Traffic Trace Info
DumpFile: 201104221400.dump
FileSize: 3352.37MB
Id: 201104221400
StartTime: Fri Apr 22 14:00:01 2011
EndTime: Fri Apr 22 14:15:01 2011
TotalTime: 899.81 seconds
TotalCapSize: -1518.65MB CapLen: 96 bytes
# of packets: 50791000 (21639.32MB)
AvgRate: 201.72Mbps stddev:36.97M
IP flow (unique src/dst pair) Information
# of flows: 819417 (avg. 61.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.6% 2.1% 1.9% 1.7% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 444835
Top 10 bandwidth usage (bytes/total in %):
11.7% 9.6% 5.2% 4.9% 3.6% 2.8% 2.8% 2.7% 2.6% 2.5%
# of IPv6 addresses: 4512
Top 10 bandwidth usage (bytes/total in %):
52.7% 34.7% 17.6% 9.9% 9.9% 5.2% 5.2% 5.0% 5.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104221400.pktlen.png)
detailed numbers
[ 32- 63]: 24864706
[ 64- 127]: 8456201
[ 128- 255]: 2045743
[ 256- 511]: 1065383
[ 512- 1023]: 1482129
[ 1024- 2047]: 12876838
Protocol Breakdown
![[protocol breakdown chart]](201104221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50791000 (100.00%) 22690469073 (100.00%) 446.74
ip 50597218 ( 99.62%) 22570680558 ( 99.47%) 446.09
tcp 25346096 ( 49.90%) 18626271041 ( 82.09%) 734.88
http(s) 10452094 ( 20.58%) 13976712772 ( 61.60%) 1337.22
http(c) 8554283 ( 16.84%) 1837107564 ( 8.10%) 214.76
squid 274707 ( 0.54%) 140946472 ( 0.62%) 513.08
smtp 171910 ( 0.34%) 95405844 ( 0.42%) 554.98
nntp 8 ( 0.00%) 500 ( 0.00%) 62.50
ftp 57372 ( 0.11%) 4882687 ( 0.02%) 85.11
pop3 16944 ( 0.03%) 5542104 ( 0.02%) 327.08
imap 20218 ( 0.04%) 4448746 ( 0.02%) 220.04
telnet 5704 ( 0.01%) 1293139 ( 0.01%) 226.71
ssh 393524 ( 0.77%) 70242699 ( 0.31%) 178.50
dns 17113 ( 0.03%) 1764904 ( 0.01%) 103.13
bgp 538 ( 0.00%) 95498 ( 0.00%) 177.51
napster 32 ( 0.00%) 2711 ( 0.00%) 84.72
realaud 82 ( 0.00%) 7534 ( 0.00%) 91.88
rtsp 52828 ( 0.10%) 53371992 ( 0.24%) 1010.30
icecast 641 ( 0.00%) 53779 ( 0.00%) 83.90
hotline 30 ( 0.00%) 5135 ( 0.00%) 171.17
other 5328068 ( 10.49%) 2434386961 ( 10.73%) 456.90
udp 22982076 ( 45.25%) 3166784215 ( 13.96%) 137.79
dns 766251 ( 1.51%) 163351186 ( 0.72%) 213.18
realaud 11 ( 0.00%) 1187 ( 0.00%) 107.91
halflif 86 ( 0.00%) 5875 ( 0.00%) 68.31
starcra 54 ( 0.00%) 5220 ( 0.00%) 96.67
everque 304 ( 0.00%) 49010 ( 0.00%) 161.22
unreal 7262 ( 0.01%) 5322606 ( 0.02%) 732.94
quake 2035 ( 0.00%) 168638 ( 0.00%) 82.87
cuseeme 6 ( 0.00%) 543 ( 0.00%) 90.50
other 22204891 ( 43.72%) 2997681685 ( 13.21%) 135.00
icmp 385896 ( 0.76%) 65616448 ( 0.29%) 170.04
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5880 ( 0.01%) 1390228 ( 0.01%) 236.43
ip6 1861782 ( 3.67%) 705849038 ( 3.11%) 379.13
other 15304 ( 0.03%) 4750428 ( 0.02%) 310.40
frag 5304 ( 0.01%) 3941223 ( 0.02%) 743.07
ip6 193782 ( 0.38%) 119788515 ( 0.53%) 618.16
tcp6 91344 ( 0.18%) 84564436 ( 0.37%) 925.78
http(s) 16660 ( 0.03%) 23306845 ( 0.10%) 1398.97
http(c) 9262 ( 0.02%) 945868 ( 0.00%) 102.12
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 646 ( 0.00%) 109489 ( 0.00%) 169.49
ftp 15 ( 0.00%) 1543 ( 0.00%) 102.87
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 227 ( 0.00%) 48652 ( 0.00%) 214.33
bgp 90 ( 0.00%) 17421 ( 0.00%) 193.57
other 64433 ( 0.13%) 60133684 ( 0.27%) 933.27
udp6 59574 ( 0.12%) 15894519 ( 0.07%) 266.80
dns 38694 ( 0.08%) 11436020 ( 0.05%) 295.55
realaud 2 ( 0.00%) 211 ( 0.00%) 105.50
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 20876 ( 0.04%) 4458077 ( 0.02%) 213.55
icmp6 19643 ( 0.04%) 3048440 ( 0.01%) 155.19
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 23106 ( 0.05%) 16265442 ( 0.07%) 703.95
tcpdump file: 201104221400.dump.gz (928.64 MB)