Traffic Trace Info
DumpFile: 201104241400.dump
FileSize: 3313.42MB
Id: 201104241400
StartTime: Sun Apr 24 14:00:00 2011
EndTime: Sun Apr 24 14:15:01 2011
TotalTime: 900.60 seconds
TotalCapSize: -1546.24MB CapLen: 96 bytes
# of packets: 50046404 (25727.03MB)
AvgRate: 239.62Mbps stddev:44.77M
IP flow (unique src/dst pair) Information
# of flows: 804841 (avg. 62.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.4% 2.7% 2.4% 2.3% 2.1% 1.8% 1.6% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 448620
Top 10 bandwidth usage (bytes/total in %):
24.7% 18.5% 6.7% 4.4% 4.0% 3.7% 3.4% 2.7% 2.4% 2.4%
# of IPv6 addresses: 4423
Top 10 bandwidth usage (bytes/total in %):
46.5% 45.1% 18.7% 18.7% 6.0% 5.1% 4.4% 4.3% 3.9% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104241400.pktlen.png)
detailed numbers
[ 32- 63]: 23839604
[ 64- 127]: 6665069
[ 128- 255]: 1712906
[ 256- 511]: 784169
[ 512- 1023]: 997247
[ 1024- 2047]: 16047409
Protocol Breakdown
![[protocol breakdown chart]](201104241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50046404 (100.00%) 26976742350 (100.00%) 539.03
ip 49883996 ( 99.68%) 26880878168 ( 99.64%) 538.87
tcp 25879160 ( 51.71%) 23521781328 ( 87.19%) 908.91
http(s) 14381903 ( 28.74%) 19670566575 ( 72.92%) 1367.73
http(c) 5533520 ( 11.06%) 558569115 ( 2.07%) 100.94
squid 178885 ( 0.36%) 74784305 ( 0.28%) 418.06
smtp 90969 ( 0.18%) 26151502 ( 0.10%) 287.48
nntp 4 ( 0.00%) 248 ( 0.00%) 62.00
ftp 10654 ( 0.02%) 1009729 ( 0.00%) 94.77
pop3 6119 ( 0.01%) 3127995 ( 0.01%) 511.19
imap 2889 ( 0.01%) 1732037 ( 0.01%) 599.53
telnet 596 ( 0.00%) 40971 ( 0.00%) 68.74
ssh 435499 ( 0.87%) 115172593 ( 0.43%) 264.46
dns 8093 ( 0.02%) 654070 ( 0.00%) 80.82
bgp 556 ( 0.00%) 91542 ( 0.00%) 164.64
napster 120 ( 0.00%) 13158 ( 0.00%) 109.65
realaud 81 ( 0.00%) 11148 ( 0.00%) 137.63
rtsp 6227 ( 0.01%) 7687080 ( 0.03%) 1234.48
icecast 383 ( 0.00%) 40329 ( 0.00%) 105.30
hotline 297 ( 0.00%) 18604 ( 0.00%) 62.64
other 5222357 ( 10.44%) 3062109847 ( 11.35%) 586.35
udp 21664743 ( 43.29%) 2656475404 ( 9.85%) 122.62
dns 611889 ( 1.22%) 118720843 ( 0.44%) 194.02
realaud 6 ( 0.00%) 472 ( 0.00%) 78.67
halflif 66 ( 0.00%) 4515 ( 0.00%) 68.41
starcra 18 ( 0.00%) 1942 ( 0.00%) 107.89
everque 9257 ( 0.02%) 1032492 ( 0.00%) 111.54
unreal 19 ( 0.00%) 2976 ( 0.00%) 156.63
quake 1461 ( 0.00%) 123979 ( 0.00%) 84.86
cuseeme 5 ( 0.00%) 423 ( 0.00%) 84.60
other 21041857 ( 42.04%) 2536502886 ( 9.40%) 120.55
icmp 418261 ( 0.84%) 62911979 ( 0.23%) 150.41
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 326 ( 0.00%) 75332 ( 0.00%) 231.08
ip6 1907026 ( 3.81%) 635470894 ( 2.36%) 333.23
other 14295 ( 0.03%) 4143961 ( 0.02%) 289.89
frag 1187 ( 0.00%) 1062431 ( 0.00%) 895.06
ip6 162408 ( 0.32%) 95864182 ( 0.36%) 590.27
tcp6 98028 ( 0.20%) 80882086 ( 0.30%) 825.09
http(s) 1931 ( 0.00%) 1630247 ( 0.01%) 844.25
http(c) 7665 ( 0.02%) 1049599 ( 0.00%) 136.93
squid 928 ( 0.00%) 352839 ( 0.00%) 380.21
smtp 244 ( 0.00%) 92022 ( 0.00%) 377.14
dns 181 ( 0.00%) 47108 ( 0.00%) 260.27
bgp 132 ( 0.00%) 50318 ( 0.00%) 381.20
other 86947 ( 0.17%) 77659953 ( 0.29%) 893.19
udp6 36203 ( 0.07%) 8904222 ( 0.03%) 245.95
dns 30734 ( 0.06%) 8139267 ( 0.03%) 264.83
realaud 2 ( 0.00%) 204 ( 0.00%) 102.00
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 12 ( 0.00%) 1052 ( 0.00%) 87.67
quake 4 ( 0.00%) 442 ( 0.00%) 110.50
other 5450 ( 0.01%) 763140 ( 0.00%) 140.03
icmp6 23835 ( 0.05%) 3051631 ( 0.01%) 128.03
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4231 ( 0.01%) 3011087 ( 0.01%) 711.67
tcpdump file: 201104241400.dump.gz (887.48 MB)