Traffic Trace Info
DumpFile: 201104151400.dump
FileSize: 3048.70MB
Id: 201104151400
StartTime: Fri Apr 15 14:00:00 2011
EndTime: Fri Apr 15 14:15:00 2011
TotalTime: 899.74 seconds
TotalCapSize: -1705.13MB CapLen: 96 bytes
# of packets: 43110991 (29697.52MB)
AvgRate: 276.88Mbps stddev:41.50M
IP flow (unique src/dst pair) Information
# of flows: 973888 (avg. 44.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 4.1% 4.1% 2.5% 1.7% 1.6% 1.1% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 521195
Top 10 bandwidth usage (bytes/total in %):
14.2% 11.6% 11.6% 9.2% 6.7% 4.2% 4.1% 4.0% 2.7% 2.6%
# of IPv6 addresses: 4568
Top 10 bandwidth usage (bytes/total in %):
59.1% 49.2% 25.9% 14.3% 3.2% 3.2% 2.3% 2.3% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104151400.pktlen.png)
detailed numbers
[ 32- 63]: 8010870
[ 64- 127]: 9468206
[ 128- 255]: 2195930
[ 256- 511]: 1039977
[ 512- 1023]: 4172304
[ 1024- 2047]: 18223704
Protocol Breakdown
![[protocol breakdown chart]](201104151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43110991 (100.00%) 31140106382 (100.00%) 722.32
ip 42758549 ( 99.18%) 30896778556 ( 99.22%) 722.59
tcp 35838940 ( 83.13%) 27958040696 ( 89.78%) 780.10
http(s) 13681598 ( 31.74%) 18627779395 ( 59.82%) 1361.52
http(c) 7408291 ( 17.18%) 1124974828 ( 3.61%) 151.85
squid 677470 ( 1.57%) 302421213 ( 0.97%) 446.40
smtp 346141 ( 0.80%) 277780511 ( 0.89%) 802.51
nntp 19 ( 0.00%) 1168 ( 0.00%) 61.47
ftp 8234 ( 0.02%) 921485 ( 0.00%) 111.91
pop3 20606 ( 0.05%) 5960370 ( 0.02%) 289.25
imap 22024 ( 0.05%) 23523623 ( 0.08%) 1068.09
telnet 2344 ( 0.01%) 466129 ( 0.00%) 198.86
ssh 6684969 ( 15.51%) 3606536805 ( 11.58%) 539.50
dns 18806 ( 0.04%) 1970750 ( 0.01%) 104.79
bgp 645 ( 0.00%) 172481 ( 0.00%) 267.41
napster 1522 ( 0.00%) 97763 ( 0.00%) 64.23
realaud 41 ( 0.00%) 5505 ( 0.00%) 134.27
rtsp 68 ( 0.00%) 27510 ( 0.00%) 404.56
icecast 67855 ( 0.16%) 51614814 ( 0.17%) 760.66
hotline 47 ( 0.00%) 6047 ( 0.00%) 128.66
other 6898260 ( 16.00%) 3933780299 ( 12.63%) 570.26
udp 4627213 ( 10.73%) 2270289495 ( 7.29%) 490.64
dns 819531 ( 1.90%) 180309852 ( 0.58%) 220.02
realaud 35 ( 0.00%) 5665 ( 0.00%) 161.86
halflif 19 ( 0.00%) 2200 ( 0.00%) 115.79
starcra 36 ( 0.00%) 6082 ( 0.00%) 168.94
everque 608 ( 0.00%) 108602 ( 0.00%) 178.62
unreal 25 ( 0.00%) 3459 ( 0.00%) 138.36
quake 13 ( 0.00%) 2558 ( 0.00%) 196.77
cuseeme 14 ( 0.00%) 1232 ( 0.00%) 88.00
other 3806716 ( 8.83%) 2089736081 ( 6.71%) 548.96
icmp 512132 ( 1.19%) 82249727 ( 0.26%) 160.60
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1329 ( 0.00%) 397638 ( 0.00%) 299.20
ip6 1756196 ( 4.07%) 571869052 ( 1.84%) 325.63
other 22554 ( 0.05%) 13912678 ( 0.04%) 616.86
frag 1192 ( 0.00%) 1106492 ( 0.00%) 928.27
ip6 352442 ( 0.82%) 243327826 ( 0.78%) 690.41
tcp6 281958 ( 0.65%) 223733077 ( 0.72%) 793.50
http(s) 27263 ( 0.06%) 40084301 ( 0.13%) 1470.28
http(c) 102358 ( 0.24%) 8705686 ( 0.03%) 85.05
squid 34 ( 0.00%) 2876 ( 0.00%) 84.59
smtp 226 ( 0.00%) 38577 ( 0.00%) 170.69
ftp 90 ( 0.00%) 8675 ( 0.00%) 96.39
dns 210 ( 0.00%) 50731 ( 0.00%) 241.58
bgp 92 ( 0.00%) 16386 ( 0.00%) 178.11
other 151685 ( 0.35%) 174825845 ( 0.56%) 1152.56
udp6 47032 ( 0.11%) 15663569 ( 0.05%) 333.04
dns 41622 ( 0.10%) 12579973 ( 0.04%) 302.24
everque 3 ( 0.00%) 291 ( 0.00%) 97.00
other 5407 ( 0.01%) 3083305 ( 0.01%) 570.24
icmp6 22276 ( 0.05%) 3105839 ( 0.01%) 139.43
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1064 ( 0.00%) 810085 ( 0.00%) 761.36
tcpdump file: 201104151400.dump.gz (999.61 MB)