Traffic Trace Info
DumpFile: 201105191400.dump
FileSize: 3741.42MB
Id: 201105191400
StartTime: Thu May 19 14:00:00 2011
EndTime: Thu May 19 14:15:01 2011
TotalTime: 900.49 seconds
TotalCapSize: -1134.27MB CapLen: 96 bytes
# of packets: 51096945 (37044.97MB)
AvgRate: 345.11Mbps stddev:41.25M
IP flow (unique src/dst pair) Information
# of flows: 889191 (avg. 57.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.4% 2.0% 1.8% 1.4% 1.4% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 454782
Top 10 bandwidth usage (bytes/total in %):
27.4% 6.7% 5.4% 4.7% 4.2% 3.7% 3.2% 2.5% 2.5% 2.1%
# of IPv6 addresses: 4008
Top 10 bandwidth usage (bytes/total in %):
76.9% 76.9% 4.1% 3.4% 3.1% 1.7% 1.4% 1.4% 0.8% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105191400.pktlen.png)
detailed numbers
[ 32- 63]: 8444799
[ 64- 127]: 13918488
[ 128- 255]: 2208891
[ 256- 511]: 1256808
[ 512- 1023]: 1125643
[ 1024- 2047]: 24142316
Protocol Breakdown
![[protocol breakdown chart]](201105191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51096945 (100.00%) 38844467754 (100.00%) 760.21
ip 50872505 ( 99.56%) 38711648677 ( 99.66%) 760.95
tcp 43631692 ( 85.39%) 35238266673 ( 90.72%) 807.63
http(s) 14376366 ( 28.14%) 19355507435 ( 49.83%) 1346.34
http(c) 10658008 ( 20.86%) 2449515680 ( 6.31%) 229.83
squid 200060 ( 0.39%) 112287977 ( 0.29%) 561.27
smtp 195566 ( 0.38%) 110270744 ( 0.28%) 563.85
nntp 41 ( 0.00%) 2502 ( 0.00%) 61.02
ftp 491915 ( 0.96%) 41794615 ( 0.11%) 84.96
pop3 55740 ( 0.11%) 7993053 ( 0.02%) 143.40
imap 18436 ( 0.04%) 6024567 ( 0.02%) 326.78
telnet 572 ( 0.00%) 43048 ( 0.00%) 75.26
ssh 65780 ( 0.13%) 14548385 ( 0.04%) 221.17
dns 17702 ( 0.03%) 1770095 ( 0.00%) 99.99
bgp 577 ( 0.00%) 111804 ( 0.00%) 193.77
napster 266 ( 0.00%) 20478 ( 0.00%) 76.98
realaud 38 ( 0.00%) 2798 ( 0.00%) 73.63
rtsp 15280 ( 0.03%) 15523333 ( 0.04%) 1015.92
icecast 118392 ( 0.23%) 115807090 ( 0.30%) 978.17
hotline 54 ( 0.00%) 7905 ( 0.00%) 146.39
other 17416899 ( 34.09%) 13007035164 ( 33.48%) 746.81
udp 5347000 ( 10.46%) 2894641723 ( 7.45%) 541.36
dns 833179 ( 1.63%) 180047727 ( 0.46%) 216.10
rip 16 ( 0.00%) 1152 ( 0.00%) 72.00
realaud 26 ( 0.00%) 4427 ( 0.00%) 170.27
halflif 592 ( 0.00%) 37284 ( 0.00%) 62.98
starcra 20 ( 0.00%) 1752 ( 0.00%) 87.60
everque 801 ( 0.00%) 254067 ( 0.00%) 317.19
unreal 16 ( 0.00%) 2153 ( 0.00%) 134.56
quake 1326 ( 0.00%) 103647 ( 0.00%) 78.17
cuseeme 7 ( 0.00%) 786 ( 0.00%) 112.29
other 4510781 ( 8.83%) 2714070595 ( 6.99%) 601.69
icmp 514974 ( 1.01%) 81816322 ( 0.21%) 158.87
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 164 ( 0.00%) 29864 ( 0.00%) 182.10
ip6 1362465 ( 2.67%) 493283513 ( 1.27%) 362.05
other 16025 ( 0.03%) 3591312 ( 0.01%) 224.11
frag 420354 ( 0.82%) 318397655 ( 0.82%) 757.45
ip6 224438 ( 0.44%) 132818957 ( 0.34%) 591.78
tcp6 140289 ( 0.27%) 112066912 ( 0.29%) 798.83
http(s) 73832 ( 0.14%) 105942004 ( 0.27%) 1434.91
http(c) 61759 ( 0.12%) 5096252 ( 0.01%) 82.52
smtp 469 ( 0.00%) 82859 ( 0.00%) 176.67
ftp 41 ( 0.00%) 3888 ( 0.00%) 94.83
dns 192 ( 0.00%) 50935 ( 0.00%) 265.29
bgp 89 ( 0.00%) 14457 ( 0.00%) 162.44
other 3907 ( 0.01%) 876517 ( 0.00%) 224.35
udp6 54078 ( 0.11%) 16081199 ( 0.04%) 297.37
dns 52691 ( 0.10%) 15929916 ( 0.04%) 302.33
halflif 1 ( 0.00%) 120 ( 0.00%) 120.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1384 ( 0.00%) 150949 ( 0.00%) 109.07
icmp6 29749 ( 0.06%) 4392900 ( 0.01%) 147.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 292 ( 0.00%) 273866 ( 0.00%) 937.90
tcpdump file: 201105191400.dump.gz (1242.72 MB)