Traffic Trace Info
DumpFile: 201104281400.dump
FileSize: 4713.13MB
Id: 201104281400
StartTime: Thu Apr 28 14:00:01 2011
EndTime: Thu Apr 28 14:15:00 2011
TotalTime: 899.58 seconds
TotalCapSize: -474.86MB CapLen: 96 bytes
# of packets: 71564014 (31858.89MB)
AvgRate: 297.08Mbps stddev:47.55M
IP flow (unique src/dst pair) Information
# of flows: 1101012 (avg. 65.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.5% 2.4% 2.1% 2.0% 1.7% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 611219
Top 10 bandwidth usage (bytes/total in %):
15.4% 12.2% 9.2% 5.1% 3.9% 3.8% 3.4% 3.0% 2.8% 2.5%
# of IPv6 addresses: 4371
Top 10 bandwidth usage (bytes/total in %):
47.1% 39.6% 19.8% 19.8% 4.6% 4.5% 4.0% 2.8% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104281400.pktlen.png)
detailed numbers
[ 32- 63]: 36801954
[ 64- 127]: 10626435
[ 128- 255]: 2047295
[ 256- 511]: 1308330
[ 512- 1023]: 1442187
[ 1024- 2047]: 19337813
Protocol Breakdown
![[protocol breakdown chart]](201104281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 71564014 (100.00%) 33406471682 (100.00%) 466.81
ip 71372436 ( 99.73%) 33305011329 ( 99.70%) 466.64
tcp 37546345 ( 52.47%) 29389095504 ( 87.97%) 782.74
http(s) 16663930 ( 23.29%) 22626726464 ( 67.73%) 1357.83
http(c) 12598008 ( 17.60%) 3340071861 ( 10.00%) 265.13
squid 229655 ( 0.32%) 98406099 ( 0.29%) 428.50
smtp 189299 ( 0.26%) 77831846 ( 0.23%) 411.16
nntp 8 ( 0.00%) 500 ( 0.00%) 62.50
ftp 12518 ( 0.02%) 1107687 ( 0.00%) 88.49
pop3 23451 ( 0.03%) 6864614 ( 0.02%) 292.72
imap 4752 ( 0.01%) 996655 ( 0.00%) 209.73
telnet 3711 ( 0.01%) 780037 ( 0.00%) 210.20
ssh 1123225 ( 1.57%) 339792230 ( 1.02%) 302.51
dns 17237 ( 0.02%) 1813267 ( 0.01%) 105.20
bgp 589 ( 0.00%) 124207 ( 0.00%) 210.88
napster 148 ( 0.00%) 12186 ( 0.00%) 82.34
realaud 58 ( 0.00%) 7447 ( 0.00%) 128.40
rtsp 8613 ( 0.01%) 6793401 ( 0.02%) 788.74
icecast 82258 ( 0.11%) 76833736 ( 0.23%) 934.06
hotline 19 ( 0.00%) 1218 ( 0.00%) 64.11
other 6588866 ( 9.21%) 2810932049 ( 8.41%) 426.62
udp 31965630 ( 44.67%) 3452975325 ( 10.34%) 108.02
dns 845325 ( 1.18%) 183807145 ( 0.55%) 217.44
realaud 26 ( 0.00%) 3178 ( 0.00%) 122.23
halflif 106 ( 0.00%) 10326 ( 0.00%) 97.42
starcra 177 ( 0.00%) 22762 ( 0.00%) 128.60
everque 350 ( 0.00%) 69581 ( 0.00%) 198.80
unreal 28 ( 0.00%) 4859 ( 0.00%) 173.54
quake 1379 ( 0.00%) 120046 ( 0.00%) 87.05
cuseeme 9 ( 0.00%) 1614 ( 0.00%) 179.33
other 31118031 ( 43.48%) 3268824457 ( 9.79%) 105.05
icmp 420914 ( 0.59%) 61527735 ( 0.18%) 146.18
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6231 ( 0.01%) 1568214 ( 0.00%) 251.68
ip6 1416938 ( 1.98%) 395003059 ( 1.18%) 278.77
other 16194 ( 0.02%) 4822332 ( 0.01%) 297.79
frag 1205 ( 0.00%) 1151416 ( 0.00%) 955.53
ip6 191578 ( 0.27%) 101460353 ( 0.30%) 529.60
tcp6 128551 ( 0.18%) 83936243 ( 0.25%) 652.94
http(s) 3237 ( 0.00%) 4028038 ( 0.01%) 1244.37
http(c) 52853 ( 0.07%) 4567983 ( 0.01%) 86.43
squid 38 ( 0.00%) 4707 ( 0.00%) 123.87
smtp 372 ( 0.00%) 75982 ( 0.00%) 204.25
ftp 13423 ( 0.02%) 20059772 ( 0.06%) 1494.43
dns 260 ( 0.00%) 59060 ( 0.00%) 227.15
bgp 89 ( 0.00%) 16681 ( 0.00%) 187.43
other 58279 ( 0.08%) 55124020 ( 0.17%) 945.86
udp6 39355 ( 0.05%) 11343939 ( 0.03%) 288.25
dns 37003 ( 0.05%) 10997338 ( 0.03%) 297.20
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2350 ( 0.00%) 346389 ( 0.00%) 147.40
icmp6 19206 ( 0.03%) 2989299 ( 0.01%) 155.64
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4353 ( 0.01%) 3175448 ( 0.01%) 729.48
tcpdump file: 201104281400.dump.gz (1266.08 MB)