Traffic Trace Info
DumpFile: 201104271400.dump
FileSize: 4235.14MB
Id: 201104271400
StartTime: Wed Apr 27 14:00:01 2011
EndTime: Wed Apr 27 14:15:00 2011
TotalTime: 899.33 seconds
TotalCapSize: -844.17MB CapLen: 96 bytes
# of packets: 64441930 (32245.94MB)
AvgRate: 300.75Mbps stddev:50.54M
IP flow (unique src/dst pair) Information
# of flows: 983822 (avg. 65.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.0% 3.4% 3.3% 2.4% 1.9% 1.8% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 551685
Top 10 bandwidth usage (bytes/total in %):
26.4% 18.1% 4.7% 4.7% 4.4% 4.3% 4.0% 3.4% 3.3% 3.2%
# of IPv6 addresses: 4416
Top 10 bandwidth usage (bytes/total in %):
52.2% 30.2% 25.4% 9.6% 9.3% 9.3% 7.2% 5.4% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104271400.pktlen.png)
detailed numbers
[ 32- 63]: 32176761
[ 64- 127]: 7965647
[ 128- 255]: 2003053
[ 256- 511]: 1007401
[ 512- 1023]: 1156759
[ 1024- 2047]: 20132309
Protocol Breakdown
![[protocol breakdown chart]](201104271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64441930 (100.00%) 33812321166 (100.00%) 524.69
ip 64201096 ( 99.63%) 33661926223 ( 99.56%) 524.32
tcp 33137886 ( 51.42%) 29570158824 ( 87.45%) 892.34
http(s) 18103474 ( 28.09%) 25035763663 ( 74.04%) 1382.93
http(c) 8646510 ( 13.42%) 1807207659 ( 5.34%) 209.01
squid 300158 ( 0.47%) 153589590 ( 0.45%) 511.70
smtp 239270 ( 0.37%) 134716297 ( 0.40%) 563.03
nntp 12 ( 0.00%) 740 ( 0.00%) 61.67
ftp 16060 ( 0.02%) 1425841 ( 0.00%) 88.78
pop3 37192 ( 0.06%) 13228183 ( 0.04%) 355.67
imap 7584 ( 0.01%) 4478800 ( 0.01%) 590.56
telnet 1890 ( 0.00%) 346228 ( 0.00%) 183.19
ssh 45341 ( 0.07%) 11869676 ( 0.04%) 261.79
dns 110854 ( 0.17%) 7508743 ( 0.02%) 67.74
bgp 550 ( 0.00%) 96483 ( 0.00%) 175.42
napster 100 ( 0.00%) 7114 ( 0.00%) 71.14
realaud 232 ( 0.00%) 19025 ( 0.00%) 82.00
rtsp 47140 ( 0.07%) 21150280 ( 0.06%) 448.67
icecast 84175 ( 0.13%) 77032771 ( 0.23%) 915.15
hotline 29 ( 0.00%) 2925 ( 0.00%) 100.86
other 5497314 ( 8.53%) 2301714746 ( 6.81%) 418.70
udp 28756023 ( 44.62%) 3380665141 ( 10.00%) 117.56
dns 827309 ( 1.28%) 176148231 ( 0.52%) 212.92
realaud 10 ( 0.00%) 954 ( 0.00%) 95.40
halflif 97 ( 0.00%) 10112 ( 0.00%) 104.25
starcra 48 ( 0.00%) 5682 ( 0.00%) 118.38
everque 549 ( 0.00%) 180437 ( 0.00%) 328.66
unreal 26 ( 0.00%) 4398 ( 0.00%) 169.15
quake 1325 ( 0.00%) 113134 ( 0.00%) 85.38
cuseeme 3 ( 0.00%) 226 ( 0.00%) 75.33
other 27926422 ( 43.34%) 3204080127 ( 9.48%) 114.73
icmp 461758 ( 0.72%) 64971987 ( 0.19%) 140.71
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 820 ( 0.00%) 200052 ( 0.00%) 243.97
ip6 1828091 ( 2.84%) 641097546 ( 1.90%) 350.69
other 16333 ( 0.03%) 4813403 ( 0.01%) 294.70
frag 1400 ( 0.00%) 1335921 ( 0.00%) 954.23
ip6 240834 ( 0.37%) 150394943 ( 0.44%) 624.48
tcp6 167800 ( 0.26%) 133688861 ( 0.40%) 796.72
http(s) 1865 ( 0.00%) 1811623 ( 0.01%) 971.38
http(c) 58901 ( 0.09%) 4814416 ( 0.01%) 81.74
squid 2 ( 0.00%) 188 ( 0.00%) 94.00
smtp 255 ( 0.00%) 56071 ( 0.00%) 219.89
dns 215 ( 0.00%) 52362 ( 0.00%) 243.54
bgp 91 ( 0.00%) 13605 ( 0.00%) 149.51
icecast 1 ( 0.00%) 94 ( 0.00%) 94.00
other 106470 ( 0.17%) 126940502 ( 0.38%) 1192.27
udp6 47498 ( 0.07%) 13079389 ( 0.04%) 275.37
dns 40751 ( 0.06%) 12324820 ( 0.04%) 302.44
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 6744 ( 0.01%) 754261 ( 0.00%) 111.84
icmp6 25150 ( 0.04%) 3365150 ( 0.01%) 133.80
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 274 ( 0.00%) 246237 ( 0.00%) 898.68
tcpdump file: 201104271400.dump.gz (1139.52 MB)