Traffic Trace Info
DumpFile: 201104201400.dump
FileSize: 3899.64MB
Id: 201104201400
StartTime: Wed Apr 20 14:00:00 2011
EndTime: Wed Apr 20 14:15:01 2011
TotalTime: 900.31 seconds
TotalCapSize: -1153.87MB CapLen: 96 bytes
# of packets: 62750707 (16012.62MB)
AvgRate: 149.20Mbps stddev:24.79M
IP flow (unique src/dst pair) Information
# of flows: 893638 (avg. 70.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.3% 3.6% 2.6% 2.3% 1.9% 1.9% 1.5% 1.5% 1.1%
IP address Information
# of IPv4 addresses: 481131
Top 10 bandwidth usage (bytes/total in %):
13.3% 8.2% 7.5% 7.3% 4.8% 4.4% 4.3% 4.0% 3.7% 2.6%
# of IPv6 addresses: 4867
Top 10 bandwidth usage (bytes/total in %):
23.0% 14.1% 9.7% 9.5% 9.5% 7.2% 7.2% 6.8% 6.8% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104201400.pktlen.png)
detailed numbers
[ 32- 63]: 43333728
[ 64- 127]: 7082148
[ 128- 255]: 1814544
[ 256- 511]: 976076
[ 512- 1023]: 1177276
[ 1024- 2047]: 8366935
Protocol Breakdown
![[protocol breakdown chart]](201104201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 62750707 (100.00%) 16790450868 (100.00%) 267.57
ip 62628844 ( 99.81%) 16746737435 ( 99.74%) 267.40
tcp 19586950 ( 31.21%) 12333477833 ( 73.46%) 629.68
http(s) 7123097 ( 11.35%) 9143176978 ( 54.45%) 1283.60
http(c) 5533709 ( 8.82%) 1037901134 ( 6.18%) 187.56
squid 430809 ( 0.69%) 131980200 ( 0.79%) 306.35
smtp 162931 ( 0.26%) 77850659 ( 0.46%) 477.81
ftp 14929 ( 0.02%) 1297527 ( 0.01%) 86.91
pop3 24847 ( 0.04%) 8717655 ( 0.05%) 350.85
imap 5040 ( 0.01%) 1342805 ( 0.01%) 266.43
telnet 4643 ( 0.01%) 989701 ( 0.01%) 213.16
ssh 433592 ( 0.69%) 42856742 ( 0.26%) 98.84
dns 15624 ( 0.02%) 1634095 ( 0.01%) 104.59
bgp 554 ( 0.00%) 109774 ( 0.00%) 198.15
napster 383 ( 0.00%) 27427 ( 0.00%) 71.61
realaud 350 ( 0.00%) 40624 ( 0.00%) 116.07
rtsp 1 ( 0.00%) 62 ( 0.00%) 62.00
icecast 58528 ( 0.09%) 53743669 ( 0.32%) 918.26
hotline 6 ( 0.00%) 384 ( 0.00%) 64.00
other 5777907 ( 9.21%) 1831808397 ( 10.91%) 317.04
udp 41243459 ( 65.73%) 3979069926 ( 23.70%) 96.48
dns 990368 ( 1.58%) 187469697 ( 1.12%) 189.29
realaud 43 ( 0.00%) 4382 ( 0.00%) 101.91
halflif 39 ( 0.00%) 4145 ( 0.00%) 106.28
starcra 75 ( 0.00%) 11987 ( 0.00%) 159.83
everque 1879 ( 0.00%) 289348 ( 0.00%) 153.99
unreal 16 ( 0.00%) 1359 ( 0.00%) 84.94
quake 22 ( 0.00%) 2138 ( 0.00%) 97.18
cuseeme 4 ( 0.00%) 606 ( 0.00%) 151.50
other 40250808 ( 64.14%) 3791156304 ( 22.58%) 94.19
icmp 438130 ( 0.70%) 64025892 ( 0.38%) 146.13
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1611 ( 0.00%) 591186 ( 0.00%) 366.97
ip6 1338972 ( 2.13%) 360167717 ( 2.15%) 268.99
other 19538 ( 0.03%) 9385721 ( 0.06%) 480.38
frag 828 ( 0.00%) 821455 ( 0.00%) 992.10
ip6 121863 ( 0.19%) 43713433 ( 0.26%) 358.71
tcp6 52042 ( 0.08%) 25006876 ( 0.15%) 480.51
http(s) 4762 ( 0.01%) 5926231 ( 0.04%) 1244.48
http(c) 15375 ( 0.02%) 1429277 ( 0.01%) 92.96
squid 3 ( 0.00%) 246 ( 0.00%) 82.00
smtp 280 ( 0.00%) 183628 ( 0.00%) 655.81
ftp 76 ( 0.00%) 6696 ( 0.00%) 88.11
dns 133 ( 0.00%) 22333 ( 0.00%) 167.92
bgp 92 ( 0.00%) 15915 ( 0.00%) 172.99
other 31321 ( 0.05%) 17422550 ( 0.10%) 556.26
udp6 42306 ( 0.07%) 13106356 ( 0.08%) 309.80
dns 38746 ( 0.06%) 12369546 ( 0.07%) 319.25
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 3559 ( 0.01%) 736707 ( 0.00%) 207.00
icmp6 23916 ( 0.04%) 3067544 ( 0.02%) 128.26
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3485 ( 0.01%) 2517097 ( 0.01%) 722.27
tcpdump file: 201104201400.dump.gz (857.49 MB)