Traffic Trace Info
DumpFile: 201105221400.dump
FileSize: 8249.98MB
Id: 201105221400
StartTime: Sun May 22 14:00:01 2011
EndTime: Sun May 22 14:15:01 2011
TotalTime: 900.27 seconds
TotalCapSize: -2021.91MB CapLen: 96 bytes
# of packets: 136307427 (30119.87MB)
AvgRate: 280.60Mbps stddev:42.52M
IP flow (unique src/dst pair) Information
# of flows: 942321 (avg. 144.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.3% 4.2% 4.0% 3.1% 2.3% 2.2% 1.4% 1.2% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 514443
Top 10 bandwidth usage (bytes/total in %):
19.3% 19.3% 12.8% 9.0% 4.2% 4.2% 4.2% 3.7% 3.5% 3.1%
# of IPv6 addresses: 3380
Top 10 bandwidth usage (bytes/total in %):
47.9% 47.8% 17.7% 8.4% 8.4% 4.6% 3.9% 2.5% 2.2% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105221400.pktlen.png)
detailed numbers
[ 32- 63]: 109128866
[ 64- 127]: 7804116
[ 128- 255]: 1955604
[ 256- 511]: 847349
[ 512- 1023]: 825303
[ 1024- 2047]: 15746189
Protocol Breakdown
![[protocol breakdown chart]](201105221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 136307427 (100.00%) 31582977752 (100.00%) 231.70
ip 136174974 ( 99.90%) 31511200373 ( 99.77%) 231.40
tcp 28011058 ( 20.55%) 22340507194 ( 70.74%) 797.56
http(s) 12509472 ( 9.18%) 16631830823 ( 52.66%) 1329.54
http(c) 6183905 ( 4.54%) 1294114024 ( 4.10%) 209.27
squid 192926 ( 0.14%) 143409135 ( 0.45%) 743.34
smtp 95786 ( 0.07%) 36092581 ( 0.11%) 376.80
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 10840 ( 0.01%) 1022735 ( 0.00%) 94.35
pop3 5499 ( 0.00%) 2123771 ( 0.01%) 386.21
imap 2221 ( 0.00%) 783278 ( 0.00%) 352.67
telnet 336 ( 0.00%) 35833 ( 0.00%) 106.65
ssh 44208 ( 0.03%) 13667660 ( 0.04%) 309.17
dns 11267 ( 0.01%) 964441 ( 0.00%) 85.60
bgp 527 ( 0.00%) 77481 ( 0.00%) 147.02
napster 200 ( 0.00%) 16589 ( 0.00%) 82.94
realaud 200 ( 0.00%) 14897 ( 0.00%) 74.48
rtsp 39940 ( 0.03%) 41691505 ( 0.13%) 1043.85
icecast 2623 ( 0.00%) 201345 ( 0.00%) 76.76
hotline 66 ( 0.00%) 6596 ( 0.00%) 99.94
other 8911040 ( 6.54%) 4174454380 ( 13.22%) 468.46
udp 106268503 ( 77.96%) 8507652242 ( 26.94%) 80.06
dns 13218937 ( 9.70%) 870065412 ( 2.75%) 65.82
realaud 26 ( 0.00%) 7063 ( 0.00%) 271.65
halflif 110 ( 0.00%) 15513 ( 0.00%) 141.03
starcra 49 ( 0.00%) 7304 ( 0.00%) 149.06
everque 464 ( 0.00%) 113640 ( 0.00%) 244.91
unreal 22 ( 0.00%) 2725 ( 0.00%) 123.86
quake 1457 ( 0.00%) 114987 ( 0.00%) 78.92
cuseeme 4 ( 0.00%) 322 ( 0.00%) 80.50
other 93040016 ( 68.26%) 7636809838 ( 24.18%) 82.08
icmp 395176 ( 0.29%) 60927627 ( 0.19%) 154.18
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 334 ( 0.00%) 80996 ( 0.00%) 242.50
ip6 1483993 ( 1.09%) 597664592 ( 1.89%) 402.74
other 15725 ( 0.01%) 4348452 ( 0.01%) 276.53
frag 41366 ( 0.03%) 32227269 ( 0.10%) 779.08
ip6 132453 ( 0.10%) 71777379 ( 0.23%) 541.91
tcp6 68989 ( 0.05%) 52277484 ( 0.17%) 757.77
http(s) 1658 ( 0.00%) 1529551 ( 0.00%) 922.53
http(c) 22373 ( 0.02%) 2227162 ( 0.01%) 99.55
smtp 437 ( 0.00%) 61686 ( 0.00%) 141.16
ftp 60 ( 0.00%) 5595 ( 0.00%) 93.25
dns 194 ( 0.00%) 45833 ( 0.00%) 236.25
bgp 90 ( 0.00%) 14809 ( 0.00%) 164.54
other 44177 ( 0.03%) 48392848 ( 0.15%) 1095.43
udp6 36637 ( 0.03%) 10807720 ( 0.03%) 294.99
dns 35378 ( 0.03%) 10601228 ( 0.03%) 299.66
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1258 ( 0.00%) 206387 ( 0.00%) 164.06
icmp6 18160 ( 0.01%) 2591721 ( 0.01%) 142.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8637 ( 0.01%) 6096374 ( 0.02%) 705.84
tcpdump file: 201105221400.dump.gz (1932.08 MB)