Traffic Trace Info
DumpFile: 201104291400.dump
FileSize: 3896.89MB
Id: 201104291400
StartTime: Fri Apr 29 14:00:01 2011
EndTime: Fri Apr 29 14:15:01 2011
TotalTime: 899.86 seconds
TotalCapSize: -1113.37MB CapLen: 96 bytes
# of packets: 59916555 (29670.05MB)
AvgRate: 276.54Mbps stddev:45.18M
IP flow (unique src/dst pair) Information
# of flows: 896131 (avg. 66.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.7% 3.2% 2.6% 2.5% 2.5% 1.9% 1.8% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 501984
Top 10 bandwidth usage (bytes/total in %):
17.2% 17.0% 5.7% 4.8% 4.8% 4.7% 4.7% 4.2% 3.8% 3.2%
# of IPv6 addresses: 4889
Top 10 bandwidth usage (bytes/total in %):
63.3% 61.4% 19.2% 18.1% 3.5% 3.4% 1.9% 1.6% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104291400.pktlen.png)
detailed numbers
[ 32- 63]: 30264111
[ 64- 127]: 7105056
[ 128- 255]: 2062203
[ 256- 511]: 898057
[ 512- 1023]: 1156339
[ 1024- 2047]: 18430789
Protocol Breakdown
![[protocol breakdown chart]](201104291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59916555 (100.00%) 31111300296 (100.00%) 519.24
ip 59629550 ( 99.52%) 30853709480 ( 99.17%) 517.42
tcp 28084129 ( 46.87%) 26319858295 ( 84.60%) 937.18
http(s) 15916125 ( 26.56%) 21690663223 ( 69.72%) 1362.81
http(c) 6329684 ( 10.56%) 873478549 ( 2.81%) 138.00
squid 360609 ( 0.60%) 202628767 ( 0.65%) 561.91
smtp 156851 ( 0.26%) 68459433 ( 0.22%) 436.46
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 29760 ( 0.05%) 2470066 ( 0.01%) 83.00
pop3 8819 ( 0.01%) 3482801 ( 0.01%) 394.92
imap 4883 ( 0.01%) 1135956 ( 0.00%) 232.63
telnet 3234 ( 0.01%) 692017 ( 0.00%) 213.98
ssh 49611 ( 0.08%) 8967667 ( 0.03%) 180.76
dns 6042 ( 0.01%) 396593 ( 0.00%) 65.64
bgp 589 ( 0.00%) 115370 ( 0.00%) 195.87
napster 174 ( 0.00%) 19321 ( 0.00%) 111.04
realaud 57 ( 0.00%) 4977 ( 0.00%) 87.32
rtsp 1276 ( 0.00%) 237465 ( 0.00%) 186.10
icecast 4147 ( 0.01%) 250468 ( 0.00%) 60.40
hotline 8 ( 0.00%) 496 ( 0.00%) 62.00
other 5212254 ( 8.70%) 3466854752 ( 11.14%) 665.14
udp 29218473 ( 48.77%) 3907312874 ( 12.56%) 133.73
dns 687465 ( 1.15%) 150732612 ( 0.48%) 219.26
realaud 83 ( 0.00%) 17210 ( 0.00%) 207.35
halflif 98 ( 0.00%) 6773 ( 0.00%) 69.11
starcra 52 ( 0.00%) 6439 ( 0.00%) 123.83
everque 208 ( 0.00%) 31608 ( 0.00%) 151.96
unreal 85 ( 0.00%) 13608 ( 0.00%) 160.09
quake 2001 ( 0.00%) 169009 ( 0.00%) 84.46
cuseeme 4 ( 0.00%) 265 ( 0.00%) 66.25
other 28528313 ( 47.61%) 3756252756 ( 12.07%) 131.67
icmp 593897 ( 0.99%) 84875061 ( 0.27%) 142.91
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6157 ( 0.01%) 1527818 ( 0.00%) 248.14
ip6 1710616 ( 2.85%) 535444388 ( 1.72%) 313.01
other 16093 ( 0.03%) 4671774 ( 0.02%) 290.30
frag 1437 ( 0.00%) 1252668 ( 0.00%) 871.72
ip6 287005 ( 0.48%) 257590816 ( 0.83%) 897.51
tcp6 225597 ( 0.38%) 243136388 ( 0.78%) 1077.75
http(s) 4602 ( 0.01%) 5739172 ( 0.02%) 1247.10
http(c) 30689 ( 0.05%) 2707198 ( 0.01%) 88.21
squid 357 ( 0.00%) 275283 ( 0.00%) 771.10
smtp 246 ( 0.00%) 93489 ( 0.00%) 380.04
dns 184 ( 0.00%) 46795 ( 0.00%) 254.32
bgp 91 ( 0.00%) 14675 ( 0.00%) 161.26
other 189428 ( 0.32%) 234259776 ( 0.75%) 1236.67
udp6 39326 ( 0.07%) 10787545 ( 0.03%) 274.31
dns 34715 ( 0.06%) 9842620 ( 0.03%) 283.53
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 2 ( 0.00%) 218 ( 0.00%) 109.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 117 ( 0.00%) 117.00
other 4606 ( 0.01%) 944381 ( 0.00%) 205.03
icmp6 21517 ( 0.04%) 3277982 ( 0.01%) 152.34
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 453 ( 0.00%) 373627 ( 0.00%) 824.78
tcpdump file: 201104291400.dump.gz (1000.45 MB)