Traffic Trace Info
DumpFile: 201105181400.dump
FileSize: 7735.90MB
Id: 201105181400
StartTime: Wed May 18 14:00:01 2011
EndTime: Wed May 18 14:15:01 2011
TotalTime: 900.59 seconds
TotalCapSize: 1719.12MB CapLen: 96 bytes
# of packets: 125879061 (31819.86MB)
AvgRate: 325.15Mbps stddev:39.20M
IP flow (unique src/dst pair) Information
# of flows: 841521 (avg. 149.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.8% 3.2% 3.0% 2.4% 1.4% 1.4% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 428948
Top 10 bandwidth usage (bytes/total in %):
25.0% 15.3% 8.5% 5.1% 4.3% 3.9% 3.4% 3.4% 3.2% 3.0%
# of IPv6 addresses: 3352
Top 10 bandwidth usage (bytes/total in %):
36.6% 36.5% 14.1% 10.4% 10.3% 6.9% 6.9% 6.3% 4.9% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105181400.pktlen.png)
detailed numbers
[ 32- 63]: 92089667
[ 64- 127]: 12779248
[ 128- 255]: 1889163
[ 256- 511]: 841097
[ 512- 1023]: 905978
[ 1024- 2047]: 17373908
Protocol Breakdown
![[protocol breakdown chart]](201105181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 125879061 (100.00%) 33365536419 (100.00%) 265.06
ip 125757151 ( 99.90%) 33307212650 ( 99.83%) 264.85
tcp 35237979 ( 27.99%) 25980086206 ( 77.87%) 737.28
http(s) 10653070 ( 8.46%) 14142476308 ( 42.39%) 1327.55
http(c) 8502412 ( 6.75%) 1218506547 ( 3.65%) 143.31
squid 90401 ( 0.07%) 43925488 ( 0.13%) 485.90
smtp 218919 ( 0.17%) 155308803 ( 0.47%) 709.44
ftp 214560 ( 0.17%) 18070078 ( 0.05%) 84.22
pop3 29032 ( 0.02%) 7684887 ( 0.02%) 264.70
imap 163471 ( 0.13%) 12525929 ( 0.04%) 76.62
telnet 1471 ( 0.00%) 95890 ( 0.00%) 65.19
ssh 868064 ( 0.69%) 135526259 ( 0.41%) 156.12
dns 17822 ( 0.01%) 1779312 ( 0.01%) 99.84
bgp 505 ( 0.00%) 92771 ( 0.00%) 183.70
napster 331 ( 0.00%) 27246 ( 0.00%) 82.31
realaud 31 ( 0.00%) 3396 ( 0.00%) 109.55
rtsp 107394 ( 0.09%) 118954092 ( 0.36%) 1107.64
icecast 32719 ( 0.03%) 28000662 ( 0.08%) 855.79
hotline 27 ( 0.00%) 3066 ( 0.00%) 113.56
other 14337749 ( 11.39%) 10097105412 ( 30.26%) 704.23
udp 88919829 ( 70.64%) 6806707263 ( 20.40%) 76.55
dns 3008957 ( 2.39%) 313155903 ( 0.94%) 104.07
realaud 29 ( 0.00%) 4594 ( 0.00%) 158.41
halflif 47 ( 0.00%) 3236 ( 0.00%) 68.85
starcra 66 ( 0.00%) 11897 ( 0.00%) 180.26
everque 648 ( 0.00%) 227013 ( 0.00%) 350.33
unreal 33 ( 0.00%) 5469 ( 0.00%) 165.73
quake 1311 ( 0.00%) 103680 ( 0.00%) 79.08
cuseeme 2 ( 0.00%) 161 ( 0.00%) 80.50
other 85908471 ( 68.25%) 6493070868 ( 19.46%) 75.58
icmp 370229 ( 0.29%) 56965471 ( 0.17%) 153.87
ipip 168 ( 0.00%) 17496 ( 0.00%) 104.14
ipsec 1131 ( 0.00%) 448662 ( 0.00%) 396.69
ip6 1184653 ( 0.94%) 455098562 ( 1.36%) 384.16
other 43162 ( 0.03%) 7888990 ( 0.02%) 182.78
frag 246301 ( 0.20%) 186566079 ( 0.56%) 757.47
ip6 121910 ( 0.10%) 58323769 ( 0.17%) 478.42
tcp6 51601 ( 0.04%) 40129402 ( 0.12%) 777.69
http(s) 5874 ( 0.00%) 7313765 ( 0.02%) 1245.11
http(c) 13625 ( 0.01%) 1234740 ( 0.00%) 90.62
smtp 904 ( 0.00%) 250920 ( 0.00%) 277.57
ftp 34 ( 0.00%) 3282 ( 0.00%) 96.53
dns 170 ( 0.00%) 53316 ( 0.00%) 313.62
bgp 83 ( 0.00%) 15284 ( 0.00%) 184.14
other 30911 ( 0.02%) 31258095 ( 0.09%) 1011.23
udp6 48432 ( 0.04%) 14544727 ( 0.04%) 300.31
dns 47973 ( 0.04%) 14470268 ( 0.04%) 301.63
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 455 ( 0.00%) 74030 ( 0.00%) 162.70
icmp6 21523 ( 0.02%) 3332480 ( 0.01%) 154.83
pim6 28 ( 0.00%) 3808 ( 0.00%) 136.00
other6 326 ( 0.00%) 313352 ( 0.00%) 961.20
tcpdump file: 201105181400.dump.gz (1925.08 MB)