Traffic Trace Info
DumpFile: 201105131400.dump
FileSize: 8342.84MB
Id: 201105131400
StartTime: Fri May 13 14:00:04 2011
EndTime: Fri May 13 14:14:20 2011
TotalTime: 856.03 seconds
TotalCapSize: -1941.61MB CapLen: 96 bytes
# of packets: 137130119 (30559.08MB)
AvgRate: 324.79Mbps stddev:48.11M
IP flow (unique src/dst pair) Information
# of flows: 967330 (avg. 141.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.8% 8.3% 4.0% 2.9% 2.4% 2.2% 1.9% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 542631
Top 10 bandwidth usage (bytes/total in %):
19.7% 14.5% 11.1% 8.5% 7.0% 4.7% 4.2% 4.2% 3.6% 3.0%
# of IPv6 addresses: 4309
Top 10 bandwidth usage (bytes/total in %):
81.8% 71.4% 14.6% 10.3% 7.8% 6.9% 0.6% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105131400.pktlen.png)
detailed numbers
[ 32- 63]: 108896661
[ 64- 127]: 8311324
[ 128- 255]: 1948270
[ 256- 511]: 884082
[ 512- 1023]: 1015143
[ 1024- 2047]: 16074639
Protocol Breakdown
![[protocol breakdown chart]](201105131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 137130119 (100.00%) 32043513786 (100.00%) 233.67
ip 136332309 ( 99.42%) 30979869384 ( 96.68%) 227.24
tcp 27149267 ( 19.80%) 21521732002 ( 67.16%) 792.72
http(s) 13184104 ( 9.61%) 17504162748 ( 54.63%) 1327.67
http(c) 8577114 ( 6.25%) 1788914356 ( 5.58%) 208.57
squid 116009 ( 0.08%) 84717139 ( 0.26%) 730.26
smtp 188948 ( 0.14%) 132247224 ( 0.41%) 699.91
ftp 14088 ( 0.01%) 1204071 ( 0.00%) 85.47
pop3 17085 ( 0.01%) 4761428 ( 0.01%) 278.69
imap 2955 ( 0.00%) 801579 ( 0.00%) 271.26
telnet 346 ( 0.00%) 23492 ( 0.00%) 67.90
ssh 34099 ( 0.02%) 6688666 ( 0.02%) 196.15
dns 93265 ( 0.07%) 6604938 ( 0.02%) 70.82
bgp 494 ( 0.00%) 88231 ( 0.00%) 178.61
napster 577 ( 0.00%) 116796 ( 0.00%) 202.42
realaud 251 ( 0.00%) 17981 ( 0.00%) 71.64
rtsp 5491 ( 0.00%) 6685952 ( 0.02%) 1217.62
icecast 3151 ( 0.00%) 219273 ( 0.00%) 69.59
hotline 11 ( 0.00%) 684 ( 0.00%) 62.18
other 4911279 ( 3.58%) 1984477444 ( 6.19%) 404.07
udp 107072360 ( 78.08%) 8823585150 ( 27.54%) 82.41
dns 15087987 ( 11.00%) 1019737456 ( 3.18%) 67.59
realaud 820 ( 0.00%) 52615 ( 0.00%) 64.16
halflif 75 ( 0.00%) 9904 ( 0.00%) 132.05
starcra 39 ( 0.00%) 5804 ( 0.00%) 148.82
everque 7608 ( 0.01%) 898692 ( 0.00%) 118.12
unreal 28 ( 0.00%) 5649 ( 0.00%) 201.75
quake 1492 ( 0.00%) 117181 ( 0.00%) 78.54
cuseeme 5 ( 0.00%) 1376 ( 0.00%) 275.20
other 91974165 ( 67.07%) 7802676167 ( 24.35%) 84.84
icmp 365740 ( 0.27%) 63633942 ( 0.20%) 173.99
ipip 159 ( 0.00%) 16554 ( 0.00%) 104.11
ipsec 1119 ( 0.00%) 351242 ( 0.00%) 313.89
ip6 1729061 ( 1.26%) 564648368 ( 1.76%) 326.56
other 14603 ( 0.01%) 5902126 ( 0.02%) 404.17
frag 728 ( 0.00%) 735187 ( 0.00%) 1009.87
ip6 797810 ( 0.58%) 1063644402 ( 3.32%) 1333.21
tcp6 719841 ( 0.52%) 1039327096 ( 3.24%) 1443.83
http(s) 75452 ( 0.06%) 113141579 ( 0.35%) 1499.52
http(c) 18089 ( 0.01%) 1595376 ( 0.00%) 88.20
squid 4 ( 0.00%) 336 ( 0.00%) 84.00
smtp 2136 ( 0.00%) 542927 ( 0.00%) 254.18
ssh 500 ( 0.00%) 54741 ( 0.00%) 109.48
dns 256 ( 0.00%) 44372 ( 0.00%) 173.33
bgp 84 ( 0.00%) 17187 ( 0.00%) 204.61
other 623320 ( 0.45%) 923930578 ( 2.88%) 1482.27
udp6 46906 ( 0.03%) 14452099 ( 0.05%) 308.11
dns 43234 ( 0.03%) 13645582 ( 0.04%) 315.62
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 3667 ( 0.00%) 805974 ( 0.00%) 219.79
icmp6 21298 ( 0.02%) 2919508 ( 0.01%) 137.08
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 9738 ( 0.01%) 6942027 ( 0.02%) 712.88
tcpdump file: 201105131400.dump.gz (1948.20 MB)