Traffic Trace Info
DumpFile: 201105111400.dump
FileSize: 2827.94MB
Id: 201105111400
StartTime: Wed May 11 14:00:00 2011
EndTime: Wed May 11 14:15:01 2011
TotalTime: 900.77 seconds
TotalCapSize: -1857.45MB CapLen: 96 bytes
# of packets: 38625502 (27198.13MB)
AvgRate: 253.26Mbps stddev:35.80M
IP flow (unique src/dst pair) Information
# of flows: 917998 (avg. 42.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 3.7% 3.7% 2.9% 2.0% 1.9% 1.3% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 500129
Top 10 bandwidth usage (bytes/total in %):
17.6% 14.9% 8.0% 7.4% 5.3% 3.8% 3.8% 3.2% 3.1% 3.1%
# of IPv6 addresses: 4873
Top 10 bandwidth usage (bytes/total in %):
57.6% 49.4% 26.1% 22.0% 10.9% 3.1% 2.9% 2.9% 1.5% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105111400.pktlen.png)
detailed numbers
[ 32- 63]: 7024610
[ 64- 127]: 9385476
[ 128- 255]: 2275001
[ 256- 511]: 1183944
[ 512- 1023]: 1094116
[ 1024- 2047]: 17662355
Protocol Breakdown
![[protocol breakdown chart]](201105111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38625502 (100.00%) 28519304185 (100.00%) 738.35
ip 37979399 ( 98.33%) 27795402385 ( 97.46%) 731.85
tcp 30653028 ( 79.36%) 24735294294 ( 86.73%) 806.94
http(s) 13542958 ( 35.06%) 18161862681 ( 63.68%) 1341.06
http(c) 9354796 ( 24.22%) 1552956911 ( 5.45%) 166.01
squid 65834 ( 0.17%) 39789173 ( 0.14%) 604.39
smtp 275366 ( 0.71%) 158949402 ( 0.56%) 577.23
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 82467 ( 0.21%) 13498058 ( 0.05%) 163.68
pop3 16025 ( 0.04%) 5184873 ( 0.02%) 323.55
imap 6896 ( 0.02%) 4703135 ( 0.02%) 682.01
telnet 214 ( 0.00%) 17367 ( 0.00%) 81.15
ssh 179651 ( 0.47%) 146790000 ( 0.51%) 817.08
dns 28619 ( 0.07%) 2442533 ( 0.01%) 85.35
bgp 609 ( 0.00%) 132406 ( 0.00%) 217.42
napster 266 ( 0.00%) 20560 ( 0.00%) 77.29
realaud 214 ( 0.00%) 16917 ( 0.00%) 79.05
rtsp 16873 ( 0.04%) 12999002 ( 0.05%) 770.40
icecast 34371 ( 0.09%) 29755460 ( 0.10%) 865.71
hotline 9 ( 0.00%) 600 ( 0.00%) 66.67
other 7047853 ( 18.25%) 4606174782 ( 16.15%) 653.56
udp 4685950 ( 12.13%) 2041899333 ( 7.16%) 435.75
dns 805659 ( 2.09%) 173100663 ( 0.61%) 214.86
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 69 ( 0.00%) 12995 ( 0.00%) 188.33
halflif 78 ( 0.00%) 5428 ( 0.00%) 69.59
starcra 27 ( 0.00%) 4971 ( 0.00%) 184.11
everque 536 ( 0.00%) 148916 ( 0.00%) 277.83
unreal 18 ( 0.00%) 3268 ( 0.00%) 181.56
quake 2048 ( 0.01%) 162826 ( 0.00%) 79.50
cuseeme 5 ( 0.00%) 691 ( 0.00%) 138.20
other 3877002 ( 10.04%) 1868310501 ( 6.55%) 481.90
icmp 376906 ( 0.98%) 60788618 ( 0.21%) 161.28
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 597 ( 0.00%) 125718 ( 0.00%) 210.58
ip6 2244912 ( 5.81%) 951979612 ( 3.34%) 424.06
other 17821 ( 0.05%) 5295540 ( 0.02%) 297.15
frag 3675 ( 0.01%) 3656878 ( 0.01%) 995.07
ip6 646103 ( 1.67%) 723901800 ( 2.54%) 1120.41
tcp6 553427 ( 1.43%) 693997343 ( 2.43%) 1254.00
http(s) 13018 ( 0.03%) 13113119 ( 0.05%) 1007.31
http(c) 66893 ( 0.17%) 19458267 ( 0.07%) 290.89
squid 8 ( 0.00%) 680 ( 0.00%) 85.00
smtp 637 ( 0.00%) 115626 ( 0.00%) 181.52
dns 319 ( 0.00%) 66565 ( 0.00%) 208.67
bgp 99 ( 0.00%) 21199 ( 0.00%) 214.13
napster 11 ( 0.00%) 1483 ( 0.00%) 134.82
other 472442 ( 1.22%) 661220404 ( 2.32%) 1399.58
udp6 58414 ( 0.15%) 18027521 ( 0.06%) 308.62
dns 52443 ( 0.14%) 16340302 ( 0.06%) 311.58
everque 3 ( 0.00%) 330 ( 0.00%) 110.00
other 5968 ( 0.02%) 1686889 ( 0.01%) 282.66
icmp6 22364 ( 0.06%) 3335011 ( 0.01%) 149.12
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11867 ( 0.03%) 8537709 ( 0.03%) 719.45
tcpdump file: 201105111400.dump.gz (933.46 MB)