Traffic Trace Info
DumpFile: 201105231400.dump
FileSize: 6959.66MB
Id: 201105231400
StartTime: Mon May 23 14:00:01 2011
EndTime: Mon May 23 14:15:00 2011
TotalTime: 899.19 seconds
TotalCapSize: 1157.40MB CapLen: 96 bytes
# of packets: 111820824 (32252.03MB)
AvgRate: 300.91Mbps stddev:35.32M
IP flow (unique src/dst pair) Information
# of flows: 1089183 (avg. 102.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 3.1% 3.1% 3.0% 2.9% 2.3% 1.4% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 602727
Top 10 bandwidth usage (bytes/total in %):
11.8% 8.7% 7.9% 6.0% 6.0% 5.9% 3.1% 3.1% 3.0% 3.0%
# of IPv6 addresses: 4033
Top 10 bandwidth usage (bytes/total in %):
54.1% 50.6% 20.2% 20.1% 3.7% 3.2% 2.8% 2.8% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105231400.pktlen.png)
detailed numbers
[ 32- 63]: 74898129
[ 64- 127]: 14102653
[ 128- 255]: 2052978
[ 256- 511]: 1145914
[ 512- 1023]: 1537481
[ 1024- 2047]: 18083669
Protocol Breakdown
![[protocol breakdown chart]](201105231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 111820824 (100.00%) 33818703814 (100.00%) 302.44
ip 111040489 ( 99.30%) 33707746714 ( 99.67%) 303.56
tcp 34547750 ( 30.90%) 26411695684 ( 78.10%) 764.50
http(s) 13747842 ( 12.29%) 17339303855 ( 51.27%) 1261.24
http(c) 10702642 ( 9.57%) 2815053869 ( 8.32%) 263.02
squid 117619 ( 0.11%) 81985249 ( 0.24%) 697.04
smtp 176500 ( 0.16%) 89323089 ( 0.26%) 506.08
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 16306 ( 0.01%) 1400034 ( 0.00%) 85.86
pop3 18468 ( 0.02%) 3814768 ( 0.01%) 206.56
imap 15511 ( 0.01%) 1640328 ( 0.00%) 105.75
telnet 345 ( 0.00%) 22385 ( 0.00%) 64.88
ssh 24227 ( 0.02%) 4845288 ( 0.01%) 200.00
dns 24789 ( 0.02%) 2365960 ( 0.01%) 95.44
bgp 547 ( 0.00%) 88643 ( 0.00%) 162.05
napster 355 ( 0.00%) 26135 ( 0.00%) 73.62
realaud 85 ( 0.00%) 7247 ( 0.00%) 85.26
rtsp 68159 ( 0.06%) 85388181 ( 0.25%) 1252.78
icecast 11233 ( 0.01%) 982650 ( 0.00%) 87.48
other 9623120 ( 8.61%) 5985447869 ( 17.70%) 621.99
udp 73577420 ( 65.80%) 6307705589 ( 18.65%) 85.73
dns 817678 ( 0.73%) 173597645 ( 0.51%) 212.31
realaud 13 ( 0.00%) 1763 ( 0.00%) 135.62
halflif 96 ( 0.00%) 9302 ( 0.00%) 96.90
starcra 27 ( 0.00%) 4651 ( 0.00%) 172.26
everque 542 ( 0.00%) 142929 ( 0.00%) 263.71
unreal 10 ( 0.00%) 1552 ( 0.00%) 155.20
quake 1869 ( 0.00%) 146638 ( 0.00%) 78.46
cuseeme 4 ( 0.00%) 286 ( 0.00%) 71.50
other 72756776 ( 65.07%) 6133648770 ( 18.14%) 84.30
icmp 442397 ( 0.40%) 77897300 ( 0.23%) 176.08
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 936 ( 0.00%) 193584 ( 0.00%) 206.82
ip6 2454903 ( 2.20%) 906400158 ( 2.68%) 369.22
other 16899 ( 0.02%) 3835239 ( 0.01%) 226.95
frag 4001 ( 0.00%) 3248600 ( 0.01%) 811.95
ip6 780335 ( 0.70%) 110957100 ( 0.33%) 142.19
tcp6 694490 ( 0.62%) 89772402 ( 0.27%) 129.26
http(s) 6774 ( 0.01%) 8052454 ( 0.02%) 1188.73
http(c) 17081 ( 0.02%) 1682299 ( 0.00%) 98.49
squid 36 ( 0.00%) 7598 ( 0.00%) 211.06
smtp 554 ( 0.00%) 85734 ( 0.00%) 154.75
ftp 83 ( 0.00%) 7792 ( 0.00%) 93.88
dns 221 ( 0.00%) 45644 ( 0.00%) 206.53
bgp 92 ( 0.00%) 16754 ( 0.00%) 182.11
other 669649 ( 0.60%) 79874127 ( 0.24%) 119.28
udp6 55524 ( 0.05%) 17167197 ( 0.05%) 309.19
dns 54298 ( 0.05%) 17007694 ( 0.05%) 313.23
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 3 ( 0.00%) 337 ( 0.00%) 112.33
other 1220 ( 0.00%) 158839 ( 0.00%) 130.20
icmp6 30091 ( 0.03%) 3833112 ( 0.01%) 127.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 200 ( 0.00%) 180309 ( 0.00%) 901.54
tcpdump file: 201105231400.dump.gz (1869.87 MB)