Traffic Trace Info
DumpFile: 201105021400.dump
FileSize: 3808.65MB
Id: 201105021400
StartTime: Mon May 2 14:00:00 2011
EndTime: Mon May 2 14:15:00 2011
TotalTime: 900.26 seconds
TotalCapSize: -1162.35MB CapLen: 96 bytes
# of packets: 57343412 (28247.22MB)
AvgRate: 263.21Mbps stddev:37.62M
IP flow (unique src/dst pair) Information
# of flows: 878507 (avg. 65.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.8% 1.8% 1.6% 1.5% 1.5% 1.5% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 473853
Top 10 bandwidth usage (bytes/total in %):
14.0% 13.4% 7.9% 5.2% 4.1% 2.7% 2.6% 2.5% 2.2% 2.0%
# of IPv6 addresses: 4764
Top 10 bandwidth usage (bytes/total in %):
56.3% 34.3% 15.6% 15.5% 8.5% 6.0% 4.0% 3.4% 3.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105021400.pktlen.png)
detailed numbers
[ 32- 63]: 27180508
[ 64- 127]: 8611091
[ 128- 255]: 2049848
[ 256- 511]: 836432
[ 512- 1023]: 1099558
[ 1024- 2047]: 17565975
Protocol Breakdown
![[protocol breakdown chart]](201105021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57343412 (100.00%) 29619359432 (100.00%) 516.53
ip 57085901 ( 99.55%) 29520881411 ( 99.67%) 517.13
tcp 29971939 ( 52.27%) 25358938010 ( 85.62%) 846.09
http(s) 14469535 ( 25.23%) 19822239337 ( 66.92%) 1369.93
http(c) 8650761 ( 15.09%) 1739877424 ( 5.87%) 201.12
squid 124740 ( 0.22%) 67199559 ( 0.23%) 538.72
smtp 118690 ( 0.21%) 50574963 ( 0.17%) 426.11
nntp 19 ( 0.00%) 1266 ( 0.00%) 66.63
ftp 9911 ( 0.02%) 930690 ( 0.00%) 93.90
pop3 21704 ( 0.04%) 4646140 ( 0.02%) 214.07
imap 6111 ( 0.01%) 1728750 ( 0.01%) 282.89
telnet 2823 ( 0.00%) 535390 ( 0.00%) 189.65
ssh 613145 ( 1.07%) 110967368 ( 0.37%) 180.98
dns 411154 ( 0.72%) 411338737 ( 1.39%) 1000.45
bgp 525 ( 0.00%) 88089 ( 0.00%) 167.79
napster 146 ( 0.00%) 53558 ( 0.00%) 366.84
realaud 40 ( 0.00%) 3949 ( 0.00%) 98.72
rtsp 7637 ( 0.01%) 9167693 ( 0.03%) 1200.43
icecast 658 ( 0.00%) 59659 ( 0.00%) 90.67
hotline 17 ( 0.00%) 1710 ( 0.00%) 100.59
other 5534322 ( 9.65%) 3139523668 ( 10.60%) 567.28
udp 24293600 ( 42.37%) 3157251629 ( 10.66%) 129.96
dns 665724 ( 1.16%) 127151900 ( 0.43%) 191.00
rip 8 ( 0.00%) 600 ( 0.00%) 75.00
realaud 43 ( 0.00%) 3982 ( 0.00%) 92.60
halflif 98 ( 0.00%) 7605 ( 0.00%) 77.60
starcra 38 ( 0.00%) 5743 ( 0.00%) 151.13
everque 405 ( 0.00%) 50866 ( 0.00%) 125.60
unreal 44 ( 0.00%) 7382 ( 0.00%) 167.77
quake 2066 ( 0.00%) 163815 ( 0.00%) 79.29
cuseeme 9 ( 0.00%) 946 ( 0.00%) 105.11
other 23624891 ( 41.20%) 3029704739 ( 10.23%) 128.24
icmp 519286 ( 0.91%) 84345994 ( 0.28%) 162.43
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3002 ( 0.01%) 761168 ( 0.00%) 253.55
ip6 2262947 ( 3.95%) 904867585 ( 3.05%) 399.86
other 34942 ( 0.06%) 14697755 ( 0.05%) 420.63
frag 1259 ( 0.00%) 1216702 ( 0.00%) 966.40
ip6 257511 ( 0.45%) 98478021 ( 0.33%) 382.42
tcp6 190915 ( 0.33%) 81866821 ( 0.28%) 428.81
http(s) 12812 ( 0.02%) 17156750 ( 0.06%) 1339.12
http(c) 118540 ( 0.21%) 9380099 ( 0.03%) 79.13
squid 29 ( 0.00%) 4421 ( 0.00%) 152.45
smtp 74 ( 0.00%) 20418 ( 0.00%) 275.92
ftp 9 ( 0.00%) 758 ( 0.00%) 84.22
dns 202 ( 0.00%) 45964 ( 0.00%) 227.54
bgp 92 ( 0.00%) 14409 ( 0.00%) 156.62
other 59157 ( 0.10%) 55244002 ( 0.19%) 933.85
udp6 41679 ( 0.07%) 13161384 ( 0.04%) 315.78
dns 33033 ( 0.06%) 9617215 ( 0.03%) 291.14
other 8646 ( 0.02%) 3544169 ( 0.01%) 409.92
icmp6 24444 ( 0.04%) 3103703 ( 0.01%) 126.97
ip6 77 ( 0.00%) 10586 ( 0.00%) 137.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 366 ( 0.00%) 331447 ( 0.00%) 905.59
tcpdump file: 201105021400.dump.gz (1030.58 MB)