Traffic Trace Info
DumpFile: 201105161400.dump
FileSize: 3424.48MB
Id: 201105161400
StartTime: Mon May 16 14:00:01 2011
EndTime: Mon May 16 14:15:01 2011
TotalTime: 900.33 seconds
TotalCapSize: -1412.36MB CapLen: 96 bytes
# of packets: 48551106 (32685.70MB)
AvgRate: 304.49Mbps stddev:47.23M
IP flow (unique src/dst pair) Information
# of flows: 984465 (avg. 49.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 3.9% 3.9% 2.2% 1.7% 1.5% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 514355
Top 10 bandwidth usage (bytes/total in %):
14.9% 10.3% 7.0% 6.9% 6.1% 5.0% 4.0% 4.0% 3.6% 2.7%
# of IPv6 addresses: 4494
Top 10 bandwidth usage (bytes/total in %):
25.7% 25.7% 16.8% 10.2% 10.2% 9.2% 7.6% 6.0% 5.6% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105161400.pktlen.png)
detailed numbers
[ 32- 63]: 12175914
[ 64- 127]: 10664443
[ 128- 255]: 2149665
[ 256- 511]: 1000451
[ 512- 1023]: 1302100
[ 1024- 2047]: 21258533
Protocol Breakdown
![[protocol breakdown chart]](201105161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48551106 (100.00%) 34273439255 (100.00%) 705.92
ip 48377680 ( 99.64%) 34195543498 ( 99.77%) 706.85
tcp 40135960 ( 82.67%) 30159291945 ( 88.00%) 751.43
http(s) 15177130 ( 31.26%) 20236416867 ( 59.04%) 1333.35
http(c) 13038018 ( 26.85%) 2712092505 ( 7.91%) 208.01
squid 77851 ( 0.16%) 39117196 ( 0.11%) 502.46
smtp 197239 ( 0.41%) 115927002 ( 0.34%) 587.75
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 6989 ( 0.01%) 639090 ( 0.00%) 91.44
pop3 51791 ( 0.11%) 7368824 ( 0.02%) 142.28
imap 44926 ( 0.09%) 36057371 ( 0.11%) 802.59
telnet 800 ( 0.00%) 60080 ( 0.00%) 75.10
ssh 84810 ( 0.17%) 44948227 ( 0.13%) 529.99
dns 16253 ( 0.03%) 1673990 ( 0.00%) 103.00
bgp 542 ( 0.00%) 86351 ( 0.00%) 159.32
napster 1666 ( 0.00%) 108412 ( 0.00%) 65.07
realaud 523 ( 0.00%) 50270 ( 0.00%) 96.12
rtsp 12666 ( 0.03%) 12757854 ( 0.04%) 1007.25
icecast 223041 ( 0.46%) 228736489 ( 0.67%) 1025.54
hotline 31 ( 0.00%) 3169 ( 0.00%) 102.23
other 11201679 ( 23.07%) 6723247948 ( 19.62%) 600.20
udp 6155938 ( 12.68%) 3364802519 ( 9.82%) 546.59
dns 825878 ( 1.70%) 177132755 ( 0.52%) 214.48
realaud 32 ( 0.00%) 2899 ( 0.00%) 90.59
halflif 53 ( 0.00%) 3857 ( 0.00%) 72.77
starcra 57 ( 0.00%) 9345 ( 0.00%) 163.95
everque 10713 ( 0.02%) 1291782 ( 0.00%) 120.58
unreal 7 ( 0.00%) 967 ( 0.00%) 138.14
quake 1297 ( 0.00%) 102672 ( 0.00%) 79.16
cuseeme 7 ( 0.00%) 1829 ( 0.00%) 261.29
other 5310180 ( 10.94%) 3185590488 ( 9.29%) 599.90
icmp 481447 ( 0.99%) 83928242 ( 0.24%) 174.32
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1122 ( 0.00%) 471064 ( 0.00%) 419.84
ip6 1579864 ( 3.25%) 582443718 ( 1.70%) 368.67
other 23164 ( 0.05%) 4586740 ( 0.01%) 198.01
frag 36386 ( 0.07%) 27349387 ( 0.08%) 751.65
ip6 173426 ( 0.36%) 77895757 ( 0.23%) 449.16
tcp6 91329 ( 0.19%) 56977786 ( 0.17%) 623.87
http(s) 2848 ( 0.01%) 2584514 ( 0.01%) 907.48
http(c) 29132 ( 0.06%) 2458483 ( 0.01%) 84.39
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 687 ( 0.00%) 125316 ( 0.00%) 182.41
ftp 34 ( 0.00%) 3282 ( 0.00%) 96.53
ssh 492 ( 0.00%) 86276 ( 0.00%) 175.36
dns 296 ( 0.00%) 68818 ( 0.00%) 232.49
bgp 92 ( 0.00%) 28089 ( 0.00%) 305.32
other 57739 ( 0.12%) 51622246 ( 0.15%) 894.06
udp6 53451 ( 0.11%) 16105454 ( 0.05%) 301.31
dns 50422 ( 0.10%) 15602077 ( 0.05%) 309.43
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 2 ( 0.00%) 225 ( 0.00%) 112.50
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 3024 ( 0.01%) 502835 ( 0.00%) 166.28
icmp6 27577 ( 0.06%) 3983888 ( 0.01%) 144.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1039 ( 0.00%) 824549 ( 0.00%) 793.60
tcpdump file: 201105161400.dump.gz (1160.67 MB)