Traffic Trace Info
DumpFile: 201105031400.dump
FileSize: 3301.77MB
Id: 201105031400
StartTime: Tue May 3 14:00:00 2011
EndTime: Tue May 3 14:15:00 2011
TotalTime: 899.99 seconds
TotalCapSize: -1545.92MB CapLen: 96 bytes
# of packets: 49261924 (27338.81MB)
AvgRate: 254.78Mbps stddev:39.80M
IP flow (unique src/dst pair) Information
# of flows: 775849 (avg. 63.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.1% 2.1% 2.0% 1.8% 1.7% 1.7% 1.5% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 448286
Top 10 bandwidth usage (bytes/total in %):
14.1% 8.3% 7.3% 5.0% 4.9% 4.7% 4.3% 3.2% 2.9% 2.8%
# of IPv6 addresses: 4202
Top 10 bandwidth usage (bytes/total in %):
49.5% 38.5% 6.4% 6.4% 6.0% 5.4% 5.3% 4.9% 4.8% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105031400.pktlen.png)
detailed numbers
[ 32- 63]: 20465386
[ 64- 127]: 7913045
[ 128- 255]: 1848487
[ 256- 511]: 823166
[ 512- 1023]: 851807
[ 1024- 2047]: 17360033
Protocol Breakdown
![[protocol breakdown chart]](201105031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49261924 (100.00%) 28666822384 (100.00%) 581.93
ip 49116093 ( 99.70%) 28590853338 ( 99.73%) 582.11
tcp 29041548 ( 58.95%) 25368584793 ( 88.49%) 873.53
http(s) 14221280 ( 28.87%) 19794594105 ( 69.05%) 1391.90
http(c) 7831330 ( 15.90%) 1010882775 ( 3.53%) 129.08
squid 235066 ( 0.48%) 165615772 ( 0.58%) 704.55
smtp 140992 ( 0.29%) 29656965 ( 0.10%) 210.35
nntp 22 ( 0.00%) 1402 ( 0.00%) 63.73
ftp 52276 ( 0.11%) 4483967 ( 0.02%) 85.77
pop3 8152 ( 0.02%) 4657715 ( 0.02%) 571.36
imap 5670 ( 0.01%) 4385098 ( 0.02%) 773.39
telnet 2084 ( 0.00%) 481078 ( 0.00%) 230.84
ssh 97309 ( 0.20%) 17934815 ( 0.06%) 184.31
dns 8188 ( 0.02%) 641459 ( 0.00%) 78.34
bgp 569 ( 0.00%) 108086 ( 0.00%) 189.96
napster 126 ( 0.00%) 11868 ( 0.00%) 94.19
realaud 13 ( 0.00%) 1306 ( 0.00%) 100.46
rtsp 318 ( 0.00%) 88113 ( 0.00%) 277.08
icecast 25852 ( 0.05%) 23074213 ( 0.08%) 892.55
hotline 51 ( 0.00%) 3595 ( 0.00%) 70.49
other 6412250 ( 13.02%) 4311962461 ( 15.04%) 672.46
udp 17876522 ( 36.29%) 2611595383 ( 9.11%) 146.09
dns 691743 ( 1.40%) 150589176 ( 0.53%) 217.70
realaud 20 ( 0.00%) 1985 ( 0.00%) 99.25
halflif 87 ( 0.00%) 6556 ( 0.00%) 75.36
starcra 23 ( 0.00%) 3326 ( 0.00%) 144.61
everque 173 ( 0.00%) 29538 ( 0.00%) 170.74
unreal 16 ( 0.00%) 2241 ( 0.00%) 140.06
quake 2106 ( 0.00%) 163997 ( 0.00%) 77.87
cuseeme 5 ( 0.00%) 901 ( 0.00%) 180.20
other 17182191 ( 34.88%) 2460715358 ( 8.58%) 143.21
icmp 377744 ( 0.77%) 60288439 ( 0.21%) 159.60
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7184 ( 0.01%) 1843652 ( 0.01%) 256.63
ip6 1795130 ( 3.64%) 542705847 ( 1.89%) 302.32
other 17780 ( 0.04%) 5815954 ( 0.02%) 327.11
frag 1417 ( 0.00%) 1482807 ( 0.01%) 1046.44
ip6 145831 ( 0.30%) 75969046 ( 0.27%) 520.94
tcp6 82598 ( 0.17%) 55957763 ( 0.20%) 677.47
http(s) 5219 ( 0.01%) 6589807 ( 0.02%) 1262.66
http(c) 30177 ( 0.06%) 2708134 ( 0.01%) 89.74
squid 33 ( 0.00%) 2798 ( 0.00%) 84.79
smtp 410 ( 0.00%) 424511 ( 0.00%) 1035.39
dns 206 ( 0.00%) 46755 ( 0.00%) 226.97
bgp 90 ( 0.00%) 16998 ( 0.00%) 188.87
other 46463 ( 0.09%) 46168760 ( 0.16%) 993.67
udp6 39357 ( 0.08%) 14333777 ( 0.05%) 364.20
dns 31341 ( 0.06%) 8653914 ( 0.03%) 276.12
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 2 ( 0.00%) 225 ( 0.00%) 112.50
quake 3 ( 0.00%) 315 ( 0.00%) 105.00
other 8010 ( 0.02%) 5679222 ( 0.02%) 709.02
icmp6 19866 ( 0.04%) 2879324 ( 0.01%) 144.94
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3896 ( 0.01%) 2782672 ( 0.01%) 714.24
tcpdump file: 201105031400.dump.gz (921.16 MB)