Traffic Trace Info
DumpFile: 201105241400.dump
FileSize: 6285.88MB
Id: 201105241400
StartTime: Tue May 24 14:00:01 2011
EndTime: Tue May 24 14:15:00 2011
TotalTime: 899.40 seconds
TotalCapSize: 634.55MB CapLen: 96 bytes
# of packets: 101927988 (30313.90MB)
AvgRate: 282.66Mbps stddev:40.38M
IP flow (unique src/dst pair) Information
# of flows: 1101770 (avg. 92.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.0% 3.8% 3.1% 3.0% 2.4% 2.2% 2.2% 1.7% 1.5%
IP address Information
# of IPv4 addresses: 609712
Top 10 bandwidth usage (bytes/total in %):
12.2% 9.4% 8.0% 6.7% 6.0% 4.2% 4.2% 3.8% 3.5% 3.1%
# of IPv6 addresses: 3757
Top 10 bandwidth usage (bytes/total in %):
48.8% 48.8% 38.5% 37.7% 5.6% 5.6% 1.3% 0.5% 0.5% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105241400.pktlen.png)
detailed numbers
[ 32- 63]: 71317044
[ 64- 127]: 8854900
[ 128- 255]: 2009518
[ 256- 511]: 1165722
[ 512- 1023]: 1344125
[ 1024- 2047]: 17236679
Protocol Breakdown
![[protocol breakdown chart]](201105241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 101927988 (100.00%) 31786425993 (100.00%) 311.85
ip 101684985 ( 99.76%) 31517094565 ( 99.15%) 309.95
tcp 30998224 ( 30.41%) 25041675054 ( 78.78%) 807.84
http(s) 13553315 ( 13.30%) 17547731668 ( 55.21%) 1294.72
http(c) 9539773 ( 9.36%) 2957475331 ( 9.30%) 310.02
squid 161233 ( 0.16%) 114241105 ( 0.36%) 708.55
smtp 170205 ( 0.17%) 77534806 ( 0.24%) 455.54
ftp 20969 ( 0.02%) 1792971 ( 0.01%) 85.51
pop3 62356 ( 0.06%) 14007600 ( 0.04%) 224.64
imap 17891 ( 0.02%) 1651430 ( 0.01%) 92.31
telnet 109 ( 0.00%) 9356 ( 0.00%) 85.83
ssh 45702 ( 0.04%) 13225350 ( 0.04%) 289.38
dns 31108 ( 0.03%) 2628435 ( 0.01%) 84.49
bgp 1254 ( 0.00%) 747703 ( 0.00%) 596.25
napster 62 ( 0.00%) 7328 ( 0.00%) 118.19
realaud 9 ( 0.00%) 596 ( 0.00%) 66.22
rtsp 34274 ( 0.03%) 36378925 ( 0.11%) 1061.41
icecast 18422 ( 0.02%) 4803420 ( 0.02%) 260.74
hotline 44 ( 0.00%) 3835 ( 0.00%) 87.16
other 7341498 ( 7.20%) 4269435195 ( 13.43%) 581.55
udp 68453896 ( 67.16%) 5626249894 ( 17.70%) 82.19
dns 828848 ( 0.81%) 174425875 ( 0.55%) 210.44
realaud 16 ( 0.00%) 1678 ( 0.00%) 104.88
halflif 81 ( 0.00%) 7656 ( 0.00%) 94.52
starcra 42 ( 0.00%) 7880 ( 0.00%) 187.62
everque 628 ( 0.00%) 244172 ( 0.00%) 388.81
unreal 36 ( 0.00%) 5343 ( 0.00%) 148.42
quake 1909 ( 0.00%) 153068 ( 0.00%) 80.18
cuseeme 4 ( 0.00%) 1096 ( 0.00%) 274.00
other 67621920 ( 66.34%) 5451253761 ( 17.15%) 80.61
icmp 445816 ( 0.44%) 78032929 ( 0.25%) 175.03
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4161 ( 0.00%) 842350 ( 0.00%) 202.44
ip6 1760051 ( 1.73%) 759999732 ( 2.39%) 431.81
other 22652 ( 0.02%) 10275336 ( 0.03%) 453.62
frag 2452 ( 0.00%) 2271425 ( 0.01%) 926.36
ip6 243001 ( 0.24%) 269331308 ( 0.85%) 1108.35
tcp6 181665 ( 0.18%) 254905395 ( 0.80%) 1403.16
http(s) 4519 ( 0.00%) 5484829 ( 0.02%) 1213.73
http(c) 9627 ( 0.01%) 944170 ( 0.00%) 98.08
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 330 ( 0.00%) 70283 ( 0.00%) 212.98
ftp 83 ( 0.00%) 8032 ( 0.00%) 96.77
dns 223 ( 0.00%) 53723 ( 0.00%) 240.91
bgp 106 ( 0.00%) 26527 ( 0.00%) 250.25
other 166774 ( 0.16%) 248317577 ( 0.78%) 1488.95
udp6 35189 ( 0.03%) 10689776 ( 0.03%) 303.78
dns 34814 ( 0.03%) 10635450 ( 0.03%) 305.49
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
other 372 ( 0.00%) 54011 ( 0.00%) 145.19
icmp6 25911 ( 0.03%) 3539380 ( 0.01%) 136.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 206 ( 0.00%) 192677 ( 0.00%) 935.33
tcpdump file: 201105241400.dump.gz (1603.18 MB)