Traffic Trace Info
DumpFile: 201105081400.dump
FileSize: 2074.42MB
Id: 201105081400
StartTime: Sun May 8 14:00:01 2011
EndTime: Sun May 8 14:15:00 2011
TotalTime: 899.76 seconds
TotalCapSize: 1628.53MB CapLen: 96 bytes
# of packets: 29221338 (21450.75MB)
AvgRate: 199.92Mbps stddev:64.18M
IP flow (unique src/dst pair) Information
# of flows: 836816 (avg. 34.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.4% 1.2% 1.1% 1.1% 1.1% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 440581
Top 10 bandwidth usage (bytes/total in %):
30.1% 11.6% 5.2% 3.7% 2.4% 2.3% 2.1% 2.1% 1.9% 1.7%
# of IPv6 addresses: 5345
Top 10 bandwidth usage (bytes/total in %):
63.9% 63.9% 17.4% 17.1% 4.7% 2.9% 2.0% 1.8% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105081400.pktlen.png)
detailed numbers
[ 32- 63]: 5146560
[ 64- 127]: 6953830
[ 128- 255]: 1691282
[ 256- 511]: 735574
[ 512- 1023]: 813160
[ 1024- 2047]: 13880932
Protocol Breakdown
![[protocol breakdown chart]](201105081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29221338 (100.00%) 22492741663 (100.00%) 769.74
ip 28988596 ( 99.20%) 22293642998 ( 99.11%) 769.05
tcp 21849535 ( 74.77%) 19506322596 ( 86.72%) 892.76
http(s) 12000227 ( 41.07%) 16120806944 ( 71.67%) 1343.38
http(c) 4695384 ( 16.07%) 539660892 ( 2.40%) 114.93
squid 66256 ( 0.23%) 44296627 ( 0.20%) 668.57
smtp 96814 ( 0.33%) 22037707 ( 0.10%) 227.63
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 51009 ( 0.17%) 8832528 ( 0.04%) 173.16
pop3 15535 ( 0.05%) 3081157 ( 0.01%) 198.34
imap 2283 ( 0.01%) 1239638 ( 0.01%) 542.99
telnet 6150 ( 0.02%) 727019 ( 0.00%) 118.21
ssh 82413 ( 0.28%) 53236274 ( 0.24%) 645.97
dns 8217 ( 0.03%) 742956 ( 0.00%) 90.42
bgp 552 ( 0.00%) 90029 ( 0.00%) 163.10
napster 162 ( 0.00%) 12446 ( 0.00%) 76.83
realaud 73 ( 0.00%) 5984 ( 0.00%) 81.97
rtsp 8672 ( 0.03%) 10402548 ( 0.05%) 1199.56
icecast 4052 ( 0.01%) 705451 ( 0.00%) 174.10
hotline 200 ( 0.00%) 33134 ( 0.00%) 165.67
other 4811535 ( 16.47%) 2700411202 ( 12.01%) 561.24
udp 4948688 ( 16.94%) 2131899512 ( 9.48%) 430.80
dns 560837 ( 1.92%) 113424437 ( 0.50%) 202.24
realaud 18 ( 0.00%) 2861 ( 0.00%) 158.94
halflif 212 ( 0.00%) 15772 ( 0.00%) 74.40
starcra 68 ( 0.00%) 11694 ( 0.00%) 171.97
everque 162 ( 0.00%) 28883 ( 0.00%) 178.29
unreal 27 ( 0.00%) 5260 ( 0.00%) 194.81
quake 1989 ( 0.01%) 155899 ( 0.00%) 78.38
cuseeme 3 ( 0.00%) 507 ( 0.00%) 169.00
other 4385118 ( 15.01%) 2018171987 ( 8.97%) 460.23
icmp 353476 ( 1.21%) 57935869 ( 0.26%) 163.90
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6348 ( 0.02%) 1743636 ( 0.01%) 274.67
ip6 1812540 ( 6.20%) 589874034 ( 2.62%) 325.44
other 17825 ( 0.06%) 5848191 ( 0.03%) 328.09
frag 60826 ( 0.21%) 46218023 ( 0.21%) 759.84
ip6 232742 ( 0.80%) 199098665 ( 0.89%) 855.45
tcp6 154879 ( 0.53%) 184532989 ( 0.82%) 1191.47
http(s) 890 ( 0.00%) 610428 ( 0.00%) 685.87
http(c) 9123 ( 0.03%) 911512 ( 0.00%) 99.91
smtp 98 ( 0.00%) 58153 ( 0.00%) 593.40
dns 182 ( 0.00%) 53675 ( 0.00%) 294.92
bgp 94 ( 0.00%) 25061 ( 0.00%) 266.61
other 144492 ( 0.49%) 182874160 ( 0.81%) 1265.64
udp6 34304 ( 0.12%) 8503690 ( 0.04%) 247.89
dns 26421 ( 0.09%) 7335257 ( 0.03%) 277.63
starcra 1 ( 0.00%) 436 ( 0.00%) 436.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 7881 ( 0.03%) 1167888 ( 0.01%) 148.19
icmp6 41408 ( 0.14%) 4569402 ( 0.02%) 110.35
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2037 ( 0.01%) 1477024 ( 0.01%) 725.10
tcpdump file: 201105081400.dump.gz (701.28 MB)