Traffic Trace Info
DumpFile: 201105251400.dump
FileSize: 7670.13MB
Id: 201105251400
StartTime: Wed May 25 14:00:01 2011
EndTime: Wed May 25 14:13:12 2011
TotalTime: 790.85 seconds
TotalCapSize: 1692.51MB CapLen: 96 bytes
# of packets: 123313498 (35731.48MB)
AvgRate: 379.10Mbps stddev:52.90M
IP flow (unique src/dst pair) Information
# of flows: 1140143 (avg. 108.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 2.4% 2.3% 2.0% 1.6% 1.4% 1.3% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 596053
Top 10 bandwidth usage (bytes/total in %):
12.3% 10.1% 8.3% 6.0% 5.4% 4.3% 3.7% 3.5% 3.3% 2.8%
# of IPv6 addresses: 3738
Top 10 bandwidth usage (bytes/total in %):
60.7% 49.3% 14.7% 14.6% 7.5% 7.2% 5.0% 4.8% 4.0% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105251400.pktlen.png)
detailed numbers
[ 32- 63]: 85434589
[ 64- 127]: 13572820
[ 128- 255]: 1600589
[ 256- 511]: 959905
[ 512- 1023]: 1549303
[ 1024- 2047]: 20196292
Protocol Breakdown
![[protocol breakdown chart]](201105251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 123313498 (100.00%) 37467177514 (100.00%) 303.84
ip 122257668 ( 99.14%) 37330959296 ( 99.64%) 305.35
tcp 39208830 ( 31.80%) 29958854125 ( 79.96%) 764.08
http(s) 18107946 ( 14.68%) 24045620903 ( 64.18%) 1327.90
http(c) 12631408 ( 10.24%) 1932232243 ( 5.16%) 152.97
squid 91212 ( 0.07%) 57114104 ( 0.15%) 626.17
smtp 155072 ( 0.13%) 82666744 ( 0.22%) 533.09
ftp 6638 ( 0.01%) 694199 ( 0.00%) 104.58
pop3 25475 ( 0.02%) 5505907 ( 0.01%) 216.13
imap 14166 ( 0.01%) 6008605 ( 0.02%) 424.16
telnet 56 ( 0.00%) 3831 ( 0.00%) 68.41
ssh 437574 ( 0.35%) 76267734 ( 0.20%) 174.30
dns 19231 ( 0.02%) 1785145 ( 0.00%) 92.83
bgp 538 ( 0.00%) 123908 ( 0.00%) 230.31
napster 959 ( 0.00%) 382735 ( 0.00%) 399.10
realaud 85 ( 0.00%) 13983 ( 0.00%) 164.51
rtsp 98934 ( 0.08%) 107206776 ( 0.29%) 1083.62
icecast 69227 ( 0.06%) 65497192 ( 0.17%) 946.12
hotline 32 ( 0.00%) 5750 ( 0.00%) 179.69
other 7550276 ( 6.12%) 3577724306 ( 9.55%) 473.85
udp 81098970 ( 65.77%) 6473312337 ( 17.28%) 79.82
dns 718242 ( 0.58%) 157048723 ( 0.42%) 218.66
rip 9 ( 0.00%) 709 ( 0.00%) 78.78
realaud 16 ( 0.00%) 1820 ( 0.00%) 113.75
halflif 86 ( 0.00%) 8131 ( 0.00%) 94.55
starcra 44 ( 0.00%) 5657 ( 0.00%) 128.57
everque 468 ( 0.00%) 198164 ( 0.00%) 423.43
unreal 55 ( 0.00%) 10151 ( 0.00%) 184.56
quake 1910 ( 0.00%) 150705 ( 0.00%) 78.90
cuseeme 14 ( 0.00%) 1505 ( 0.00%) 107.50
other 80377969 ( 65.18%) 6315799151 ( 16.86%) 78.58
icmp 473773 ( 0.38%) 87497159 ( 0.23%) 184.68
ipip 162 ( 0.00%) 16872 ( 0.00%) 104.15
ipsec 13580 ( 0.01%) 7367466 ( 0.02%) 542.52
ip6 1441499 ( 1.17%) 796347263 ( 2.13%) 552.44
other 20854 ( 0.02%) 7564074 ( 0.02%) 362.72
frag 771 ( 0.00%) 768293 ( 0.00%) 996.49
ip6 1055830 ( 0.86%) 136218218 ( 0.36%) 129.02
tcp6 997892 ( 0.81%) 122101616 ( 0.33%) 122.36
http(s) 8832 ( 0.01%) 12014117 ( 0.03%) 1360.29
http(c) 189500 ( 0.15%) 15850329 ( 0.04%) 83.64
smtp 320 ( 0.00%) 65618 ( 0.00%) 205.06
ftp 151 ( 0.00%) 13772 ( 0.00%) 91.21
dns 210 ( 0.00%) 52815 ( 0.00%) 251.50
bgp 80 ( 0.00%) 14220 ( 0.00%) 177.75
other 798799 ( 0.65%) 94090745 ( 0.25%) 117.79
udp6 33151 ( 0.03%) 10034953 ( 0.03%) 302.70
dns 31391 ( 0.03%) 9416507 ( 0.03%) 299.97
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 1757 ( 0.00%) 618137 ( 0.00%) 351.81
icmp6 23616 ( 0.02%) 3235727 ( 0.01%) 137.01
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 1144 ( 0.00%) 842250 ( 0.00%) 736.23
tcpdump file: 201105251400.dump.gz (1996.13 MB)