Traffic Trace Info
DumpFile: 201104181400.dump
FileSize: 12147.66MB
Id: 201104181400
StartTime: Mon Apr 18 14:00:01 2011
EndTime: Mon Apr 18 14:15:01 2011
TotalTime: 899.95 seconds
TotalCapSize: 781.00MB CapLen: 96 bytes
# of packets: 208054515 (32696.14MB)
AvgRate: 304.77Mbps stddev:32.52M
IP flow (unique src/dst pair) Information
# of flows: 1092995 (avg. 190.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.2% 7.9% 4.3% 3.9% 2.3% 1.6% 1.3% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 540688
Top 10 bandwidth usage (bytes/total in %):
29.8% 10.4% 8.3% 8.3% 7.2% 6.5% 4.9% 4.5% 3.9% 2.9%
# of IPv6 addresses: 4904
Top 10 bandwidth usage (bytes/total in %):
36.6% 29.3% 19.9% 19.6% 17.5% 11.7% 11.6% 11.6% 6.0% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104181400.pktlen.png)
detailed numbers
[ 32- 63]: 176152032
[ 64- 127]: 12056699
[ 128- 255]: 2135966
[ 256- 511]: 944431
[ 512- 1023]: 2852511
[ 1024- 2047]: 13912876
Protocol Breakdown
![[protocol breakdown chart]](201104181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 208054515 (100.00%) 34284388152 (100.00%) 164.79
ip 207043948 ( 99.51%) 33848531981 ( 98.73%) 163.48
tcp 31197408 ( 14.99%) 20173547027 ( 58.84%) 646.64
http(s) 9258578 ( 4.45%) 12266117242 ( 35.78%) 1324.84
http(c) 9501616 ( 4.57%) 1518559429 ( 4.43%) 159.82
squid 313953 ( 0.15%) 117059307 ( 0.34%) 372.86
smtp 159504 ( 0.08%) 74144543 ( 0.22%) 464.84
nntp 19 ( 0.00%) 1158 ( 0.00%) 60.95
ftp 19502 ( 0.01%) 1635747 ( 0.00%) 83.88
pop3 55112 ( 0.03%) 8115341 ( 0.02%) 147.25
imap 7688 ( 0.00%) 4202293 ( 0.01%) 546.60
telnet 2385 ( 0.00%) 497064 ( 0.00%) 208.41
ssh 5652147 ( 2.72%) 2817064891 ( 8.22%) 498.41
dns 15183 ( 0.01%) 2097375 ( 0.01%) 138.14
bgp 664 ( 0.00%) 205817 ( 0.00%) 309.97
napster 530 ( 0.00%) 37501 ( 0.00%) 70.76
realaud 26 ( 0.00%) 2575 ( 0.00%) 99.04
rtsp 27438 ( 0.01%) 28316610 ( 0.08%) 1032.02
icecast 74265 ( 0.04%) 51036936 ( 0.15%) 687.23
hotline 45 ( 0.00%) 5270 ( 0.00%) 117.11
other 6108143 ( 2.94%) 3284411328 ( 9.58%) 537.71
udp 173582987 ( 83.43%) 13014241430 ( 37.96%) 74.97
dns 722150 ( 0.35%) 156983291 ( 0.46%) 217.38
realaud 1822 ( 0.00%) 110141 ( 0.00%) 60.45
halflif 31 ( 0.00%) 6442 ( 0.00%) 207.81
starcra 85 ( 0.00%) 7096 ( 0.00%) 83.48
everque 610 ( 0.00%) 77846 ( 0.00%) 127.62
unreal 48 ( 0.00%) 5377 ( 0.00%) 112.02
quake 25 ( 0.00%) 2849 ( 0.00%) 113.96
cuseeme 12 ( 0.00%) 4315 ( 0.00%) 359.58
other 172857948 ( 83.08%) 12856892084 ( 37.50%) 74.38
icmp 471628 ( 0.23%) 80742236 ( 0.24%) 171.20
ipip 180 ( 0.00%) 18744 ( 0.00%) 104.13
ipsec 803 ( 0.00%) 194050 ( 0.00%) 241.66
ip6 1764851 ( 0.85%) 560377050 ( 1.63%) 317.52
other 26091 ( 0.01%) 19411444 ( 0.06%) 743.99
frag 2165 ( 0.00%) 1871032 ( 0.01%) 864.22
ip6 1010567 ( 0.49%) 435856171 ( 1.27%) 431.30
tcp6 913791 ( 0.44%) 400079149 ( 1.17%) 437.82
http(s) 37746 ( 0.02%) 56135499 ( 0.16%) 1487.19
http(c) 57459 ( 0.03%) 5023927 ( 0.01%) 87.43
squid 33 ( 0.00%) 2786 ( 0.00%) 84.42
smtp 360 ( 0.00%) 136406 ( 0.00%) 378.91
ftp 135 ( 0.00%) 12342 ( 0.00%) 91.42
dns 205 ( 0.00%) 49816 ( 0.00%) 243.00
bgp 91 ( 0.00%) 15360 ( 0.00%) 168.79
other 817762 ( 0.39%) 338703013 ( 0.99%) 414.18
udp6 55737 ( 0.03%) 19712905 ( 0.06%) 353.68
dns 40628 ( 0.02%) 12151493 ( 0.04%) 299.09
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 2 ( 0.00%) 225 ( 0.00%) 112.50
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 15103 ( 0.01%) 7560756 ( 0.02%) 500.61
icmp6 22329 ( 0.01%) 2979865 ( 0.01%) 133.45
ip6 79 ( 0.00%) 10772 ( 0.00%) 136.35
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18601 ( 0.01%) 13069400 ( 0.04%) 702.62
tcpdump file: 201104181400.dump.gz (1812.76 MB)