Traffic Trace Info
DumpFile: 201104111400.dump
FileSize: 2477.49MB
Id: 201104111400
StartTime: Mon Apr 11 14:00:01 2011
EndTime: Mon Apr 11 14:15:00 2011
TotalTime: 899.12 seconds
TotalCapSize: 1947.56MB CapLen: 96 bytes
# of packets: 34728715 (24060.84MB)
AvgRate: 223.99Mbps stddev:153.34M
IP flow (unique src/dst pair) Information
# of flows: 1196340 (avg. 29.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.7% 4.7% 4.0% 3.9% 2.1% 1.4% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 650217
Top 10 bandwidth usage (bytes/total in %):
18.4% 8.5% 6.9% 6.8% 6.8% 4.7% 4.2% 4.0% 4.0% 3.8%
# of IPv6 addresses: 4281
Top 10 bandwidth usage (bytes/total in %):
48.1% 32.4% 18.3% 17.5% 9.3% 8.2% 8.1% 6.9% 6.1% 6.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104111400.pktlen.png)
detailed numbers
[ 32- 63]: 7392106
[ 64- 127]: 8141746
[ 128- 255]: 1694780
[ 256- 511]: 966807
[ 512- 1023]: 1304110
[ 1024- 2047]: 15229166
Protocol Breakdown
![[protocol breakdown chart]](201104111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34728715 (100.00%) 25229617337 (100.00%) 726.48
ip 34420293 ( 99.11%) 24970381526 ( 98.97%) 725.46
tcp 25541629 ( 73.55%) 18365223830 ( 72.79%) 719.03
http(s) 11207242 ( 32.27%) 14139677195 ( 56.04%) 1261.66
http(c) 7936071 ( 22.85%) 1643626143 ( 6.51%) 207.11
squid 513637 ( 1.48%) 112237546 ( 0.44%) 218.52
smtp 229360 ( 0.66%) 154975920 ( 0.61%) 675.69
nntp 477 ( 0.00%) 29508 ( 0.00%) 61.86
ftp 12547 ( 0.04%) 1119795 ( 0.00%) 89.25
pop3 15198 ( 0.04%) 4384240 ( 0.02%) 288.47
imap 7228 ( 0.02%) 2155413 ( 0.01%) 298.20
telnet 5233 ( 0.02%) 1204040 ( 0.00%) 230.09
ssh 97470 ( 0.28%) 10175798 ( 0.04%) 104.40
dns 12458 ( 0.04%) 1211584 ( 0.00%) 97.25
bgp 598 ( 0.00%) 120585 ( 0.00%) 201.65
napster 27 ( 0.00%) 1805 ( 0.00%) 66.85
realaud 71 ( 0.00%) 14724 ( 0.00%) 207.38
rtsp 32056 ( 0.09%) 42963818 ( 0.17%) 1340.27
icecast 2827 ( 0.01%) 2146802 ( 0.01%) 759.39
hotline 64 ( 0.00%) 7108 ( 0.00%) 111.06
other 5469062 ( 15.75%) 2249171626 ( 8.91%) 411.25
udp 5782658 ( 16.65%) 5421074689 ( 21.49%) 937.47
dns 744010 ( 2.14%) 154636991 ( 0.61%) 207.84
realaud 139 ( 0.00%) 25623 ( 0.00%) 184.34
halflif 18034 ( 0.05%) 1085115 ( 0.00%) 60.17
starcra 52 ( 0.00%) 8729 ( 0.00%) 167.87
everque 434 ( 0.00%) 69823 ( 0.00%) 160.88
unreal 23 ( 0.00%) 5473 ( 0.00%) 237.96
quake 23 ( 0.00%) 2680 ( 0.00%) 116.52
cuseeme 8 ( 0.00%) 957 ( 0.00%) 119.62
other 4926854 ( 14.19%) 5138979051 ( 20.37%) 1043.05
icmp 875413 ( 2.52%) 99177753 ( 0.39%) 113.29
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4737 ( 0.01%) 1128458 ( 0.00%) 238.22
ip6 2198168 ( 6.33%) 1078023301 ( 4.27%) 490.42
other 17503 ( 0.05%) 5734225 ( 0.02%) 327.61
frag 3352032 ( 9.65%) 4626047873 ( 18.34%) 1380.07
ip6 308420 ( 0.89%) 259235691 ( 1.03%) 840.53
tcp6 230452 ( 0.66%) 236074587 ( 0.94%) 1024.40
http(s) 26784 ( 0.08%) 39732903 ( 0.16%) 1483.46
http(c) 30363 ( 0.09%) 2755828 ( 0.01%) 90.76
smtp 321 ( 0.00%) 122039 ( 0.00%) 380.18
ftp 92 ( 0.00%) 8233 ( 0.00%) 89.49
pop3 628 ( 0.00%) 59278 ( 0.00%) 94.39
ssh 90 ( 0.00%) 10620 ( 0.00%) 118.00
dns 200 ( 0.00%) 42275 ( 0.00%) 211.38
bgp 91 ( 0.00%) 18042 ( 0.00%) 198.26
other 171883 ( 0.49%) 193325369 ( 0.77%) 1124.75
udp6 46352 ( 0.13%) 12566031 ( 0.05%) 271.10
dns 36769 ( 0.11%) 10904781 ( 0.04%) 296.58
halflif 2 ( 0.00%) 217 ( 0.00%) 108.50
everque 3 ( 0.00%) 317 ( 0.00%) 105.67
other 9578 ( 0.03%) 1660716 ( 0.01%) 173.39
icmp6 20385 ( 0.06%) 2954961 ( 0.01%) 144.96
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11117 ( 0.03%) 7624602 ( 0.03%) 685.85
tcpdump file: 201104111400.dump.gz (837.02 MB)