Traffic Trace Info
DumpFile: 201105211400.dump
FileSize: 7867.84MB
Id: 201105211400
StartTime: Sat May 21 14:00:01 2011
EndTime: Sat May 21 14:15:01 2011
TotalTime: 899.61 seconds
TotalCapSize: 1771.19MB CapLen: 96 bytes
# of packets: 131113823 (30600.44MB)
AvgRate: 285.32Mbps stddev:46.85M
IP flow (unique src/dst pair) Information
# of flows: 979044 (avg. 133.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.6% 3.0% 2.4% 2.4% 2.2% 1.8% 1.8% 1.6% 1.3%
IP address Information
# of IPv4 addresses: 535854
Top 10 bandwidth usage (bytes/total in %):
17.9% 13.9% 5.9% 4.8% 4.7% 4.2% 4.0% 3.6% 3.0% 2.5%
# of IPv6 addresses: 3446
Top 10 bandwidth usage (bytes/total in %):
41.5% 30.6% 10.5% 10.2% 9.6% 8.2% 7.4% 7.3% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105211400.pktlen.png)
detailed numbers
[ 32- 63]: 102882458
[ 64- 127]: 8431124
[ 128- 255]: 1683270
[ 256- 511]: 878194
[ 512- 1023]: 935906
[ 1024- 2047]: 16302871
Protocol Breakdown
![[protocol breakdown chart]](201105211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 131113823 (100.00%) 32086892182 (100.00%) 244.73
ip 130865056 ( 99.81%) 31988058426 ( 99.69%) 244.44
tcp 28046532 ( 21.39%) 23201149022 ( 72.31%) 827.24
http(s) 14168197 ( 10.81%) 19431723994 ( 60.56%) 1371.50
http(c) 7169281 ( 5.47%) 878094280 ( 2.74%) 122.48
squid 146659 ( 0.11%) 67180190 ( 0.21%) 458.07
smtp 97841 ( 0.07%) 27813690 ( 0.09%) 284.27
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 13970 ( 0.01%) 1237297 ( 0.00%) 88.57
pop3 9294 ( 0.01%) 3094337 ( 0.01%) 332.94
imap 617926 ( 0.47%) 595876517 ( 1.86%) 964.32
telnet 255 ( 0.00%) 19245 ( 0.00%) 75.47
ssh 19390 ( 0.01%) 3986194 ( 0.01%) 205.58
dns 15952 ( 0.01%) 1478504 ( 0.00%) 92.68
bgp 576 ( 0.00%) 113663 ( 0.00%) 197.33
napster 62 ( 0.00%) 3894 ( 0.00%) 62.81
realaud 38 ( 0.00%) 4008 ( 0.00%) 105.47
rtsp 12925 ( 0.01%) 14636211 ( 0.05%) 1132.40
icecast 11222 ( 0.01%) 6217675 ( 0.02%) 554.06
hotline 16 ( 0.00%) 1597 ( 0.00%) 99.81
other 5762927 ( 4.40%) 2169667666 ( 6.76%) 376.49
udp 100625404 ( 76.75%) 8121137936 ( 25.31%) 80.71
dns 3791233 ( 2.89%) 323282618 ( 1.01%) 85.27
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 909 ( 0.00%) 56499 ( 0.00%) 62.16
halflif 214 ( 0.00%) 13922 ( 0.00%) 65.06
starcra 60 ( 0.00%) 6735 ( 0.00%) 112.25
everque 299 ( 0.00%) 54723 ( 0.00%) 183.02
unreal 42 ( 0.00%) 7025 ( 0.00%) 167.26
quake 1454 ( 0.00%) 114463 ( 0.00%) 78.72
cuseeme 9 ( 0.00%) 751 ( 0.00%) 83.44
other 96830987 ( 73.85%) 7797499509 ( 24.30%) 80.53
icmp 464702 ( 0.35%) 76334633 ( 0.24%) 164.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 336 ( 0.00%) 81648 ( 0.00%) 243.00
ip6 1710763 ( 1.30%) 585689654 ( 1.83%) 342.36
other 17134 ( 0.01%) 3646263 ( 0.01%) 212.81
frag 919 ( 0.00%) 854850 ( 0.00%) 930.20
ip6 248767 ( 0.19%) 98833756 ( 0.31%) 397.29
tcp6 189158 ( 0.14%) 82509447 ( 0.26%) 436.19
http(s) 8279 ( 0.01%) 10949642 ( 0.03%) 1322.58
http(c) 129384 ( 0.10%) 11331017 ( 0.04%) 87.58
smtp 284 ( 0.00%) 42006 ( 0.00%) 147.91
ftp 34 ( 0.00%) 3280 ( 0.00%) 96.47
dns 171 ( 0.00%) 45271 ( 0.00%) 264.74
bgp 89 ( 0.00%) 17211 ( 0.00%) 193.38
other 50917 ( 0.04%) 60121020 ( 0.19%) 1180.77
udp6 37136 ( 0.03%) 11090740 ( 0.03%) 298.65
dns 35531 ( 0.03%) 10893431 ( 0.03%) 306.59
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1604 ( 0.00%) 197199 ( 0.00%) 122.94
icmp6 18881 ( 0.01%) 2686154 ( 0.01%) 142.27
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3561 ( 0.00%) 2543199 ( 0.01%) 714.18
tcpdump file: 201105211400.dump.gz (1884.64 MB)