Traffic Trace Info
DumpFile: 201104261400.dump
FileSize: 3415.00MB
Id: 201104261400
StartTime: Tue Apr 26 14:00:01 2011
EndTime: Tue Apr 26 14:15:00 2011
TotalTime: 899.32 seconds
TotalCapSize: -1478.26MB CapLen: 96 bytes
# of packets: 52248693 (21615.91MB)
AvgRate: 201.60Mbps stddev:35.37M
IP flow (unique src/dst pair) Information
# of flows: 917765 (avg. 56.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 1.8% 1.6% 1.5% 1.4% 1.4% 1.4% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 489603
Top 10 bandwidth usage (bytes/total in %):
17.9% 7.9% 5.3% 4.4% 4.3% 3.5% 2.8% 2.5% 2.4% 2.3%
# of IPv6 addresses: 4932
Top 10 bandwidth usage (bytes/total in %):
28.3% 27.0% 15.6% 8.5% 8.4% 7.2% 7.2% 6.9% 4.9% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104261400.pktlen.png)
detailed numbers
[ 32- 63]: 27981956
[ 64- 127]: 7673154
[ 128- 255]: 1719898
[ 256- 511]: 946851
[ 512- 1023]: 987175
[ 1024- 2047]: 12939659
Protocol Breakdown
![[protocol breakdown chart]](201104261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52248693 (100.00%) 22665925452 (100.00%) 433.81
ip 52027002 ( 99.58%) 22525676809 ( 99.38%) 432.96
tcp 27174425 ( 52.01%) 19685201286 ( 86.85%) 724.40
http(s) 11440138 ( 21.90%) 15531738621 ( 68.52%) 1357.65
http(c) 7930747 ( 15.18%) 1583689625 ( 6.99%) 199.69
squid 214675 ( 0.41%) 80046650 ( 0.35%) 372.87
smtp 256390 ( 0.49%) 117678087 ( 0.52%) 458.98
nntp 6 ( 0.00%) 378 ( 0.00%) 63.00
ftp 18757 ( 0.04%) 1696815 ( 0.01%) 90.46
pop3 27085 ( 0.05%) 6397117 ( 0.03%) 236.19
imap 30674 ( 0.06%) 3094384 ( 0.01%) 100.88
telnet 4866 ( 0.01%) 1082246 ( 0.00%) 222.41
ssh 1158939 ( 2.22%) 84169297 ( 0.37%) 72.63
dns 17350 ( 0.03%) 1812992 ( 0.01%) 104.50
bgp 546 ( 0.00%) 95691 ( 0.00%) 175.26
napster 1281 ( 0.00%) 80867 ( 0.00%) 63.13
realaud 388 ( 0.00%) 128594 ( 0.00%) 331.43
rtsp 18923 ( 0.04%) 15786528 ( 0.07%) 834.25
icecast 9326 ( 0.02%) 6016171 ( 0.03%) 645.10
hotline 77 ( 0.00%) 5076 ( 0.00%) 65.92
other 6044234 ( 11.57%) 2251680739 ( 9.93%) 372.53
udp 23450064 ( 44.88%) 2475017121 ( 10.92%) 105.54
dns 837788 ( 1.60%) 182035785 ( 0.80%) 217.28
realaud 19 ( 0.00%) 3065 ( 0.00%) 161.32
halflif 107 ( 0.00%) 7297 ( 0.00%) 68.20
starcra 91 ( 0.00%) 16669 ( 0.00%) 183.18
everque 462 ( 0.00%) 63101 ( 0.00%) 136.58
unreal 51 ( 0.00%) 6761 ( 0.00%) 132.57
quake 2040 ( 0.00%) 175339 ( 0.00%) 85.95
cuseeme 3 ( 0.00%) 271 ( 0.00%) 90.33
other 22593240 ( 43.24%) 2291586118 ( 10.11%) 101.43
icmp 365060 ( 0.70%) 59038100 ( 0.26%) 161.72
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4923 ( 0.01%) 2186170 ( 0.01%) 444.07
ip6 1016444 ( 1.95%) 299709006 ( 1.32%) 294.86
other 15902 ( 0.03%) 4505966 ( 0.02%) 283.36
frag 62863 ( 0.12%) 48018493 ( 0.21%) 763.86
ip6 221691 ( 0.42%) 140248643 ( 0.62%) 632.63
tcp6 136745 ( 0.26%) 115182292 ( 0.51%) 842.31
http(s) 1950 ( 0.00%) 2123179 ( 0.01%) 1088.81
http(c) 30272 ( 0.06%) 2491358 ( 0.01%) 82.30
smtp 532 ( 0.00%) 149929 ( 0.00%) 281.82
ftp 40 ( 0.00%) 6758 ( 0.00%) 168.95
dns 276 ( 0.00%) 67141 ( 0.00%) 243.26
bgp 92 ( 0.00%) 18282 ( 0.00%) 198.72
other 103583 ( 0.20%) 110325645 ( 0.49%) 1065.09
udp6 47094 ( 0.09%) 14153499 ( 0.06%) 300.54
dns 41578 ( 0.08%) 12395140 ( 0.05%) 298.12
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
other 5514 ( 0.01%) 1758142 ( 0.01%) 318.85
icmp6 27412 ( 0.05%) 3562516 ( 0.02%) 129.96
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10330 ( 0.02%) 7335316 ( 0.03%) 710.10
tcpdump file: 201104261400.dump.gz (938.70 MB)