Traffic Trace Info
DumpFile: 201104301400.dump
FileSize: 3598.37MB
Id: 201104301400
StartTime: Sat Apr 30 14:00:00 2011
EndTime: Sat Apr 30 14:15:01 2011
TotalTime: 900.72 seconds
TotalCapSize: -1344.15MB CapLen: 96 bytes
# of packets: 55476556 (24221.97MB)
AvgRate: 225.55Mbps stddev:46.26M
IP flow (unique src/dst pair) Information
# of flows: 948753 (avg. 58.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.9% 2.3% 1.9% 1.5% 1.3% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 552505
Top 10 bandwidth usage (bytes/total in %):
23.5% 8.8% 6.7% 5.5% 4.1% 4.0% 2.9% 2.9% 2.7% 2.4%
# of IPv6 addresses: 4149
Top 10 bandwidth usage (bytes/total in %):
80.6% 64.0% 23.2% 3.5% 1.8% 1.8% 1.6% 1.4% 1.3% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104301400.pktlen.png)
detailed numbers
[ 32- 63]: 29431499
[ 64- 127]: 7286751
[ 128- 255]: 2023564
[ 256- 511]: 987925
[ 512- 1023]: 834107
[ 1024- 2047]: 14912710
Protocol Breakdown
![[protocol breakdown chart]](201104301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55476556 (100.00%) 25398579587 (100.00%) 457.83
ip 55224891 ( 99.55%) 25157435349 ( 99.05%) 455.55
tcp 25057652 ( 45.17%) 20745748617 ( 81.68%) 827.92
http(s) 12020029 ( 21.67%) 16255498053 ( 64.00%) 1352.37
http(c) 6203954 ( 11.18%) 869656966 ( 3.42%) 140.18
squid 469353 ( 0.85%) 117338570 ( 0.46%) 250.00
smtp 141529 ( 0.26%) 67574489 ( 0.27%) 477.46
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 11893 ( 0.02%) 1099023 ( 0.00%) 92.41
pop3 12081 ( 0.02%) 6564195 ( 0.03%) 543.35
imap 2134 ( 0.00%) 716465 ( 0.00%) 335.74
telnet 3024 ( 0.01%) 658160 ( 0.00%) 217.65
ssh 61346 ( 0.11%) 14440055 ( 0.06%) 235.39
dns 8881 ( 0.02%) 735619 ( 0.00%) 82.83
bgp 539 ( 0.00%) 89161 ( 0.00%) 165.42
napster 131 ( 0.00%) 13174 ( 0.00%) 100.56
realaud 283 ( 0.00%) 30924 ( 0.00%) 109.27
rtsp 78 ( 0.00%) 29566 ( 0.00%) 379.05
icecast 544 ( 0.00%) 45769 ( 0.00%) 84.13
hotline 8 ( 0.00%) 907 ( 0.00%) 113.38
other 6121838 ( 11.04%) 3411257101 ( 13.43%) 557.23
udp 27496959 ( 49.57%) 3486360151 ( 13.73%) 126.79
dns 623936 ( 1.12%) 128046932 ( 0.50%) 205.22
realaud 36 ( 0.00%) 3961 ( 0.00%) 110.03
halflif 98 ( 0.00%) 7916 ( 0.00%) 80.78
starcra 216 ( 0.00%) 28001 ( 0.00%) 129.63
everque 113 ( 0.00%) 24129 ( 0.00%) 213.53
unreal 24 ( 0.00%) 4045 ( 0.00%) 168.54
quake 2099 ( 0.00%) 181121 ( 0.00%) 86.29
cuseeme 26 ( 0.00%) 3504 ( 0.00%) 134.77
other 26870309 ( 48.44%) 3358004532 ( 13.22%) 124.97
icmp 461849 ( 0.83%) 74906870 ( 0.29%) 162.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1739 ( 0.00%) 725794 ( 0.00%) 417.36
ip6 2189823 ( 3.95%) 843126724 ( 3.32%) 385.02
other 16684 ( 0.03%) 6547923 ( 0.03%) 392.47
frag 632 ( 0.00%) 627050 ( 0.00%) 992.17
ip6 251665 ( 0.45%) 241144238 ( 0.95%) 958.20
tcp6 189801 ( 0.34%) 224896028 ( 0.89%) 1184.90
http(s) 11217 ( 0.02%) 16051556 ( 0.06%) 1431.00
http(c) 24384 ( 0.04%) 2240593 ( 0.01%) 91.89
squid 1298 ( 0.00%) 803705 ( 0.00%) 619.19
smtp 271 ( 0.00%) 74697 ( 0.00%) 275.63
dns 174 ( 0.00%) 45144 ( 0.00%) 259.45
bgp 96 ( 0.00%) 18921 ( 0.00%) 197.09
other 152361 ( 0.27%) 205661412 ( 0.81%) 1349.83
udp6 34910 ( 0.06%) 9124955 ( 0.04%) 261.39
dns 28971 ( 0.05%) 7825422 ( 0.03%) 270.11
realaud 7 ( 0.00%) 657 ( 0.00%) 93.86
other 5932 ( 0.01%) 1298876 ( 0.01%) 218.96
icmp6 21122 ( 0.04%) 3055748 ( 0.01%) 144.67
ip6 79 ( 0.00%) 10822 ( 0.00%) 136.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5723 ( 0.01%) 4052605 ( 0.02%) 708.13
tcpdump file: 201104301400.dump.gz (950.13 MB)