Traffic Trace Info
DumpFile: 201104141400.dump
FileSize: 2334.31MB
Id: 201104141400
StartTime: Thu Apr 14 14:00:01 2011
EndTime: Thu Apr 14 14:15:00 2011
TotalTime: 899.56 seconds
TotalCapSize: 1834.16MB CapLen: 96 bytes
# of packets: 32777463 (21482.22MB)
AvgRate: 200.33Mbps stddev:43.46M
IP flow (unique src/dst pair) Information
# of flows: 937967 (avg. 34.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.2% 1.3% 1.2% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 523718
Top 10 bandwidth usage (bytes/total in %):
16.4% 6.8% 6.8% 5.1% 3.4% 2.8% 2.8% 2.7% 2.5% 2.2%
# of IPv6 addresses: 4496
Top 10 bandwidth usage (bytes/total in %):
40.6% 35.6% 31.8% 31.8% 4.4% 4.2% 3.0% 3.0% 2.4% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104141400.pktlen.png)
detailed numbers
[ 32- 63]: 7107847
[ 64- 127]: 7755153
[ 128- 255]: 2101289
[ 256- 511]: 1103638
[ 512- 1023]: 1008221
[ 1024- 2047]: 13701315
Protocol Breakdown
![[protocol breakdown chart]](201104141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32777463 (100.00%) 22525744398 (100.00%) 687.23
ip 32590579 ( 99.43%) 22425565617 ( 99.56%) 688.10
tcp 26207159 ( 79.95%) 19650413577 ( 87.24%) 749.81
http(s) 11586277 ( 35.35%) 15418350318 ( 68.45%) 1330.74
http(c) 7382529 ( 22.52%) 1428797162 ( 6.34%) 193.54
squid 448454 ( 1.37%) 166227398 ( 0.74%) 370.67
smtp 187525 ( 0.57%) 88776724 ( 0.39%) 473.41
nntp 53 ( 0.00%) 3304 ( 0.00%) 62.34
ftp 12371 ( 0.04%) 1195943 ( 0.01%) 96.67
pop3 28682 ( 0.09%) 15030882 ( 0.07%) 524.05
imap 4496 ( 0.01%) 1261382 ( 0.01%) 280.56
telnet 3501 ( 0.01%) 655338 ( 0.00%) 187.19
ssh 15982 ( 0.05%) 3110719 ( 0.01%) 194.64
dns 17726 ( 0.05%) 1603659 ( 0.01%) 90.47
bgp 618 ( 0.00%) 141973 ( 0.00%) 229.73
napster 20 ( 0.00%) 3095 ( 0.00%) 154.75
realaud 50 ( 0.00%) 4835 ( 0.00%) 96.70
rtsp 286466 ( 0.87%) 202298185 ( 0.90%) 706.19
icecast 119355 ( 0.36%) 93620461 ( 0.42%) 784.39
hotline 34 ( 0.00%) 2702 ( 0.00%) 79.47
other 6112995 ( 18.65%) 2229327637 ( 9.90%) 364.69
udp 4480447 ( 13.67%) 2184782344 ( 9.70%) 487.63
dns 698293 ( 2.13%) 158517183 ( 0.70%) 227.01
realaud 69 ( 0.00%) 11086 ( 0.00%) 160.67
halflif 79 ( 0.00%) 13851 ( 0.00%) 175.33
starcra 87 ( 0.00%) 9016 ( 0.00%) 103.63
everque 299 ( 0.00%) 67383 ( 0.00%) 225.36
unreal 54 ( 0.00%) 5948 ( 0.00%) 110.15
quake 24 ( 0.00%) 4703 ( 0.00%) 195.96
cuseeme 6 ( 0.00%) 841 ( 0.00%) 140.17
other 3781279 ( 11.54%) 2026047777 ( 8.99%) 535.81
icmp 464013 ( 1.42%) 67073164 ( 0.30%) 144.55
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 107088 ( 0.33%) 90369828 ( 0.40%) 843.88
ip6 1314077 ( 4.01%) 426445703 ( 1.89%) 324.52
other 17611 ( 0.05%) 6461841 ( 0.03%) 366.92
frag 1965 ( 0.01%) 1576333 ( 0.01%) 802.21
ip6 186884 ( 0.57%) 100178781 ( 0.44%) 536.05
tcp6 73264 ( 0.22%) 49498160 ( 0.22%) 675.61
http(s) 3286 ( 0.01%) 4153369 ( 0.02%) 1263.96
http(c) 24794 ( 0.08%) 2373158 ( 0.01%) 95.72
squid 141 ( 0.00%) 11870 ( 0.00%) 84.18
smtp 281 ( 0.00%) 72769 ( 0.00%) 258.96
ftp 76 ( 0.00%) 6736 ( 0.00%) 88.63
dns 210 ( 0.00%) 51612 ( 0.00%) 245.77
bgp 96 ( 0.00%) 20274 ( 0.00%) 211.19
other 44380 ( 0.14%) 42808372 ( 0.19%) 964.59
udp6 41887 ( 0.13%) 12360444 ( 0.05%) 295.09
dns 35560 ( 0.11%) 10776612 ( 0.05%) 303.05
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 2 ( 0.00%) 318 ( 0.00%) 159.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 6322 ( 0.02%) 1583194 ( 0.01%) 250.43
icmp6 21290 ( 0.06%) 2984979 ( 0.01%) 140.21
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 50332 ( 0.15%) 35320010 ( 0.16%) 701.74
tcpdump file: 201104141400.dump.gz (792.86 MB)