Traffic Trace Info
DumpFile: 201105061400.dump
FileSize: 3473.58MB
Id: 201105061400
StartTime: Fri May 6 14:00:00 2011
EndTime: Fri May 6 14:15:01 2011
TotalTime: 900.07 seconds
TotalCapSize: -1367.58MB CapLen: 96 bytes
# of packets: 48834510 (38778.64MB)
AvgRate: 361.41Mbps stddev:35.57M
IP flow (unique src/dst pair) Information
# of flows: 911048 (avg. 53.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.5% 2.4% 2.2% 2.1% 1.6% 1.6% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 488161
Top 10 bandwidth usage (bytes/total in %):
19.3% 12.3% 11.8% 5.3% 4.5% 4.4% 3.8% 3.8% 2.5% 2.4%
# of IPv6 addresses: 4711
Top 10 bandwidth usage (bytes/total in %):
32.8% 18.3% 10.9% 10.9% 10.2% 8.6% 8.6% 6.9% 6.9% 6.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105061400.pktlen.png)
detailed numbers
[ 32- 63]: 9225625
[ 64- 127]: 9481896
[ 128- 255]: 2247940
[ 256- 511]: 1019142
[ 512- 1023]: 1249453
[ 1024- 2047]: 25610454
Protocol Breakdown
![[protocol breakdown chart]](201105061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48834510 (100.00%) 40662349802 (100.00%) 832.66
ip 48581511 ( 99.48%) 40517770081 ( 99.64%) 834.02
tcp 40330208 ( 82.59%) 35750396567 ( 87.92%) 886.44
http(s) 20475517 ( 41.93%) 28593415150 ( 70.32%) 1396.47
http(c) 11378376 ( 23.30%) 1796020905 ( 4.42%) 157.85
squid 91651 ( 0.19%) 37469422 ( 0.09%) 408.83
smtp 175631 ( 0.36%) 103341694 ( 0.25%) 588.40
ftp 57058 ( 0.12%) 4959908 ( 0.01%) 86.93
pop3 24641 ( 0.05%) 9217420 ( 0.02%) 374.07
imap 4871 ( 0.01%) 2073751 ( 0.01%) 425.73
telnet 3120 ( 0.01%) 640291 ( 0.00%) 205.22
ssh 22079 ( 0.05%) 3972457 ( 0.01%) 179.92
dns 16860 ( 0.03%) 1773621 ( 0.00%) 105.20
bgp 556 ( 0.00%) 99521 ( 0.00%) 178.99
napster 90 ( 0.00%) 26398 ( 0.00%) 293.31
realaud 98 ( 0.00%) 6094 ( 0.00%) 62.18
rtsp 178421 ( 0.37%) 258927850 ( 0.64%) 1451.22
icecast 16156 ( 0.03%) 6553018 ( 0.02%) 405.61
hotline 29 ( 0.00%) 2942 ( 0.00%) 101.45
other 7885054 ( 16.15%) 4931896125 ( 12.13%) 625.47
udp 6333081 ( 12.97%) 4231687391 ( 10.41%) 668.19
dns 824934 ( 1.69%) 185178535 ( 0.46%) 224.48
realaud 31 ( 0.00%) 4606 ( 0.00%) 148.58
halflif 111 ( 0.00%) 8845 ( 0.00%) 79.68
starcra 28 ( 0.00%) 3693 ( 0.00%) 131.89
everque 487 ( 0.00%) 84981 ( 0.00%) 174.50
unreal 28 ( 0.00%) 7160 ( 0.00%) 255.71
quake 2039 ( 0.00%) 158966 ( 0.00%) 77.96
cuseeme 4 ( 0.00%) 369 ( 0.00%) 92.25
other 5505216 ( 11.27%) 4046123577 ( 9.95%) 734.96
icmp 410185 ( 0.84%) 63575560 ( 0.16%) 154.99
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18551 ( 0.04%) 10130686 ( 0.02%) 546.10
ip6 1464833 ( 3.00%) 457153290 ( 1.12%) 312.09
other 24468 ( 0.05%) 4807317 ( 0.01%) 196.47
frag 1049 ( 0.00%) 1036499 ( 0.00%) 988.08
ip6 252999 ( 0.52%) 144579721 ( 0.36%) 571.46
tcp6 162230 ( 0.33%) 111215975 ( 0.27%) 685.55
http(s) 37195 ( 0.08%) 40980409 ( 0.10%) 1101.77
http(c) 49523 ( 0.10%) 4329905 ( 0.01%) 87.43
smtp 294 ( 0.00%) 98681 ( 0.00%) 335.65
dns 209 ( 0.00%) 45579 ( 0.00%) 218.08
bgp 92 ( 0.00%) 19678 ( 0.00%) 213.89
other 74917 ( 0.15%) 65741723 ( 0.16%) 877.53
udp6 40964 ( 0.08%) 11292052 ( 0.03%) 275.66
dns 32761 ( 0.07%) 9887941 ( 0.02%) 301.82
halflif 2 ( 0.00%) 225 ( 0.00%) 112.50
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
other 8200 ( 0.02%) 1403771 ( 0.00%) 171.19
icmp6 23307 ( 0.05%) 3486096 ( 0.01%) 149.57
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26388 ( 0.05%) 18570578 ( 0.05%) 703.75
tcpdump file: 201105061400.dump.gz (1124.50 MB)