Traffic Trace Info
DumpFile: 201105171400.dump
FileSize: 3817.43MB
Id: 201105171400
StartTime: Tue May 17 14:00:00 2011
EndTime: Tue May 17 14:15:01 2011
TotalTime: 900.27 seconds
TotalCapSize: -1077.93MB CapLen: 96 bytes
# of packets: 52385481 (33506.53MB)
AvgRate: 312.19Mbps stddev:44.84M
IP flow (unique src/dst pair) Information
# of flows: 1072017 (avg. 48.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.6% 1.5% 1.5% 1.4% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 580631
Top 10 bandwidth usage (bytes/total in %):
22.1% 8.9% 6.0% 5.5% 4.8% 3.6% 2.1% 1.7% 1.6% 1.6%
# of IPv6 addresses: 3677
Top 10 bandwidth usage (bytes/total in %):
47.7% 47.7% 28.1% 28.1% 7.8% 7.8% 2.4% 2.1% 2.1% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105171400.pktlen.png)
detailed numbers
[ 32- 63]: 10593488
[ 64- 127]: 15376526
[ 128- 255]: 2533705
[ 256- 511]: 1147002
[ 512- 1023]: 1263968
[ 1024- 2047]: 21470792
Protocol Breakdown
![[protocol breakdown chart]](201105171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52385481 (100.00%) 35134147397 (100.00%) 670.68
ip 52156685 ( 99.56%) 34948792732 ( 99.47%) 670.07
tcp 44425420 ( 84.80%) 31428834251 ( 89.45%) 707.45
http(s) 12895976 ( 24.62%) 17443196484 ( 49.65%) 1352.61
http(c) 13463420 ( 25.70%) 2782679063 ( 7.92%) 206.68
squid 386364 ( 0.74%) 160103953 ( 0.46%) 414.39
smtp 263055 ( 0.50%) 199117880 ( 0.57%) 756.94
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 248658 ( 0.47%) 20727229 ( 0.06%) 83.36
pop3 58779 ( 0.11%) 17959066 ( 0.05%) 305.54
imap 7518 ( 0.01%) 4786368 ( 0.01%) 636.65
telnet 1346 ( 0.00%) 98411 ( 0.00%) 73.11
ssh 870624 ( 1.66%) 133485911 ( 0.38%) 153.32
dns 16200 ( 0.03%) 1715341 ( 0.00%) 105.89
bgp 549 ( 0.00%) 88876 ( 0.00%) 161.89
napster 143 ( 0.00%) 9509 ( 0.00%) 66.50
realaud 48 ( 0.00%) 4906 ( 0.00%) 102.21
rtsp 6436 ( 0.01%) 7732912 ( 0.02%) 1201.51
icecast 650 ( 0.00%) 58352 ( 0.00%) 89.77
hotline 5 ( 0.00%) 553 ( 0.00%) 110.60
other 16205641 ( 30.94%) 10657068943 ( 30.33%) 657.61
udp 5241572 ( 10.01%) 2574895530 ( 7.33%) 491.24
dns 853048 ( 1.63%) 182440708 ( 0.52%) 213.87
realaud 1825 ( 0.00%) 111357 ( 0.00%) 61.02
halflif 93 ( 0.00%) 9559 ( 0.00%) 102.78
starcra 44 ( 0.00%) 5208 ( 0.00%) 118.36
everque 488 ( 0.00%) 150713 ( 0.00%) 308.84
unreal 31 ( 0.00%) 5003 ( 0.00%) 161.39
quake 1306 ( 0.00%) 100385 ( 0.00%) 76.86
cuseeme 18 ( 0.00%) 3894 ( 0.00%) 216.33
other 4373408 ( 8.35%) 2391196736 ( 6.81%) 546.76
icmp 456216 ( 0.87%) 68426444 ( 0.19%) 149.99
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1429 ( 0.00%) 544150 ( 0.00%) 380.79
ip6 1917881 ( 3.66%) 828989645 ( 2.36%) 432.24
other 113982 ( 0.22%) 47083442 ( 0.13%) 413.08
frag 388342 ( 0.74%) 294225366 ( 0.84%) 757.64
ip6 228796 ( 0.44%) 185354665 ( 0.53%) 810.13
tcp6 128385 ( 0.25%) 163255240 ( 0.46%) 1271.61
http(s) 5166 ( 0.01%) 6370058 ( 0.02%) 1233.07
http(c) 8565 ( 0.02%) 908203 ( 0.00%) 106.04
smtp 143 ( 0.00%) 24021 ( 0.00%) 167.98
ftp 34 ( 0.00%) 3280 ( 0.00%) 96.47
ssh 902 ( 0.00%) 142963 ( 0.00%) 158.50
dns 223 ( 0.00%) 48923 ( 0.00%) 219.39
bgp 91 ( 0.00%) 25151 ( 0.00%) 276.38
other 113261 ( 0.22%) 155732641 ( 0.44%) 1374.99
udp6 67231 ( 0.13%) 16447546 ( 0.05%) 244.64
dns 46688 ( 0.09%) 14487946 ( 0.04%) 310.31
other 20543 ( 0.04%) 1959600 ( 0.01%) 95.39
icmp6 31249 ( 0.06%) 4217795 ( 0.01%) 134.97
ip4 61 ( 0.00%) 7803 ( 0.00%) 127.92
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1839 ( 0.00%) 1422065 ( 0.00%) 773.28
tcpdump file: 201105171400.dump.gz (1265.48 MB)