Traffic Trace Info
DumpFile: 201104121400.dump
FileSize: 5937.93MB
Id: 201104121400
StartTime: Tue Apr 12 14:00:01 2011
EndTime: Tue Apr 12 14:15:01 2011
TotalTime: 900.09 seconds
TotalCapSize: 342.95MB CapLen: 96 bytes
# of packets: 98236252 (40123.80MB)
AvgRate: 373.95Mbps stddev:167.80M
IP flow (unique src/dst pair) Information
# of flows: 1029690 (avg. 95.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.5% 10.6% 7.5% 2.4% 2.3% 2.1% 1.9% 1.8% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 495467
Top 10 bandwidth usage (bytes/total in %):
36.5% 18.5% 10.6% 7.5% 7.5% 4.9% 4.6% 3.4% 3.0% 2.5%
# of IPv6 addresses: 4471
Top 10 bandwidth usage (bytes/total in %):
54.4% 51.3% 6.0% 6.0% 4.9% 4.9% 4.9% 4.1% 3.4% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104121400.pktlen.png)
detailed numbers
[ 32- 63]: 59653080
[ 64- 127]: 8797356
[ 128- 255]: 2123783
[ 256- 511]: 1228158
[ 512- 1023]: 2985218
[ 1024- 2047]: 23448657
Protocol Breakdown
![[protocol breakdown chart]](201104121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 98236252 (100.00%) 42072854085 (100.00%) 428.28
ip 98031651 ( 99.79%) 41987872766 ( 99.80%) 428.31
tcp 27763357 ( 28.26%) 20513152189 ( 48.76%) 738.86
http(s) 11724506 ( 11.94%) 15547409795 ( 36.95%) 1326.06
http(c) 7829842 ( 7.97%) 1516901918 ( 3.61%) 193.73
squid 743036 ( 0.76%) 335671875 ( 0.80%) 451.76
smtp 145423 ( 0.15%) 62580249 ( 0.15%) 430.33
nntp 215 ( 0.00%) 13312 ( 0.00%) 61.92
ftp 17142 ( 0.02%) 1482057 ( 0.00%) 86.46
pop3 24274 ( 0.02%) 7549527 ( 0.02%) 311.01
imap 23432 ( 0.02%) 27178031 ( 0.06%) 1159.87
telnet 5993 ( 0.01%) 1354702 ( 0.00%) 226.05
ssh 384098 ( 0.39%) 420247661 ( 1.00%) 1094.12
dns 14522 ( 0.01%) 1460623 ( 0.00%) 100.58
bgp 587 ( 0.00%) 129482 ( 0.00%) 220.58
napster 184 ( 0.00%) 14964 ( 0.00%) 81.33
realaud 35 ( 0.00%) 3744 ( 0.00%) 106.97
rtsp 158 ( 0.00%) 62301 ( 0.00%) 394.31
icecast 57842 ( 0.06%) 46667003 ( 0.11%) 806.80
hotline 23 ( 0.00%) 1825 ( 0.00%) 79.35
other 6792045 ( 6.91%) 2544423120 ( 6.05%) 374.62
udp 68196619 ( 69.42%) 20915442730 ( 49.71%) 306.69
dns 829355 ( 0.84%) 177151998 ( 0.42%) 213.60
rip 318 ( 0.00%) 440980 ( 0.00%) 1386.73
realaud 326 ( 0.00%) 429721 ( 0.00%) 1318.16
halflif 36 ( 0.00%) 3749 ( 0.00%) 104.14
starcra 373 ( 0.00%) 471964 ( 0.00%) 1265.32
everque 759 ( 0.00%) 504615 ( 0.00%) 664.84
unreal 9 ( 0.00%) 1902 ( 0.00%) 211.33
quake 656 ( 0.00%) 892285 ( 0.00%) 1360.19
cuseeme 6 ( 0.00%) 529 ( 0.00%) 88.17
other 67206510 ( 68.41%) 20520890354 ( 48.77%) 305.34
icmp 622313 ( 0.63%) 91688795 ( 0.22%) 147.34
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5276 ( 0.01%) 1269404 ( 0.00%) 240.60
ip6 1424597 ( 1.45%) 458406078 ( 1.09%) 321.78
other 19305 ( 0.02%) 7894410 ( 0.02%) 408.93
frag 11031383 ( 11.23%) 15317594469 ( 36.41%) 1388.55
ip6 204601 ( 0.21%) 84981319 ( 0.20%) 415.35
tcp6 131045 ( 0.13%) 62057448 ( 0.15%) 473.56
http(s) 3731 ( 0.00%) 4294675 ( 0.01%) 1151.08
http(c) 75677 ( 0.08%) 6614063 ( 0.02%) 87.40
squid 17 ( 0.00%) 1442 ( 0.00%) 84.82
smtp 246 ( 0.00%) 171765 ( 0.00%) 698.23
ftp 66 ( 0.00%) 5828 ( 0.00%) 88.30
dns 273 ( 0.00%) 64019 ( 0.00%) 234.50
bgp 92 ( 0.00%) 19124 ( 0.00%) 207.87
other 50943 ( 0.05%) 50886532 ( 0.12%) 998.89
udp6 44464 ( 0.05%) 12187564 ( 0.03%) 274.10
dns 37248 ( 0.04%) 10817316 ( 0.03%) 290.41
realaud 1 ( 0.00%) 94 ( 0.00%) 94.00
halflif 2 ( 0.00%) 210 ( 0.00%) 105.00
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 7211 ( 0.01%) 1369729 ( 0.00%) 189.95
icmp6 17555 ( 0.02%) 2671266 ( 0.01%) 152.17
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11424 ( 0.01%) 8049599 ( 0.02%) 704.62
tcpdump file: 201104121400.dump.gz (1533.08 MB)