Traffic Trace Info
DumpFile: 201105051400.dump
FileSize: 2675.98MB
Id: 201105051400
StartTime: Thu May 5 14:00:00 2011
EndTime: Thu May 5 14:15:00 2011
TotalTime: 899.89 seconds
TotalCapSize: -1994.53MB CapLen: 96 bytes
# of packets: 37650337 (28938.61MB)
AvgRate: 269.75Mbps stddev:39.00M
IP flow (unique src/dst pair) Information
# of flows: 1132479 (avg. 33.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.8% 2.8% 2.5% 2.2% 1.7% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 665474
Top 10 bandwidth usage (bytes/total in %):
28.0% 9.5% 6.7% 5.9% 5.0% 3.8% 2.9% 2.9% 2.9% 2.9%
# of IPv6 addresses: 4177
Top 10 bandwidth usage (bytes/total in %):
84.4% 79.7% 16.2% 12.0% 0.6% 0.6% 0.6% 0.5% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105051400.pktlen.png)
detailed numbers
[ 32- 63]: 7610148
[ 64- 127]: 7348972
[ 128- 255]: 1777340
[ 256- 511]: 824736
[ 512- 1023]: 1023601
[ 1024- 2047]: 19065540
Protocol Breakdown
![[protocol breakdown chart]](201105051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37650337 (100.00%) 30344332596 (100.00%) 805.95
ip 36859991 ( 97.90%) 29385146571 ( 96.84%) 797.21
tcp 28909422 ( 76.78%) 26350518439 ( 86.84%) 911.49
http(s) 16873315 ( 44.82%) 22669002667 ( 74.71%) 1343.48
http(c) 6884706 ( 18.29%) 703784680 ( 2.32%) 102.22
squid 166517 ( 0.44%) 92005984 ( 0.30%) 552.53
smtp 133186 ( 0.35%) 48793986 ( 0.16%) 366.36
ftp 42265 ( 0.11%) 3673848 ( 0.01%) 86.92
pop3 10221 ( 0.03%) 6529705 ( 0.02%) 638.85
imap 3670 ( 0.01%) 1210469 ( 0.00%) 329.83
telnet 3321 ( 0.01%) 718928 ( 0.00%) 216.48
ssh 21833 ( 0.06%) 6164307 ( 0.02%) 282.34
dns 10184 ( 0.03%) 3217430 ( 0.01%) 315.93
bgp 590 ( 0.00%) 119971 ( 0.00%) 203.34
napster 20 ( 0.00%) 1977 ( 0.00%) 98.85
realaud 15 ( 0.00%) 2023 ( 0.00%) 134.87
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 822 ( 0.00%) 109329 ( 0.00%) 133.00
hotline 285 ( 0.00%) 18331 ( 0.00%) 64.32
other 4758467 ( 12.64%) 2815164504 ( 9.28%) 591.61
udp 5503937 ( 14.62%) 2282918862 ( 7.52%) 414.78
dns 660863 ( 1.76%) 151560911 ( 0.50%) 229.34
realaud 12 ( 0.00%) 1568 ( 0.00%) 130.67
halflif 236 ( 0.00%) 41541 ( 0.00%) 176.02
starcra 125 ( 0.00%) 17780 ( 0.00%) 142.24
everque 113 ( 0.00%) 21497 ( 0.00%) 190.24
unreal 63 ( 0.00%) 12288 ( 0.00%) 195.05
quake 1389 ( 0.00%) 106971 ( 0.00%) 77.01
cuseeme 6 ( 0.00%) 566 ( 0.00%) 94.33
other 4840889 ( 12.86%) 2131053738 ( 7.02%) 440.22
icmp 606215 ( 1.61%) 89833700 ( 0.30%) 148.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8951 ( 0.02%) 2896292 ( 0.01%) 323.57
ip6 1807928 ( 4.80%) 650081357 ( 2.14%) 359.57
other 23353 ( 0.06%) 8878651 ( 0.03%) 380.19
frag 980 ( 0.00%) 944158 ( 0.00%) 963.43
ip6 790346 ( 2.10%) 959186025 ( 3.16%) 1213.63
tcp6 723445 ( 1.92%) 940146271 ( 3.10%) 1299.54
http(s) 2421 ( 0.01%) 2358950 ( 0.01%) 974.37
http(c) 48424 ( 0.13%) 4106025 ( 0.01%) 84.79
smtp 137 ( 0.00%) 27647 ( 0.00%) 201.80
ssh 228 ( 0.00%) 89205 ( 0.00%) 391.25
dns 146 ( 0.00%) 33708 ( 0.00%) 230.88
bgp 97 ( 0.00%) 23208 ( 0.00%) 239.26
hotline 3 ( 0.00%) 254 ( 0.00%) 84.67
other 671989 ( 1.78%) 933507274 ( 3.08%) 1389.17
udp6 36575 ( 0.10%) 9338703 ( 0.03%) 255.33
dns 27619 ( 0.07%) 7619260 ( 0.03%) 275.87
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
other 8954 ( 0.02%) 1719232 ( 0.01%) 192.01
icmp6 20998 ( 0.06%) 3278491 ( 0.01%) 156.13
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9218 ( 0.02%) 6407540 ( 0.02%) 695.11
tcpdump file: 201105051400.dump.gz (881.85 MB)