Traffic Trace Info
DumpFile: 201104231400.dump
FileSize: 3046.64MB
Id: 201104231400
StartTime: Sat Apr 23 14:00:00 2011
EndTime: Sat Apr 23 14:15:00 2011
TotalTime: 899.82 seconds
TotalCapSize: -1753.71MB CapLen: 96 bytes
# of packets: 46159702 (22819.22MB)
AvgRate: 212.74Mbps stddev:35.42M
IP flow (unique src/dst pair) Information
# of flows: 889843 (avg. 51.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 3.0% 2.0% 1.9% 1.7% 1.7% 1.6% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 485047
Top 10 bandwidth usage (bytes/total in %):
20.4% 13.0% 5.7% 5.7% 4.1% 3.0% 2.4% 2.2% 2.2% 2.0%
# of IPv6 addresses: 4655
Top 10 bandwidth usage (bytes/total in %):
59.5% 59.5% 6.6% 4.7% 3.7% 3.7% 2.6% 2.4% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104231400.pktlen.png)
detailed numbers
[ 32- 63]: 21975966
[ 64- 127]: 6754213
[ 128- 255]: 1389926
[ 256- 511]: 930178
[ 512- 1023]: 1027245
[ 1024- 2047]: 14082174
Protocol Breakdown
![[protocol breakdown chart]](201104231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46159702 (100.00%) 23927691089 (100.00%) 518.37
ip 46025420 ( 99.71%) 23863342821 ( 99.73%) 518.48
tcp 25365773 ( 54.95%) 21316091269 ( 89.09%) 840.35
http(s) 13219501 ( 28.64%) 17673399629 ( 73.86%) 1336.92
http(c) 5946074 ( 12.88%) 654837159 ( 2.74%) 110.13
squid 329796 ( 0.71%) 221411601 ( 0.93%) 671.36
smtp 160436 ( 0.35%) 29812157 ( 0.12%) 185.82
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 11358 ( 0.02%) 975770 ( 0.00%) 85.91
pop3 10416 ( 0.02%) 3282209 ( 0.01%) 315.11
imap 11645 ( 0.03%) 1917779 ( 0.01%) 164.69
telnet 647 ( 0.00%) 42987 ( 0.00%) 66.44
ssh 171641 ( 0.37%) 34267780 ( 0.14%) 199.65
dns 14452 ( 0.03%) 1418754 ( 0.01%) 98.17
bgp 544 ( 0.00%) 87632 ( 0.00%) 161.09
napster 29 ( 0.00%) 2191 ( 0.00%) 75.55
realaud 23 ( 0.00%) 4649 ( 0.00%) 202.13
rtsp 35821 ( 0.08%) 37013870 ( 0.15%) 1033.30
icecast 3449 ( 0.01%) 275967 ( 0.00%) 80.01
hotline 61 ( 0.00%) 5204 ( 0.00%) 85.31
other 5449876 ( 11.81%) 2657335691 ( 11.11%) 487.60
udp 19148698 ( 41.48%) 2115884414 ( 8.84%) 110.50
dns 642235 ( 1.39%) 132024588 ( 0.55%) 205.57
realaud 10 ( 0.00%) 1536 ( 0.00%) 153.60
halflif 109 ( 0.00%) 7775 ( 0.00%) 71.33
starcra 39 ( 0.00%) 6541 ( 0.00%) 167.72
everque 8883 ( 0.02%) 991298 ( 0.00%) 111.59
unreal 14 ( 0.00%) 1978 ( 0.00%) 141.29
quake 2099 ( 0.00%) 176607 ( 0.00%) 84.14
cuseeme 2 ( 0.00%) 182 ( 0.00%) 91.00
other 18495132 ( 40.07%) 1982599672 ( 8.29%) 107.20
icmp 521725 ( 1.13%) 88933161 ( 0.37%) 170.46
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 398 ( 0.00%) 86004 ( 0.00%) 216.09
ip6 954826 ( 2.07%) 314084327 ( 1.31%) 328.94
other 33816 ( 0.07%) 28244486 ( 0.12%) 835.24
frag 1073 ( 0.00%) 944291 ( 0.00%) 880.05
ip6 134282 ( 0.29%) 64348268 ( 0.27%) 479.20
tcp6 63582 ( 0.14%) 47841865 ( 0.20%) 752.44
http(s) 1855 ( 0.00%) 2269963 ( 0.01%) 1223.70
http(c) 5568 ( 0.01%) 632310 ( 0.00%) 113.56
squid 12 ( 0.00%) 1000 ( 0.00%) 83.33
smtp 210 ( 0.00%) 75609 ( 0.00%) 360.04
dns 197 ( 0.00%) 48823 ( 0.00%) 247.83
bgp 89 ( 0.00%) 17802 ( 0.00%) 200.02
other 55651 ( 0.12%) 44796358 ( 0.19%) 804.95
udp6 40509 ( 0.09%) 10095557 ( 0.04%) 249.22
dns 33044 ( 0.07%) 8874092 ( 0.04%) 268.55
quake 1 ( 0.00%) 95 ( 0.00%) 95.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 7463 ( 0.02%) 1221263 ( 0.01%) 163.64
icmp6 26363 ( 0.06%) 3735086 ( 0.02%) 141.68
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3713 ( 0.01%) 2660100 ( 0.01%) 716.43
tcpdump file: 201104231400.dump.gz (824.40 MB)