Traffic Trace Info
DumpFile: 201105281400.dump
FileSize: 7381.80MB
Id: 201105281400
StartTime: Sat May 28 14:00:03 2011
EndTime: Sat May 28 14:13:31 2011
TotalTime: 808.18 seconds
TotalCapSize: 1437.02MB CapLen: 96 bytes
# of packets: 121161165 (30385.31MB)
AvgRate: 315.59Mbps stddev:49.42M
IP flow (unique src/dst pair) Information
# of flows: 976080 (avg. 124.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 3.9% 2.1% 1.7% 1.5% 1.4% 1.3% 1.3% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 541601
Top 10 bandwidth usage (bytes/total in %):
22.8% 16.0% 9.1% 5.5% 4.1% 4.0% 4.0% 3.9% 2.1% 2.1%
# of IPv6 addresses: 2883
Top 10 bandwidth usage (bytes/total in %):
74.3% 39.4% 34.8% 10.3% 9.8% 2.5% 2.5% 1.9% 1.9% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105281400.pktlen.png)
detailed numbers
[ 32- 63]: 92328831
[ 64- 127]: 8892414
[ 128- 255]: 1746819
[ 256- 511]: 735410
[ 512- 1023]: 834473
[ 1024- 2047]: 16623218
Protocol Breakdown
![[protocol breakdown chart]](201105281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 121161165 (100.00%) 31861307900 (100.00%) 262.97
ip 120744581 ( 99.66%) 31660146890 ( 99.37%) 262.21
tcp 29480994 ( 24.33%) 23585333441 ( 74.03%) 800.02
http(s) 13924556 ( 11.49%) 18340262000 ( 57.56%) 1317.12
http(c) 8036936 ( 6.63%) 2043595227 ( 6.41%) 254.28
squid 87347 ( 0.07%) 63922349 ( 0.20%) 731.82
smtp 124487 ( 0.10%) 80173765 ( 0.25%) 644.03
nntp 4 ( 0.00%) 268 ( 0.00%) 67.00
ftp 28841 ( 0.02%) 2375717 ( 0.01%) 82.37
pop3 15237 ( 0.01%) 6353608 ( 0.02%) 416.99
imap 4978 ( 0.00%) 2856416 ( 0.01%) 573.81
telnet 175 ( 0.00%) 12422 ( 0.00%) 70.98
ssh 34045 ( 0.03%) 10125517 ( 0.03%) 297.42
dns 26439 ( 0.02%) 1997028 ( 0.01%) 75.53
bgp 504 ( 0.00%) 80332 ( 0.00%) 159.39
napster 236 ( 0.00%) 17486 ( 0.00%) 74.09
realaud 109 ( 0.00%) 9595 ( 0.00%) 88.03
rtsp 6178 ( 0.01%) 4309732 ( 0.01%) 697.59
icecast 3542 ( 0.00%) 306793 ( 0.00%) 86.62
hotline 33 ( 0.00%) 2084 ( 0.00%) 63.15
other 7187346 ( 5.93%) 3028933042 ( 9.51%) 421.43
udp 88747639 ( 73.25%) 6818584067 ( 21.40%) 76.83
dns 7188288 ( 5.93%) 514611123 ( 1.62%) 71.59
realaud 12 ( 0.00%) 1080 ( 0.00%) 90.00
halflif 96 ( 0.00%) 7177 ( 0.00%) 74.76
starcra 63 ( 0.00%) 8068 ( 0.00%) 128.06
everque 559 ( 0.00%) 206782 ( 0.00%) 369.91
unreal 34 ( 0.00%) 4325 ( 0.00%) 127.21
quake 1260 ( 0.00%) 104398 ( 0.00%) 82.86
cuseeme 15 ( 0.00%) 1828 ( 0.00%) 121.87
other 81557205 ( 67.31%) 6303580085 ( 19.78%) 77.29
icmp 359294 ( 0.30%) 62633669 ( 0.20%) 174.32
ipip 166 ( 0.00%) 17288 ( 0.00%) 104.14
ipsec 133807 ( 0.11%) 16421546 ( 0.05%) 122.73
ip6 1997180 ( 1.65%) 1171992529 ( 3.68%) 586.82
other 25501 ( 0.02%) 5164350 ( 0.02%) 202.52
frag 561 ( 0.00%) 561134 ( 0.00%) 1000.24
ip6 416584 ( 0.34%) 201161010 ( 0.63%) 482.88
tcp6 364650 ( 0.30%) 187379162 ( 0.59%) 513.86
http(s) 5681 ( 0.00%) 6560316 ( 0.02%) 1154.78
http(c) 236555 ( 0.20%) 20667935 ( 0.06%) 87.37
smtp 290 ( 0.00%) 115216 ( 0.00%) 397.30
ftp 103 ( 0.00%) 9417 ( 0.00%) 91.43
dns 171 ( 0.00%) 48932 ( 0.00%) 286.15
bgp 83 ( 0.00%) 15340 ( 0.00%) 184.82
other 121767 ( 0.10%) 159962006 ( 0.50%) 1313.67
udp6 29155 ( 0.02%) 8198665 ( 0.03%) 281.21
dns 27110 ( 0.02%) 7976969 ( 0.03%) 294.24
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 114 ( 0.00%) 114.00
other 2043 ( 0.00%) 221469 ( 0.00%) 108.40
icmp6 19152 ( 0.02%) 2981024 ( 0.01%) 155.65
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 3600 ( 0.00%) 2598487 ( 0.01%) 721.80
tcpdump file: 201105281400.dump.gz (1796.41 MB)