Traffic Trace Info
DumpFile: 201105091400.dump
FileSize: 3449.68MB
Id: 201105091400
StartTime: Mon May 9 14:00:00 2011
EndTime: Mon May 9 14:15:01 2011
TotalTime: 900.74 seconds
TotalCapSize: -1384.48MB CapLen: 96 bytes
# of packets: 48375064 (36914.29MB)
AvgRate: 343.84Mbps stddev:59.48M
IP flow (unique src/dst pair) Information
# of flows: 934738 (avg. 51.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.5% 1.9% 1.3% 1.2% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 497035
Top 10 bandwidth usage (bytes/total in %):
23.1% 7.2% 6.9% 6.0% 4.3% 4.1% 3.7% 2.8% 2.6% 2.4%
# of IPv6 addresses: 5175
Top 10 bandwidth usage (bytes/total in %):
58.2% 58.2% 29.4% 14.8% 14.3% 2.5% 1.4% 1.4% 1.0% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105091400.pktlen.png)
detailed numbers
[ 32- 63]: 8033582
[ 64- 127]: 10982855
[ 128- 255]: 2522775
[ 256- 511]: 1195066
[ 512- 1023]: 1549042
[ 1024- 2047]: 24091744
Protocol Breakdown
![[protocol breakdown chart]](201105091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48375064 (100.00%) 38707439530 (100.00%) 800.15
ip 47757497 ( 98.72%) 38101797928 ( 98.44%) 797.82
tcp 37391878 ( 77.30%) 32412691543 ( 83.74%) 866.84
http(s) 17893927 ( 36.99%) 24259800975 ( 62.67%) 1355.76
http(c) 11507062 ( 23.79%) 2470511986 ( 6.38%) 214.70
squid 133119 ( 0.28%) 64581370 ( 0.17%) 485.14
smtp 255566 ( 0.53%) 236353752 ( 0.61%) 924.82
nntp 20 ( 0.00%) 1234 ( 0.00%) 61.70
ftp 37934 ( 0.08%) 3198824 ( 0.01%) 84.33
pop3 21861 ( 0.05%) 4007372 ( 0.01%) 183.31
imap 5272 ( 0.01%) 1787526 ( 0.00%) 339.06
telnet 2555 ( 0.01%) 440764 ( 0.00%) 172.51
ssh 26658 ( 0.06%) 5856917 ( 0.02%) 219.71
dns 15721 ( 0.03%) 1616665 ( 0.00%) 102.83
bgp 542 ( 0.00%) 87614 ( 0.00%) 161.65
napster 265 ( 0.00%) 18367 ( 0.00%) 69.31
realaud 4587 ( 0.01%) 3384151 ( 0.01%) 737.77
rtsp 18043 ( 0.04%) 21000245 ( 0.05%) 1163.90
icecast 1313 ( 0.00%) 106313 ( 0.00%) 80.97
hotline 5 ( 0.00%) 722 ( 0.00%) 144.40
other 7467422 ( 15.44%) 5339936386 ( 13.80%) 715.10
udp 7733191 ( 15.99%) 4732371960 ( 12.23%) 611.96
dns 839253 ( 1.73%) 178188729 ( 0.46%) 212.32
realaud 23 ( 0.00%) 2500 ( 0.00%) 108.70
halflif 73 ( 0.00%) 5599 ( 0.00%) 76.70
starcra 72 ( 0.00%) 7974 ( 0.00%) 110.75
everque 222 ( 0.00%) 38178 ( 0.00%) 171.97
unreal 29 ( 0.00%) 5282 ( 0.00%) 182.14
quake 1355 ( 0.00%) 107473 ( 0.00%) 79.32
cuseeme 6 ( 0.00%) 505 ( 0.00%) 84.17
other 6891767 ( 14.25%) 4553864143 ( 11.76%) 660.77
icmp 367133 ( 0.76%) 61013106 ( 0.16%) 166.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6189 ( 0.01%) 1696630 ( 0.00%) 274.14
ip6 2240591 ( 4.63%) 887335438 ( 2.29%) 396.03
other 18330 ( 0.04%) 6669981 ( 0.02%) 363.88
frag 6439 ( 0.01%) 7273637 ( 0.02%) 1129.62
ip6 617567 ( 1.28%) 605641602 ( 1.56%) 980.69
tcp6 516148 ( 1.07%) 569552681 ( 1.47%) 1103.47
http(s) 244742 ( 0.51%) 366898355 ( 0.95%) 1499.12
http(c) 111572 ( 0.23%) 13086590 ( 0.03%) 117.29
smtp 771 ( 0.00%) 625141 ( 0.00%) 810.82
dns 3414 ( 0.01%) 869748 ( 0.00%) 254.76
bgp 93 ( 0.00%) 24125 ( 0.00%) 259.41
other 155556 ( 0.32%) 188048722 ( 0.49%) 1208.88
udp6 51739 ( 0.11%) 17170244 ( 0.04%) 331.86
dns 44659 ( 0.09%) 15514019 ( 0.04%) 347.39
halflif 3 ( 0.00%) 329 ( 0.00%) 109.67
quake 2 ( 0.00%) 223 ( 0.00%) 111.50
other 7075 ( 0.01%) 1655673 ( 0.00%) 234.02
icmp6 28121 ( 0.06%) 3769725 ( 0.01%) 134.05
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21448 ( 0.04%) 15133814 ( 0.04%) 705.60
tcpdump file: 201105091400.dump.gz (1149.71 MB)