Traffic Trace Info
DumpFile: 201105201400.dump
FileSize: 8375.76MB
Id: 201105201400
StartTime: Fri May 20 14:00:01 2011
EndTime: Fri May 20 14:15:01 2011
TotalTime: 900.19 seconds
TotalCapSize: -1903.40MB CapLen: 96 bytes
# of packets: 136782344 (34953.61MB)
AvgRate: 325.72Mbps stddev:40.53M
IP flow (unique src/dst pair) Information
# of flows: 1174829 (avg. 116.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 4.3% 2.9% 2.2% 2.2% 1.4% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 554825
Top 10 bandwidth usage (bytes/total in %):
15.8% 10.9% 8.4% 7.4% 5.8% 4.4% 4.4% 4.1% 3.3% 2.9%
# of IPv6 addresses: 4002
Top 10 bandwidth usage (bytes/total in %):
85.4% 82.5% 5.2% 5.2% 3.0% 2.8% 2.1% 1.3% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105201400.pktlen.png)
detailed numbers
[ 32- 63]: 102970561
[ 64- 127]: 10274152
[ 128- 255]: 2032497
[ 256- 511]: 1126684
[ 512- 1023]: 1317135
[ 1024- 2047]: 19061315
Protocol Breakdown
![[protocol breakdown chart]](201105201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 136782344 (100.00%) 36651515528 (100.00%) 267.96
ip 136251450 ( 99.61%) 36028526840 ( 98.30%) 264.43
tcp 33903379 ( 24.79%) 27214681531 ( 74.25%) 802.71
http(s) 16983722 ( 12.42%) 22724466391 ( 62.00%) 1338.01
http(c) 10946286 ( 8.00%) 2246950722 ( 6.13%) 205.27
squid 232929 ( 0.17%) 179500915 ( 0.49%) 770.63
smtp 208088 ( 0.15%) 109516042 ( 0.30%) 526.30
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 16883 ( 0.01%) 1468565 ( 0.00%) 86.98
pop3 25380 ( 0.02%) 10341468 ( 0.03%) 407.47
imap 15013 ( 0.01%) 14342649 ( 0.04%) 955.35
telnet 410 ( 0.00%) 37534 ( 0.00%) 91.55
ssh 494897 ( 0.36%) 38224016 ( 0.10%) 77.24
dns 25226 ( 0.02%) 2460097 ( 0.01%) 97.52
bgp 563 ( 0.00%) 108351 ( 0.00%) 192.45
napster 50 ( 0.00%) 4074 ( 0.00%) 81.48
realaud 170 ( 0.00%) 14570 ( 0.00%) 85.71
rtsp 48128 ( 0.04%) 51836302 ( 0.14%) 1077.05
icecast 9373 ( 0.01%) 592458 ( 0.00%) 63.21
hotline 40 ( 0.00%) 2907 ( 0.00%) 72.67
other 4896219 ( 3.58%) 1834814350 ( 5.01%) 374.74
udp 100076248 ( 73.16%) 8020684867 ( 21.88%) 80.15
dns 8182525 ( 5.98%) 613304070 ( 1.67%) 74.95
realaud 236 ( 0.00%) 81883 ( 0.00%) 346.96
halflif 78 ( 0.00%) 5897 ( 0.00%) 75.60
starcra 16 ( 0.00%) 1859 ( 0.00%) 116.19
everque 11423 ( 0.01%) 10857659 ( 0.03%) 950.51
unreal 18 ( 0.00%) 2949 ( 0.00%) 163.83
quake 1973 ( 0.00%) 156851 ( 0.00%) 79.50
cuseeme 12 ( 0.00%) 1280 ( 0.00%) 106.67
other 91879640 ( 67.17%) 7396168915 ( 20.18%) 80.50
icmp 522338 ( 0.38%) 79499404 ( 0.22%) 152.20
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 269 ( 0.00%) 42878 ( 0.00%) 159.40
ip6 1730777 ( 1.27%) 709799505 ( 1.94%) 410.10
other 18256 ( 0.01%) 3799593 ( 0.01%) 208.13
frag 1234 ( 0.00%) 1043378 ( 0.00%) 845.53
ip6 530892 ( 0.39%) 622988568 ( 1.70%) 1173.48
tcp6 450710 ( 0.33%) 604001384 ( 1.65%) 1340.11
http(s) 368622 ( 0.27%) 552870885 ( 1.51%) 1499.83
http(c) 36716 ( 0.03%) 3451069 ( 0.01%) 93.99
squid 15 ( 0.00%) 1270 ( 0.00%) 84.67
smtp 243 ( 0.00%) 56095 ( 0.00%) 230.84
ftp 17 ( 0.00%) 1643 ( 0.00%) 96.65
dns 288 ( 0.00%) 78268 ( 0.00%) 271.76
bgp 95 ( 0.00%) 20379 ( 0.00%) 214.52
other 44714 ( 0.03%) 47521775 ( 0.13%) 1062.79
udp6 48508 ( 0.04%) 15013296 ( 0.04%) 309.50
dns 47303 ( 0.03%) 14858037 ( 0.04%) 314.10
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1204 ( 0.00%) 155152 ( 0.00%) 128.86
icmp6 31388 ( 0.02%) 3727576 ( 0.01%) 118.76
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 255 ( 0.00%) 242096 ( 0.00%) 949.40
tcpdump file: 201105201400.dump.gz (2041.53 MB)