Traffic Trace Info
DumpFile: 201105011400.dump
FileSize: 3727.67MB
Id: 201105011400
StartTime: Sun May 1 14:00:01 2011
EndTime: Sun May 1 14:15:00 2011
TotalTime: 899.43 seconds
TotalCapSize: -1260.73MB CapLen: 96 bytes
# of packets: 58483190 (24285.07MB)
AvgRate: 226.49Mbps stddev:36.48M
IP flow (unique src/dst pair) Information
# of flows: 989209 (avg. 59.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.1% 2.0% 1.8% 1.5% 1.5% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 548713
Top 10 bandwidth usage (bytes/total in %):
18.7% 10.8% 6.7% 5.0% 3.9% 3.5% 3.3% 3.1% 2.8% 2.4%
# of IPv6 addresses: 4281
Top 10 bandwidth usage (bytes/total in %):
54.5% 46.0% 8.6% 4.1% 3.2% 2.9% 2.8% 2.0% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105011400.pktlen.png)
detailed numbers
[ 32- 63]: 34622255
[ 64- 127]: 5838324
[ 128- 255]: 1655876
[ 256- 511]: 877625
[ 512- 1023]: 758133
[ 1024- 2047]: 14730977
Protocol Breakdown
![[protocol breakdown chart]](201105011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58483190 (100.00%) 25464737971 (100.00%) 435.42
ip 58363073 ( 99.79%) 25419436596 ( 99.82%) 435.54
tcp 23953964 ( 40.96%) 21299046950 ( 83.64%) 889.17
http(s) 12977057 ( 22.19%) 17709421479 ( 69.54%) 1364.67
http(c) 5673336 ( 9.70%) 683391099 ( 2.68%) 120.46
squid 183267 ( 0.31%) 60514219 ( 0.24%) 330.20
smtp 103279 ( 0.18%) 32957146 ( 0.13%) 319.11
nntp 16 ( 0.00%) 1036 ( 0.00%) 64.75
ftp 8650 ( 0.01%) 816471 ( 0.00%) 94.39
pop3 3656 ( 0.01%) 1420688 ( 0.01%) 388.59
imap 2905 ( 0.00%) 1366526 ( 0.01%) 470.40
telnet 2635 ( 0.00%) 544954 ( 0.00%) 206.81
ssh 53173 ( 0.09%) 18741794 ( 0.07%) 352.47
dns 9073 ( 0.02%) 709916 ( 0.00%) 78.24
bgp 586 ( 0.00%) 96121 ( 0.00%) 164.03
napster 22 ( 0.00%) 1388 ( 0.00%) 63.09
realaud 2 ( 0.00%) 128 ( 0.00%) 64.00
rtsp 87 ( 0.00%) 34642 ( 0.00%) 398.18
icecast 458 ( 0.00%) 36466 ( 0.00%) 79.62
hotline 28 ( 0.00%) 2260 ( 0.00%) 80.71
other 4935734 ( 8.44%) 2788990617 ( 10.95%) 565.06
udp 31840951 ( 54.44%) 3312377805 ( 13.01%) 104.03
dns 555279 ( 0.95%) 105311360 ( 0.41%) 189.65
realaud 40 ( 0.00%) 4426 ( 0.00%) 110.65
halflif 89 ( 0.00%) 5973 ( 0.00%) 67.11
starcra 32 ( 0.00%) 3786 ( 0.00%) 118.31
everque 96 ( 0.00%) 20588 ( 0.00%) 214.46
unreal 13 ( 0.00%) 1959 ( 0.00%) 150.69
quake 2036 ( 0.00%) 160401 ( 0.00%) 78.78
cuseeme 26 ( 0.00%) 3979 ( 0.00%) 153.04
other 31282933 ( 53.49%) 3206757158 ( 12.59%) 102.51
icmp 697596 ( 1.19%) 82705939 ( 0.32%) 118.56
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2986 ( 0.01%) 773500 ( 0.00%) 259.04
ip6 1851966 ( 3.17%) 718832447 ( 2.82%) 388.15
other 15425 ( 0.03%) 5680685 ( 0.02%) 368.28
frag 3567 ( 0.01%) 3447867 ( 0.01%) 966.60
ip6 120117 ( 0.21%) 45301375 ( 0.18%) 377.14
tcp6 62981 ( 0.11%) 31015945 ( 0.12%) 492.47
http(s) 2175 ( 0.00%) 2662721 ( 0.01%) 1224.24
http(c) 22826 ( 0.04%) 2058733 ( 0.01%) 90.19
squid 64 ( 0.00%) 7247 ( 0.00%) 113.23
smtp 199 ( 0.00%) 47779 ( 0.00%) 240.10
ssh 1194 ( 0.00%) 268020 ( 0.00%) 224.47
dns 194 ( 0.00%) 42463 ( 0.00%) 218.88
bgp 93 ( 0.00%) 16986 ( 0.00%) 182.65
other 36236 ( 0.06%) 25911996 ( 0.10%) 715.09
udp6 36832 ( 0.06%) 9691324 ( 0.04%) 263.12
dns 28875 ( 0.05%) 7592643 ( 0.03%) 262.95
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 7956 ( 0.01%) 2098571 ( 0.01%) 263.77
icmp6 17571 ( 0.03%) 2692056 ( 0.01%) 153.21
ip6 80 ( 0.00%) 10990 ( 0.00%) 137.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2623 ( 0.00%) 1886980 ( 0.01%) 719.40
tcpdump file: 201105011400.dump.gz (921.89 MB)