Traffic Trace Info
DumpFile: 201104211400.dump
FileSize: 4133.85MB
Id: 201104211400
StartTime: Thu Apr 21 14:00:01 2011
EndTime: Thu Apr 21 14:15:01 2011
TotalTime: 899.76 seconds
TotalCapSize: -946.57MB CapLen: 96 bytes
# of packets: 64514693 (22817.71MB)
AvgRate: 212.72Mbps stddev:36.15M
IP flow (unique src/dst pair) Information
# of flows: 834454 (avg. 77.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.6% 3.0% 2.8% 2.2% 1.5% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 427594
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.4% 8.0% 6.6% 6.5% 5.8% 5.0% 3.8% 3.0% 2.8%
# of IPv6 addresses: 4646
Top 10 bandwidth usage (bytes/total in %):
35.2% 35.2% 22.5% 17.2% 7.7% 7.7% 5.9% 2.5% 2.5% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104211400.pktlen.png)
detailed numbers
[ 32- 63]: 37697622
[ 64- 127]: 9017887
[ 128- 255]: 2241204
[ 256- 511]: 1122618
[ 512- 1023]: 1177709
[ 1024- 2047]: 13257653
Protocol Breakdown
![[protocol breakdown chart]](201104211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64514693 (100.00%) 23926098702 (100.00%) 370.86
ip 64340147 ( 99.73%) 23853808383 ( 99.70%) 370.75
tcp 26118923 ( 40.49%) 19217693284 ( 80.32%) 735.78
http(s) 11008169 ( 17.06%) 14694413261 ( 61.42%) 1334.86
http(c) 8297816 ( 12.86%) 1749916812 ( 7.31%) 210.89
squid 361423 ( 0.56%) 148637360 ( 0.62%) 411.26
smtp 207105 ( 0.32%) 132148323 ( 0.55%) 638.07
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 298897 ( 0.46%) 223690577 ( 0.93%) 748.39
pop3 34052 ( 0.05%) 20100840 ( 0.08%) 590.30
imap 4993 ( 0.01%) 1325365 ( 0.01%) 265.44
telnet 213 ( 0.00%) 21490 ( 0.00%) 100.89
ssh 55107 ( 0.09%) 10334456 ( 0.04%) 187.53
dns 16282 ( 0.03%) 1706075 ( 0.01%) 104.78
bgp 563 ( 0.00%) 104568 ( 0.00%) 185.73
napster 122 ( 0.00%) 12593 ( 0.00%) 103.22
realaud 54 ( 0.00%) 9578 ( 0.00%) 177.37
rtsp 36175 ( 0.06%) 34069879 ( 0.14%) 941.81
icecast 77319 ( 0.12%) 69460149 ( 0.29%) 898.36
hotline 4 ( 0.00%) 278 ( 0.00%) 69.50
other 5720628 ( 8.87%) 2131741620 ( 8.91%) 372.64
udp 36000746 ( 55.80%) 4058667066 ( 16.96%) 112.74
dns 795668 ( 1.23%) 169529466 ( 0.71%) 213.07
rip 6 ( 0.00%) 432 ( 0.00%) 72.00
realaud 15 ( 0.00%) 1244 ( 0.00%) 82.93
halflif 28 ( 0.00%) 2881 ( 0.00%) 102.89
starcra 22 ( 0.00%) 3649 ( 0.00%) 165.86
everque 491 ( 0.00%) 141032 ( 0.00%) 287.23
unreal 36 ( 0.00%) 5009 ( 0.00%) 139.14
quake 28 ( 0.00%) 4881 ( 0.00%) 174.32
cuseeme 18 ( 0.00%) 1998 ( 0.00%) 111.00
other 35200610 ( 54.56%) 3884789299 ( 16.24%) 110.36
icmp 540747 ( 0.84%) 84671822 ( 0.35%) 156.58
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 976 ( 0.00%) 217066 ( 0.00%) 222.40
ip6 1658774 ( 2.57%) 482321676 ( 2.02%) 290.77
other 19797 ( 0.03%) 10218309 ( 0.04%) 516.15
frag 22596 ( 0.04%) 22341671 ( 0.09%) 988.74
ip6 174546 ( 0.27%) 72290319 ( 0.30%) 414.16
tcp6 72158 ( 0.11%) 29978521 ( 0.13%) 415.46
http(s) 11564 ( 0.02%) 15913887 ( 0.07%) 1376.16
http(c) 32589 ( 0.05%) 2790686 ( 0.01%) 85.63
squid 21 ( 0.00%) 1778 ( 0.00%) 84.67
smtp 277 ( 0.00%) 60632 ( 0.00%) 218.89
ftp 43 ( 0.00%) 3814 ( 0.00%) 88.70
dns 238 ( 0.00%) 50112 ( 0.00%) 210.55
bgp 94 ( 0.00%) 18153 ( 0.00%) 193.12
other 27332 ( 0.04%) 11139459 ( 0.05%) 407.56
udp6 46906 ( 0.07%) 13574305 ( 0.06%) 289.39
dns 39952 ( 0.06%) 11797043 ( 0.05%) 295.28
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 214 ( 0.00%) 107.00
quake 2 ( 0.00%) 225 ( 0.00%) 112.50
other 6947 ( 0.01%) 1776504 ( 0.01%) 255.72
icmp6 18878 ( 0.03%) 3024874 ( 0.01%) 160.23
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36492 ( 0.06%) 25697363 ( 0.11%) 704.19
tcpdump file: 201104211400.dump.gz (1022.00 MB)