Traffic Trace Info
DumpFile: 201105121400.dump
FileSize: 8647.86MB
Id: 201105121400
StartTime: Thu May 12 14:00:01 2011
EndTime: Thu May 12 14:13:22 2011
TotalTime: 801.45 seconds
TotalCapSize: -1759.10MB CapLen: 96 bytes
# of packets: 145159032 (30696.95MB)
AvgRate: 321.47Mbps stddev:34.01M
IP flow (unique src/dst pair) Information
# of flows: 1068736 (avg. 135.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.2% 5.3% 3.2% 3.1% 1.6% 1.6% 1.4% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 597594
Top 10 bandwidth usage (bytes/total in %):
20.3% 20.3% 11.8% 6.9% 5.8% 5.5% 5.1% 4.4% 4.1% 3.2%
# of IPv6 addresses: 4304
Top 10 bandwidth usage (bytes/total in %):
73.7% 39.5% 34.2% 10.6% 10.0% 1.9% 1.7% 1.4% 1.4% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105121400.pktlen.png)
detailed numbers
[ 32- 63]: 115795886
[ 64- 127]: 9655825
[ 128- 255]: 1918836
[ 256- 511]: 986525
[ 512- 1023]: 1062370
[ 1024- 2047]: 15739590
Protocol Breakdown
![[protocol breakdown chart]](201105121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 145159032 (100.00%) 32188086407 (100.00%) 221.74
ip 144917428 ( 99.83%) 31975815214 ( 99.34%) 220.65
tcp 29908409 ( 20.60%) 22557408356 ( 70.08%) 754.22
http(s) 13455013 ( 9.27%) 18238292609 ( 56.66%) 1355.50
http(c) 10624175 ( 7.32%) 1875833486 ( 5.83%) 176.56
squid 73302 ( 0.05%) 40138804 ( 0.12%) 547.58
smtp 241801 ( 0.17%) 171543189 ( 0.53%) 709.44
ftp 15776 ( 0.01%) 1189885 ( 0.00%) 75.42
pop3 64559 ( 0.04%) 7689710 ( 0.02%) 119.11
imap 6020 ( 0.00%) 4726041 ( 0.01%) 785.06
telnet 7525 ( 0.01%) 465356 ( 0.00%) 61.84
ssh 48208 ( 0.03%) 12639246 ( 0.04%) 262.18
dns 14382 ( 0.01%) 1586534 ( 0.00%) 110.31
bgp 474 ( 0.00%) 82253 ( 0.00%) 173.53
napster 871 ( 0.00%) 60522 ( 0.00%) 69.49
realaud 45 ( 0.00%) 3655 ( 0.00%) 81.22
rtsp 10472 ( 0.01%) 10432731 ( 0.03%) 996.25
icecast 859 ( 0.00%) 60517 ( 0.00%) 70.45
hotline 26 ( 0.00%) 2677 ( 0.00%) 102.96
other 5344901 ( 3.68%) 2192661141 ( 6.81%) 410.23
udp 113060300 ( 77.89%) 8839761349 ( 27.46%) 78.19
dns 731183 ( 0.50%) 163188227 ( 0.51%) 223.18
realaud 46 ( 0.00%) 5765 ( 0.00%) 125.33
halflif 71 ( 0.00%) 6612 ( 0.00%) 93.13
starcra 50 ( 0.00%) 6239 ( 0.00%) 124.78
everque 7922 ( 0.01%) 951227 ( 0.00%) 120.07
unreal 16 ( 0.00%) 2988 ( 0.00%) 186.75
quake 1939 ( 0.00%) 157579 ( 0.00%) 81.27
cuseeme 3 ( 0.00%) 247 ( 0.00%) 82.33
other 112311292 ( 77.37%) 8674837314 ( 26.95%) 77.24
icmp 432223 ( 0.30%) 62774889 ( 0.20%) 145.24
ipip 162 ( 0.00%) 16884 ( 0.00%) 104.22
ipsec 10210 ( 0.01%) 4861946 ( 0.02%) 476.19
ip6 1491387 ( 1.03%) 505942813 ( 1.57%) 339.24
other 14737 ( 0.01%) 5048977 ( 0.02%) 342.61
frag 26187 ( 0.02%) 20881675 ( 0.06%) 797.41
ip6 241604 ( 0.17%) 212271193 ( 0.66%) 878.59
tcp6 163565 ( 0.11%) 191436974 ( 0.59%) 1170.40
http(s) 3497 ( 0.00%) 4453726 ( 0.01%) 1273.58
http(c) 25848 ( 0.02%) 2283221 ( 0.01%) 88.33
smtp 679 ( 0.00%) 160044 ( 0.00%) 235.71
dns 318 ( 0.00%) 70874 ( 0.00%) 222.87
bgp 82 ( 0.00%) 16212 ( 0.00%) 197.71
other 133141 ( 0.09%) 184452897 ( 0.57%) 1385.40
udp6 56073 ( 0.04%) 17442445 ( 0.05%) 311.07
dns 50737 ( 0.03%) 16421367 ( 0.05%) 323.66
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 2 ( 0.00%) 231 ( 0.00%) 115.50
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
other 5329 ( 0.00%) 1020317 ( 0.00%) 191.47
icmp6 21586 ( 0.01%) 3050377 ( 0.01%) 141.31
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 353 ( 0.00%) 337725 ( 0.00%) 956.73
tcpdump file: 201105121400.dump.gz (2053.93 MB)