Traffic Trace Info
DumpFile: 201105141400.dump
FileSize: 8080.59MB
Id: 201105141400
StartTime: Sat May 14 14:00:01 2011
EndTime: Sat May 14 14:13:11 2011
TotalTime: 789.87 seconds
TotalCapSize: 1927.30MB CapLen: 96 bytes
# of packets: 134825501 (33417.81MB)
AvgRate: 355.74Mbps stddev:59.81M
IP flow (unique src/dst pair) Information
# of flows: 903475 (avg. 149.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.7% 3.2% 2.4% 2.1% 2.1% 2.0% 1.7% 1.7% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 519531
Top 10 bandwidth usage (bytes/total in %):
20.9% 16.8% 16.8% 10.2% 7.0% 3.8% 3.3% 3.1% 3.0% 2.9%
# of IPv6 addresses: 4075
Top 10 bandwidth usage (bytes/total in %):
56.2% 56.2% 32.9% 17.8% 15.2% 2.3% 1.7% 1.6% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105141400.pktlen.png)
detailed numbers
[ 32- 63]: 104529285
[ 64- 127]: 8424715
[ 128- 255]: 1922127
[ 256- 511]: 778348
[ 512- 1023]: 1059659
[ 1024- 2047]: 18111367
Protocol Breakdown
![[protocol breakdown chart]](201105141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 134825501 (100.00%) 35041110514 (100.00%) 259.90
ip 134485578 ( 99.75%) 34686343146 ( 98.99%) 257.92
tcp 30915074 ( 22.93%) 26412146783 ( 75.37%) 854.35
http(s) 16208454 ( 12.02%) 22377572036 ( 63.86%) 1380.61
http(c) 7271589 ( 5.39%) 925424730 ( 2.64%) 127.27
squid 47653 ( 0.04%) 34060645 ( 0.10%) 714.76
smtp 108454 ( 0.08%) 51240216 ( 0.15%) 472.46
nntp 6 ( 0.00%) 364 ( 0.00%) 60.67
ftp 5784 ( 0.00%) 589414 ( 0.00%) 101.90
pop3 18556 ( 0.01%) 3989660 ( 0.01%) 215.01
imap 5917 ( 0.00%) 3553961 ( 0.01%) 600.64
telnet 8202 ( 0.01%) 602332 ( 0.00%) 73.44
ssh 1315905 ( 0.98%) 206059082 ( 0.59%) 156.59
dns 9994 ( 0.01%) 974990 ( 0.00%) 97.56
bgp 503 ( 0.00%) 102322 ( 0.00%) 203.42
napster 131 ( 0.00%) 8180 ( 0.00%) 62.44
realaud 4 ( 0.00%) 246 ( 0.00%) 61.50
rtsp 5476 ( 0.00%) 6682792 ( 0.02%) 1220.38
icecast 5648 ( 0.00%) 378379 ( 0.00%) 66.99
hotline 44 ( 0.00%) 3430 ( 0.00%) 77.95
other 5902754 ( 4.38%) 2800904004 ( 7.99%) 474.51
udp 101476624 ( 75.27%) 7740796843 ( 22.09%) 76.28
dns 511509 ( 0.38%) 109200051 ( 0.31%) 213.49
realaud 806 ( 0.00%) 50042 ( 0.00%) 62.09
halflif 54 ( 0.00%) 4688 ( 0.00%) 86.81
starcra 72 ( 0.00%) 9460 ( 0.00%) 131.39
everque 341 ( 0.00%) 72989 ( 0.00%) 214.04
unreal 45 ( 0.00%) 9661 ( 0.00%) 214.69
quake 1237 ( 0.00%) 95488 ( 0.00%) 77.19
cuseeme 10 ( 0.00%) 1855 ( 0.00%) 185.50
other 100962341 ( 74.88%) 7631273539 ( 21.78%) 75.59
icmp 427897 ( 0.32%) 68930636 ( 0.20%) 161.09
ipip 161 ( 0.00%) 16762 ( 0.00%) 104.11
ipsec 535 ( 0.00%) 159534 ( 0.00%) 298.19
ip6 1649571 ( 1.22%) 458842991 ( 1.31%) 278.16
other 15716 ( 0.01%) 5449597 ( 0.02%) 346.75
frag 130499 ( 0.10%) 98893383 ( 0.28%) 757.81
ip6 339923 ( 0.25%) 354767368 ( 1.01%) 1043.67
tcp6 259791 ( 0.19%) 329963925 ( 0.94%) 1270.11
http(s) 136162 ( 0.10%) 205330492 ( 0.59%) 1507.99
http(c) 20669 ( 0.02%) 1831072 ( 0.01%) 88.59
squid 6788 ( 0.01%) 660568 ( 0.00%) 97.31
smtp 606 ( 0.00%) 81364 ( 0.00%) 134.26
ssh 324 ( 0.00%) 58888 ( 0.00%) 181.75
dns 200 ( 0.00%) 45799 ( 0.00%) 229.00
bgp 82 ( 0.00%) 24730 ( 0.00%) 301.59
icecast 8 ( 0.00%) 676 ( 0.00%) 84.50
other 94952 ( 0.07%) 121930336 ( 0.35%) 1284.13
udp6 40488 ( 0.03%) 11877251 ( 0.03%) 293.35
dns 33530 ( 0.02%) 10526579 ( 0.03%) 313.95
realaud 1 ( 0.00%) 116 ( 0.00%) 116.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
other 6956 ( 0.01%) 1350448 ( 0.00%) 194.14
icmp6 26448 ( 0.02%) 3635787 ( 0.01%) 137.47
pim6 26 ( 0.00%) 3536 ( 0.00%) 136.00
other6 13170 ( 0.01%) 9286869 ( 0.03%) 705.15
tcpdump file: 201105141400.dump.gz (1928.50 MB)