Traffic Trace Info
DumpFile: 201105291400.dump
FileSize: 7632.21MB
Id: 201105291400
StartTime: Sun May 29 14:00:02 2011
EndTime: Sun May 29 14:15:01 2011
TotalTime: 899.34 seconds
TotalCapSize: 1616.71MB CapLen: 96 bytes
# of packets: 125795658 (30672.96MB)
AvgRate: 286.51Mbps stddev:46.80M
IP flow (unique src/dst pair) Information
# of flows: 920693 (avg. 136.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 4.9% 4.0% 3.8% 2.8% 2.6% 2.4% 1.9% 1.9% 1.9%
IP address Information
# of IPv4 addresses: 545068
Top 10 bandwidth usage (bytes/total in %):
18.2% 15.4% 9.0% 6.0% 4.3% 4.3% 4.3% 4.1% 3.3% 3.0%
# of IPv6 addresses: 2875
Top 10 bandwidth usage (bytes/total in %):
86.6% 86.6% 8.0% 8.0% 3.1% 2.6% 1.5% 1.1% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105291400.pktlen.png)
detailed numbers
[ 32- 63]: 98612608
[ 64- 127]: 7244947
[ 128- 255]: 1698664
[ 256- 511]: 799963
[ 512- 1023]: 846998
[ 1024- 2047]: 16592478
Protocol Breakdown
![[protocol breakdown chart]](201105291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 125795658 (100.00%) 32162930888 (100.00%) 255.68
ip 124477922 ( 98.95%) 30345512867 ( 94.35%) 243.78
tcp 25084865 ( 19.94%) 21994743695 ( 68.39%) 876.81
http(s) 13697792 ( 10.89%) 18971161547 ( 58.98%) 1384.98
http(c) 5235326 ( 4.16%) 687129732 ( 2.14%) 131.25
squid 99760 ( 0.08%) 70172214 ( 0.22%) 703.41
smtp 223062 ( 0.18%) 193214672 ( 0.60%) 866.19
nntp 6 ( 0.00%) 378 ( 0.00%) 63.00
ftp 10542 ( 0.01%) 944386 ( 0.00%) 89.58
pop3 7150 ( 0.01%) 3786563 ( 0.01%) 529.59
imap 6166 ( 0.00%) 5106608 ( 0.02%) 828.19
telnet 1104 ( 0.00%) 81148 ( 0.00%) 73.50
ssh 133443 ( 0.11%) 71134286 ( 0.22%) 533.07
dns 15356 ( 0.01%) 1172502 ( 0.00%) 76.35
bgp 529 ( 0.00%) 83138 ( 0.00%) 157.16
napster 172 ( 0.00%) 13996 ( 0.00%) 81.37
realaud 74 ( 0.00%) 10485 ( 0.00%) 141.69
rtsp 147196 ( 0.12%) 102584785 ( 0.32%) 696.93
icecast 471 ( 0.00%) 69395 ( 0.00%) 147.34
hotline 33 ( 0.00%) 2795 ( 0.00%) 84.70
other 5506682 ( 4.38%) 1888075005 ( 5.87%) 342.87
udp 97210284 ( 77.28%) 7569715010 ( 23.54%) 77.87
dns 10677859 ( 8.49%) 721142728 ( 2.24%) 67.54
realaud 13 ( 0.00%) 1055 ( 0.00%) 81.15
halflif 76 ( 0.00%) 6127 ( 0.00%) 80.62
starcra 34 ( 0.00%) 6103 ( 0.00%) 179.50
everque 187 ( 0.00%) 38973 ( 0.00%) 208.41
unreal 37 ( 0.00%) 9329 ( 0.00%) 252.14
quake 1833 ( 0.00%) 146558 ( 0.00%) 79.96
cuseeme 13 ( 0.00%) 3533 ( 0.00%) 271.77
other 86530064 ( 68.79%) 6848275616 ( 21.29%) 79.14
icmp 376719 ( 0.30%) 78013143 ( 0.24%) 207.09
ipip 183 ( 0.00%) 19050 ( 0.00%) 104.10
ipsec 146 ( 0.00%) 26940 ( 0.00%) 184.52
ip6 1788003 ( 1.42%) 697904506 ( 2.17%) 390.33
other 17722 ( 0.01%) 5090523 ( 0.02%) 287.24
frag 71082 ( 0.06%) 52399550 ( 0.16%) 737.17
ip6 1317736 ( 1.05%) 1817418021 ( 5.65%) 1379.20
tcp6 1265285 ( 1.01%) 1805762437 ( 5.61%) 1427.16
http(s) 15069 ( 0.01%) 21708535 ( 0.07%) 1440.61
http(c) 64561 ( 0.05%) 5975945 ( 0.02%) 92.56
smtp 165 ( 0.00%) 34596 ( 0.00%) 209.67
ftp 85 ( 0.00%) 7692 ( 0.00%) 90.49
dns 226 ( 0.00%) 51811 ( 0.00%) 229.25
bgp 90 ( 0.00%) 15023 ( 0.00%) 166.92
other 1185089 ( 0.94%) 1777968835 ( 5.53%) 1500.28
udp6 30618 ( 0.02%) 7983191 ( 0.02%) 260.74
dns 27010 ( 0.02%) 7590163 ( 0.02%) 281.01
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3607 ( 0.00%) 392921 ( 0.00%) 108.93
icmp6 21348 ( 0.02%) 3298279 ( 0.01%) 154.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 455 ( 0.00%) 370034 ( 0.00%) 813.26
tcpdump file: 201105291400.dump.gz (1787.64 MB)