Traffic Trace Info
DumpFile: 201104171400.dump
FileSize: 1556.82MB
Id: 201104171400
StartTime: Sun Apr 17 14:00:00 2011
EndTime: Sun Apr 17 14:01:20 2011
TotalTime: 80.33 seconds
TotalCapSize: 1137.43MB CapLen: 96 bytes
# of packets: 27485276 (2785.12MB)
AvgRate: 291.25Mbps stddev:19.62M
IP flow (unique src/dst pair) Information
# of flows: 99319 (avg. 276.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.2% 2.9% 2.9% 2.8% 2.8% 2.5% 2.3% 2.3% 2.3%
IP address Information
# of IPv4 addresses: 72011
Top 10 bandwidth usage (bytes/total in %):
52.6% 17.0% 4.9% 4.2% 4.2% 2.9% 2.9% 2.8% 2.8% 2.5%
# of IPv6 addresses: 1267
Top 10 bandwidth usage (bytes/total in %):
40.1% 31.9% 31.8% 20.5% 19.6% 11.5% 11.5% 2.0% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104171400.pktlen.png)
detailed numbers
[ 32- 63]: 25917161
[ 64- 127]: 504120
[ 128- 255]: 98645
[ 256- 511]: 51417
[ 512- 1023]: 46691
[ 1024- 2047]: 867242
Protocol Breakdown
![[protocol breakdown chart]](201104171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27485276 (100.00%) 2920412448 (100.00%) 106.25
ip 27412191 ( 99.73%) 2907317368 ( 99.55%) 106.06
tcp 1475353 ( 5.37%) 1113100482 ( 38.11%) 754.46
http(s) 690818 ( 2.51%) 931461777 ( 31.89%) 1348.35
http(c) 428549 ( 1.56%) 38342127 ( 1.31%) 89.47
squid 19479 ( 0.07%) 4689136 ( 0.16%) 240.73
smtp 16864 ( 0.06%) 16900520 ( 0.58%) 1002.17
ftp 998 ( 0.00%) 84918 ( 0.00%) 85.09
pop3 1528 ( 0.01%) 195715 ( 0.01%) 128.09
imap 137 ( 0.00%) 14253 ( 0.00%) 104.04
telnet 184 ( 0.00%) 25975 ( 0.00%) 141.17
ssh 2962 ( 0.01%) 1481208 ( 0.05%) 500.07
dns 813 ( 0.00%) 70703 ( 0.00%) 86.97
bgp 37 ( 0.00%) 7039 ( 0.00%) 190.24
napster 11 ( 0.00%) 1054 ( 0.00%) 95.82
realaud 3 ( 0.00%) 180 ( 0.00%) 60.00
rtsp 3 ( 0.00%) 1245 ( 0.00%) 415.00
icecast 21 ( 0.00%) 2852 ( 0.00%) 135.81
hotline 238 ( 0.00%) 16645 ( 0.00%) 69.94
other 312708 ( 1.14%) 119805135 ( 4.10%) 383.12
udp 25714825 ( 93.56%) 1640952516 ( 56.19%) 63.81
dns 34086 ( 0.12%) 6491685 ( 0.22%) 190.45
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 1 ( 0.00%) 85 ( 0.00%) 85.00
everque 41 ( 0.00%) 3612 ( 0.00%) 88.10
unreal 9 ( 0.00%) 710 ( 0.00%) 78.89
quake 1 ( 0.00%) 74 ( 0.00%) 74.00
other 25680675 ( 93.43%) 1634450335 ( 55.97%) 63.65
icmp 22269 ( 0.08%) 3998499 ( 0.14%) 179.55
ipip 11 ( 0.00%) 1150 ( 0.00%) 104.55
ipsec 190 ( 0.00%) 44212 ( 0.00%) 232.69
ip6 198341 ( 0.72%) 148731503 ( 5.09%) 749.88
other 1202 ( 0.00%) 489006 ( 0.02%) 406.83
frag 42 ( 0.00%) 36204 ( 0.00%) 862.00
ip6 73085 ( 0.27%) 13095080 ( 0.45%) 179.18
tcp6 68915 ( 0.25%) 12244210 ( 0.42%) 177.67
http(s) 173 ( 0.00%) 214490 ( 0.01%) 1239.83
http(c) 3231 ( 0.01%) 288581 ( 0.01%) 89.32
ssh 59581 ( 0.22%) 5246166 ( 0.18%) 88.05
dns 15 ( 0.00%) 2916 ( 0.00%) 194.40
bgp 6 ( 0.00%) 834 ( 0.00%) 139.00
other 5909 ( 0.02%) 6491223 ( 0.22%) 1098.53
udp6 2481 ( 0.01%) 588164 ( 0.02%) 237.07
dns 2065 ( 0.01%) 517350 ( 0.02%) 250.53
other 416 ( 0.00%) 70814 ( 0.00%) 170.23
icmp6 1594 ( 0.01%) 208891 ( 0.01%) 131.05
ip6 12 ( 0.00%) 1612 ( 0.00%) 134.33
pim6 3 ( 0.00%) 408 ( 0.00%) 136.00
other6 80 ( 0.00%) 51795 ( 0.00%) 647.44
tcpdump file: 201104171400.dump.gz (190.43 MB)