Traffic Trace Info
DumpFile: 201105151400.dump
FileSize: 2451.16MB
Id: 201105151400
StartTime: Sun May 15 14:00:00 2011
EndTime: Sun May 15 14:15:00 2011
TotalTime: 900.00 seconds
TotalCapSize: 1918.43MB CapLen: 96 bytes
# of packets: 34912199 (25385.15MB)
AvgRate: 236.58Mbps stddev:47.71M
IP flow (unique src/dst pair) Information
# of flows: 916496 (avg. 38.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 3.0% 2.2% 1.0% 0.9% 0.8% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 524230
Top 10 bandwidth usage (bytes/total in %):
36.1% 9.2% 5.7% 4.1% 3.3% 3.3% 3.3% 3.1% 2.4% 2.2%
# of IPv6 addresses: 4561
Top 10 bandwidth usage (bytes/total in %):
55.2% 38.7% 19.5% 8.5% 7.8% 5.8% 5.8% 5.5% 4.7% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105151400.pktlen.png)
detailed numbers
[ 32- 63]: 7333157
[ 64- 127]: 7027307
[ 128- 255]: 2209627
[ 256- 511]: 827503
[ 512- 1023]: 1032522
[ 1024- 2047]: 16482083
Protocol Breakdown
![[protocol breakdown chart]](201105151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34912199 (100.00%) 26618257268 (100.00%) 762.43
ip 34637431 ( 99.21%) 26421541673 ( 99.26%) 762.80
tcp 25838856 ( 74.01%) 22551062969 ( 84.72%) 872.76
http(s) 14637382 ( 41.93%) 20185619372 ( 75.83%) 1379.05
http(c) 5908301 ( 16.92%) 735741885 ( 2.76%) 124.53
squid 96576 ( 0.28%) 60456951 ( 0.23%) 626.00
smtp 100576 ( 0.29%) 48795864 ( 0.18%) 485.16
ftp 6168 ( 0.02%) 543521 ( 0.00%) 88.12
pop3 36630 ( 0.10%) 4572441 ( 0.02%) 124.83
imap 6733 ( 0.02%) 6075524 ( 0.02%) 902.35
telnet 341 ( 0.00%) 23901 ( 0.00%) 70.09
ssh 35263 ( 0.10%) 5897246 ( 0.02%) 167.24
dns 95205 ( 0.27%) 6002575 ( 0.02%) 63.05
bgp 560 ( 0.00%) 93722 ( 0.00%) 167.36
napster 514 ( 0.00%) 32727 ( 0.00%) 63.67
realaud 76 ( 0.00%) 4873 ( 0.00%) 64.12
rtsp 7183 ( 0.02%) 8683214 ( 0.03%) 1208.86
icecast 443 ( 0.00%) 58593 ( 0.00%) 132.26
hotline 12 ( 0.00%) 748 ( 0.00%) 62.33
other 4906893 ( 14.05%) 1488459812 ( 5.59%) 303.34
udp 5981177 ( 17.13%) 2875376048 ( 10.80%) 480.74
dns 521629 ( 1.49%) 114170278 ( 0.43%) 218.87
rip 10 ( 0.00%) 757 ( 0.00%) 75.70
realaud 1852 ( 0.01%) 111803 ( 0.00%) 60.37
halflif 81 ( 0.00%) 6146 ( 0.00%) 75.88
starcra 73 ( 0.00%) 7528 ( 0.00%) 103.12
everque 303 ( 0.00%) 49488 ( 0.00%) 163.33
unreal 24 ( 0.00%) 3240 ( 0.00%) 135.00
quake 1942 ( 0.01%) 152642 ( 0.00%) 78.60
cuseeme 6 ( 0.00%) 1089 ( 0.00%) 181.50
other 5455134 ( 15.63%) 2760805716 ( 10.37%) 506.09
icmp 593771 ( 1.70%) 77956600 ( 0.29%) 131.29
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 429 ( 0.00%) 118270 ( 0.00%) 275.69
ip6 2208431 ( 6.33%) 912224561 ( 3.43%) 413.06
other 14582 ( 0.04%) 4783955 ( 0.02%) 328.07
frag 641 ( 0.00%) 637545 ( 0.00%) 994.61
ip6 274768 ( 0.79%) 196715595 ( 0.74%) 715.93
tcp6 137787 ( 0.39%) 139489866 ( 0.52%) 1012.36
http(s) 2709 ( 0.01%) 3147828 ( 0.01%) 1161.99
http(c) 29945 ( 0.09%) 2466503 ( 0.01%) 82.37
smtp 562 ( 0.00%) 104064 ( 0.00%) 185.17
ftp 37 ( 0.00%) 3502 ( 0.00%) 94.65
dns 262 ( 0.00%) 60293 ( 0.00%) 230.13
bgp 98 ( 0.00%) 27494 ( 0.00%) 280.55
hotline 12 ( 0.00%) 1684 ( 0.00%) 140.33
other 104162 ( 0.30%) 133678498 ( 0.50%) 1283.37
udp6 54168 ( 0.16%) 13704863 ( 0.05%) 253.01
dns 38020 ( 0.11%) 10924760 ( 0.04%) 287.34
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 16146 ( 0.05%) 2779878 ( 0.01%) 172.17
icmp6 26011 ( 0.07%) 3616713 ( 0.01%) 139.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 56772 ( 0.16%) 39900073 ( 0.15%) 702.81
tcpdump file: 201105151400.dump.gz (827.21 MB)