Traffic Trace Info
DumpFile: 201105261400.dump
FileSize: 7393.07MB
Id: 201105261400
StartTime: Thu May 26 14:00:04 2011
EndTime: Thu May 26 14:13:23 2011
TotalTime: 798.81 seconds
TotalCapSize: 1473.25MB CapLen: 96 bytes
# of packets: 119525579 (36161.40MB)
AvgRate: 411.24Mbps stddev:52.26M
IP flow (unique src/dst pair) Information
# of flows: 890874 (avg. 134.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.1% 3.0% 2.4% 2.4% 2.3% 2.1% 1.5% 1.5% 1.1%
IP address Information
# of IPv4 addresses: 462438
Top 10 bandwidth usage (bytes/total in %):
12.2% 7.1% 5.9% 5.9% 5.4% 5.0% 4.1% 4.1% 4.1% 3.8%
# of IPv6 addresses: 3732
Top 10 bandwidth usage (bytes/total in %):
70.5% 70.5% 5.8% 5.2% 4.4% 3.3% 2.7% 2.2% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105261400.pktlen.png)
detailed numbers
[ 32- 63]: 84556964
[ 64- 127]: 9883968
[ 128- 255]: 1476183
[ 256- 511]: 922661
[ 512- 1023]: 3170430
[ 1024- 2047]: 19515373
Protocol Breakdown
![[protocol breakdown chart]](201105261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 119525579 (100.00%) 37917971127 (100.00%) 317.24
ip 119309904 ( 99.82%) 37746273082 ( 99.55%) 316.37
tcp 34817872 ( 29.13%) 28470574730 ( 75.08%) 817.70
http(s) 17663334 ( 14.78%) 24027259964 ( 63.37%) 1360.29
http(c) 10798295 ( 9.03%) 1932990944 ( 5.10%) 179.01
squid 69172 ( 0.06%) 44187614 ( 0.12%) 638.81
smtp 117779 ( 0.10%) 42608244 ( 0.11%) 361.76
nntp 13 ( 0.00%) 794 ( 0.00%) 61.08
ftp 55906 ( 0.05%) 4702005 ( 0.01%) 84.11
pop3 58935 ( 0.05%) 23834241 ( 0.06%) 404.42
imap 3074 ( 0.00%) 631492 ( 0.00%) 205.43
telnet 528 ( 0.00%) 38502 ( 0.00%) 72.92
ssh 132319 ( 0.11%) 35368990 ( 0.09%) 267.30
dns 17452 ( 0.01%) 1640101 ( 0.00%) 93.98
bgp 471 ( 0.00%) 108937 ( 0.00%) 231.29
napster 208 ( 0.00%) 118520 ( 0.00%) 569.81
realaud 69 ( 0.00%) 7356 ( 0.00%) 106.61
rtsp 476 ( 0.00%) 392738 ( 0.00%) 825.08
icecast 101987 ( 0.09%) 97155866 ( 0.26%) 952.63
hotline 32 ( 0.00%) 1970 ( 0.00%) 61.56
other 5797821 ( 4.85%) 2259526392 ( 5.96%) 389.72
udp 82726170 ( 69.21%) 8615078711 ( 22.72%) 104.14
dns 6250053 ( 5.23%) 478946588 ( 1.26%) 76.63
realaud 14 ( 0.00%) 1745 ( 0.00%) 124.64
halflif 63 ( 0.00%) 6420 ( 0.00%) 101.90
starcra 38 ( 0.00%) 5190 ( 0.00%) 136.58
everque 2739 ( 0.00%) 447562 ( 0.00%) 163.40
unreal 33 ( 0.00%) 4586 ( 0.00%) 138.97
quake 1600 ( 0.00%) 128404 ( 0.00%) 80.25
cuseeme 7 ( 0.00%) 985 ( 0.00%) 140.71
other 76471451 ( 63.98%) 8135436446 ( 21.46%) 106.39
icmp 351950 ( 0.29%) 66528475 ( 0.18%) 189.03
ipip 149 ( 0.00%) 15526 ( 0.00%) 104.20
ipsec 219 ( 0.00%) 35154 ( 0.00%) 160.52
ip6 1367472 ( 1.14%) 568180180 ( 1.50%) 415.50
other 46072 ( 0.04%) 25860306 ( 0.07%) 561.30
frag 934 ( 0.00%) 867088 ( 0.00%) 928.36
ip6 215675 ( 0.18%) 171698045 ( 0.45%) 796.10
tcp6 161081 ( 0.13%) 157313675 ( 0.41%) 976.61
http(s) 8284 ( 0.01%) 10348226 ( 0.03%) 1249.18
http(c) 48069 ( 0.04%) 4389040 ( 0.01%) 91.31
smtp 263 ( 0.00%) 51186 ( 0.00%) 194.62
ftp 82 ( 0.00%) 7414 ( 0.00%) 90.41
dns 205 ( 0.00%) 60920 ( 0.00%) 297.17
bgp 73 ( 0.00%) 14809 ( 0.00%) 202.86
other 104105 ( 0.09%) 142442080 ( 0.38%) 1368.25
udp6 33586 ( 0.03%) 10545172 ( 0.03%) 313.98
dns 33049 ( 0.03%) 10471655 ( 0.03%) 316.85
everque 2 ( 0.00%) 215 ( 0.00%) 107.50
other 535 ( 0.00%) 73302 ( 0.00%) 137.01
icmp6 19562 ( 0.02%) 2783801 ( 0.01%) 142.31
pim6 25 ( 0.00%) 3400 ( 0.00%) 136.00
other6 1421 ( 0.00%) 1051997 ( 0.00%) 740.32
tcpdump file: 201105261400.dump.gz (1866.05 MB)