Traffic Trace Info
DumpFile: 201104251400.dump
FileSize: 3598.48MB
Id: 201104251400
StartTime: Mon Apr 25 14:00:00 2011
EndTime: Mon Apr 25 14:15:00 2011
TotalTime: 900.47 seconds
TotalCapSize: -1320.26MB CapLen: 96 bytes
# of packets: 53918859 (27917.79MB)
AvgRate: 260.10Mbps stddev:35.94M
IP flow (unique src/dst pair) Information
# of flows: 791959 (avg. 68.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.8% 1.7% 1.6% 1.4% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 431643
Top 10 bandwidth usage (bytes/total in %):
15.0% 5.7% 5.4% 5.3% 4.4% 3.9% 3.5% 3.4% 2.3% 2.3%
# of IPv6 addresses: 4434
Top 10 bandwidth usage (bytes/total in %):
30.7% 20.8% 20.8% 20.1% 16.0% 15.9% 9.3% 8.8% 8.6% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104251400.pktlen.png)
detailed numbers
[ 32- 63]: 23472072
[ 64- 127]: 8558026
[ 128- 255]: 2159672
[ 256- 511]: 1081983
[ 512- 1023]: 1192214
[ 1024- 2047]: 17454892
Protocol Breakdown
![[protocol breakdown chart]](201104251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53918859 (100.00%) 29273929667 (100.00%) 542.93
ip 53677591 ( 99.55%) 29122018122 ( 99.48%) 542.54
tcp 29863981 ( 55.39%) 24911091302 ( 85.10%) 834.15
http(s) 14628825 ( 27.13%) 20065131514 ( 68.54%) 1371.62
http(c) 9266092 ( 17.19%) 1652299015 ( 5.64%) 178.32
squid 265203 ( 0.49%) 121262732 ( 0.41%) 457.24
smtp 288747 ( 0.54%) 241482283 ( 0.82%) 836.31
nntp 12 ( 0.00%) 732 ( 0.00%) 61.00
ftp 11760 ( 0.02%) 1086872 ( 0.00%) 92.42
pop3 19702 ( 0.04%) 5687217 ( 0.02%) 288.66
imap 6248 ( 0.01%) 1378096 ( 0.00%) 220.57
telnet 443 ( 0.00%) 42125 ( 0.00%) 95.09
ssh 23606 ( 0.04%) 5109343 ( 0.02%) 216.44
dns 16480 ( 0.03%) 1706830 ( 0.01%) 103.57
bgp 553 ( 0.00%) 82663 ( 0.00%) 149.48
napster 25 ( 0.00%) 4757 ( 0.00%) 190.28
realaud 139 ( 0.00%) 14754 ( 0.00%) 106.14
rtsp 12491 ( 0.02%) 15393470 ( 0.05%) 1232.36
icecast 3830 ( 0.01%) 266677 ( 0.00%) 69.63
other 5319825 ( 9.87%) 2800142222 ( 9.57%) 526.36
udp 21552472 ( 39.97%) 3586568847 ( 12.25%) 166.41
dns 822577 ( 1.53%) 181128192 ( 0.62%) 220.20
realaud 66 ( 0.00%) 12614 ( 0.00%) 191.12
halflif 65 ( 0.00%) 5318 ( 0.00%) 81.82
starcra 22 ( 0.00%) 5892 ( 0.00%) 267.82
everque 13342 ( 0.02%) 3421282 ( 0.01%) 256.43
unreal 18 ( 0.00%) 3440 ( 0.00%) 191.11
quake 1359 ( 0.00%) 115304 ( 0.00%) 84.84
cuseeme 4 ( 0.00%) 591 ( 0.00%) 147.75
other 20714822 ( 38.42%) 3401786064 ( 11.62%) 164.22
icmp 397686 ( 0.74%) 62507863 ( 0.21%) 157.18
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1517 ( 0.00%) 901582 ( 0.00%) 594.32
ip6 1837343 ( 3.41%) 545786789 ( 1.86%) 297.05
other 24408 ( 0.05%) 15142579 ( 0.05%) 620.39
frag 867 ( 0.00%) 797041 ( 0.00%) 919.31
ip6 241268 ( 0.45%) 151911545 ( 0.52%) 629.64
tcp6 130512 ( 0.24%) 102875752 ( 0.35%) 788.25
http(s) 20556 ( 0.04%) 29983990 ( 0.10%) 1458.65
http(c) 31723 ( 0.06%) 2718109 ( 0.01%) 85.68
smtp 288 ( 0.00%) 105465 ( 0.00%) 366.20
dns 171 ( 0.00%) 48130 ( 0.00%) 281.46
bgp 103 ( 0.00%) 34845 ( 0.00%) 338.30
other 77671 ( 0.14%) 69985213 ( 0.24%) 901.05
udp6 44227 ( 0.08%) 12826692 ( 0.04%) 290.02
dns 39830 ( 0.07%) 11858277 ( 0.04%) 297.72
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 4395 ( 0.01%) 968206 ( 0.00%) 220.30
icmp6 18988 ( 0.04%) 2840838 ( 0.01%) 149.61
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 47429 ( 0.09%) 33352989 ( 0.11%) 703.22
tcpdump file: 201104251400.dump.gz (1018.95 MB)