Traffic Trace Info
DumpFile: 201105101400.dump
FileSize: 2966.66MB
Id: 201105101400
StartTime: Tue May 10 14:00:01 2011
EndTime: Tue May 10 14:15:01 2011
TotalTime: 900.10 seconds
TotalCapSize: -1765.68MB CapLen: 96 bytes
# of packets: 41702886 (26999.32MB)
AvgRate: 251.62Mbps stddev:41.26M
IP flow (unique src/dst pair) Information
# of flows: 1250974 (avg. 33.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.4% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 687086
Top 10 bandwidth usage (bytes/total in %):
17.6% 7.2% 6.3% 4.8% 4.3% 3.3% 2.5% 2.4% 2.3% 2.1%
# of IPv6 addresses: 4997
Top 10 bandwidth usage (bytes/total in %):
52.1% 43.0% 21.7% 13.7% 9.5% 7.4% 3.3% 3.3% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105101400.pktlen.png)
detailed numbers
[ 32- 63]: 8529396
[ 64- 127]: 10582316
[ 128- 255]: 2601647
[ 256- 511]: 1566140
[ 512- 1023]: 1278509
[ 1024- 2047]: 17144878
Protocol Breakdown
![[protocol breakdown chart]](201105101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41702886 (100.00%) 28310837422 (100.00%) 678.87
ip 41192142 ( 98.78%) 27926474109 ( 98.64%) 677.96
tcp 30268928 ( 72.58%) 23366826199 ( 82.54%) 771.97
http(s) 13606704 ( 32.63%) 17623976171 ( 62.25%) 1295.24
http(c) 10192489 ( 24.44%) 2431613974 ( 8.59%) 238.57
squid 158489 ( 0.38%) 133104834 ( 0.47%) 839.84
smtp 365180 ( 0.88%) 290678133 ( 1.03%) 795.99
nntp 24 ( 0.00%) 1472 ( 0.00%) 61.33
ftp 31409 ( 0.08%) 2630469 ( 0.01%) 83.75
pop3 65998 ( 0.16%) 17566131 ( 0.06%) 266.16
imap 15387 ( 0.04%) 11347799 ( 0.04%) 737.49
telnet 577 ( 0.00%) 38444 ( 0.00%) 66.63
ssh 817234 ( 1.96%) 190090825 ( 0.67%) 232.60
dns 18569 ( 0.04%) 1943126 ( 0.01%) 104.64
bgp 554 ( 0.00%) 98617 ( 0.00%) 178.01
napster 344 ( 0.00%) 21465 ( 0.00%) 62.40
realaud 155 ( 0.00%) 15744 ( 0.00%) 101.57
rtsp 8680 ( 0.02%) 10412296 ( 0.04%) 1199.57
icecast 3102 ( 0.01%) 316088 ( 0.00%) 101.90
hotline 25 ( 0.00%) 4135 ( 0.00%) 165.40
other 4984008 ( 11.95%) 2652966476 ( 9.37%) 532.30
udp 7723276 ( 18.52%) 3670260372 ( 12.96%) 475.22
dns 842753 ( 2.02%) 182370899 ( 0.64%) 216.40
realaud 89 ( 0.00%) 15220 ( 0.00%) 171.01
halflif 100 ( 0.00%) 8514 ( 0.00%) 85.14
starcra 35 ( 0.00%) 5108 ( 0.00%) 145.94
everque 471 ( 0.00%) 139531 ( 0.00%) 296.24
unreal 22 ( 0.00%) 3325 ( 0.00%) 151.14
quake 2023 ( 0.00%) 161557 ( 0.00%) 79.86
other 6856369 ( 16.44%) 3486143548 ( 12.31%) 508.45
icmp 918496 ( 2.20%) 102437377 ( 0.36%) 111.53
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 950 ( 0.00%) 379216 ( 0.00%) 399.17
ip6 2260995 ( 5.42%) 781011191 ( 2.76%) 345.43
other 19312 ( 0.05%) 5540484 ( 0.02%) 286.89
frag 120005 ( 0.29%) 91560840 ( 0.32%) 762.98
ip6 510744 ( 1.22%) 384363313 ( 1.36%) 752.56
tcp6 370071 ( 0.89%) 337579324 ( 1.19%) 912.20
http(s) 5117 ( 0.01%) 4894668 ( 0.02%) 956.55
http(c) 109912 ( 0.26%) 9875895 ( 0.03%) 89.85
smtp 694 ( 0.00%) 230154 ( 0.00%) 331.63
ftp 25 ( 0.00%) 2296 ( 0.00%) 91.84
dns 286 ( 0.00%) 63137 ( 0.00%) 220.76
bgp 101 ( 0.00%) 28652 ( 0.00%) 283.68
other 253936 ( 0.61%) 322484522 ( 1.14%) 1269.94
udp6 78256 ( 0.19%) 20027955 ( 0.07%) 255.93
dns 66920 ( 0.16%) 18527689 ( 0.07%) 276.86
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 2 ( 0.00%) 224 ( 0.00%) 112.00
other 11332 ( 0.03%) 1499819 ( 0.01%) 132.35
icmp6 30719 ( 0.07%) 4515151 ( 0.02%) 146.98
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31582 ( 0.08%) 22225155 ( 0.08%) 703.73
tcpdump file: 201105101400.dump.gz (1048.04 MB)