3.25%) 97067065 ( 0.47%) 105.60
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6734 ( 0.02%) 2346884 ( 0.01%) 348.51
ip6 1567134 ( 5.54%) 534781467 ( 2.61%) 341.25
other 16953 ( 0.06%) 6442001 ( 0.03%) 379.99
frag 11150 ( 0.04%) 9074218 ( 0.04%) 813.83
ip6 185842 ( 0.66%) 156135824 ( 0.76%) 840.15
tcp6 130066 ( 0.46%) 145272864 ( 0.71%) 1116.92
http(s) 1307 ( 0.00%) 1349770 ( 0.01%) 1032.72
http(c) 19015 ( 0.07%) 1842719 ( 0.01%) 96.91
squid 21 ( 0.00%) 1778 ( 0.00%) 84.67
smtp 63 ( 0.00%) 25077 ( 0.00%) 398.05
ftp 67 ( 0.00%) 5937 ( 0.00%) 88.61
dns 213 ( 0.00%) 51522 ( 0.00%) 241.89
bgp 93 ( 0.00%) 16348 ( 0.00%) 175.78
other 109287 ( 0.39%) 141979713 ( 0.69%) 1299.15
udp6 30932 ( 0.11%) 7425470 ( 0.04%) 240.06
dns 26201 ( 0.09%) 6598384 ( 0.03%) 251.84
starcra 1 ( 0.00%) 103 ( 0.00%) 103.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 4728 ( 0.02%) 826767 ( 0.00%) 174.87
icmp6 24573 ( 0.09%) 3278806 ( 0.02%) 133.43
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 157 ( 0.00%) 143192 ( 0.00%) 912.05
tcpdump file: 201104101400.dump.gz (674.71 MB)