Traffic Trace Info
DumpFile: 201105301400.dump
FileSize: 7842.02MB
Id: 201105301400
StartTime: Mon May 30 14:00:01 2011
EndTime: Mon May 30 14:15:01 2011
TotalTime: 899.87 seconds
TotalCapSize: 1809.17MB CapLen: 96 bytes
# of packets: 126931839 (39856.77MB)
AvgRate: 371.55Mbps stddev:41.28M
IP flow (unique src/dst pair) Information
# of flows: 1189909 (avg. 106.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.8% 4.6% 4.1% 3.9% 1.8% 1.5% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 609622
Top 10 bandwidth usage (bytes/total in %):
11.3% 11.3% 7.4% 6.5% 5.6% 5.1% 5.0% 4.6% 4.6% 4.5%
# of IPv6 addresses: 3455
Top 10 bandwidth usage (bytes/total in %):
90.1% 85.8% 10.2% 6.0% 1.4% 1.2% 0.8% 0.8% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105301400.pktlen.png)
detailed numbers
[ 32- 63]: 88953002
[ 64- 127]: 9941193
[ 128- 255]: 2122176
[ 256- 511]: 939375
[ 512- 1023]: 2213429
[ 1024- 2047]: 22762664
Protocol Breakdown
![[protocol breakdown chart]](201105301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 126931839 (100.00%) 41792853696 (100.00%) 329.25
ip 125580234 ( 98.94%) 39904663289 ( 95.48%) 317.76
tcp 42126224 ( 33.19%) 31806170135 ( 76.10%) 755.02
http(s) 21124588 ( 16.64%) 24143845674 ( 57.77%) 1142.93
http(c) 12927892 ( 10.18%) 4723297747 ( 11.30%) 365.36
squid 124413 ( 0.10%) 97813798 ( 0.23%) 786.20
smtp 187579 ( 0.15%) 77314064 ( 0.18%) 412.17
ftp 9379 ( 0.01%) 794831 ( 0.00%) 84.75
pop3 25169 ( 0.02%) 7735915 ( 0.02%) 307.36
imap 15140 ( 0.01%) 6120091 ( 0.01%) 404.23
telnet 129 ( 0.00%) 9160 ( 0.00%) 71.01
ssh 288816 ( 0.23%) 44646367 ( 0.11%) 154.58
dns 28992 ( 0.02%) 2475115 ( 0.01%) 85.37
bgp 545 ( 0.00%) 80644 ( 0.00%) 147.97
napster 317 ( 0.00%) 24715 ( 0.00%) 77.97
realaud 105 ( 0.00%) 10193 ( 0.00%) 97.08
rtsp 5282 ( 0.00%) 1544431 ( 0.00%) 292.40
icecast 17648 ( 0.01%) 12355802 ( 0.03%) 700.12
hotline 149 ( 0.00%) 11786 ( 0.00%) 79.10
other 7370081 ( 5.81%) 2688089802 ( 6.43%) 364.73
udp 81224434 ( 63.99%) 7376403369 ( 17.65%) 90.82
dns 820852 ( 0.65%) 172359972 ( 0.41%) 209.98
rip 9 ( 0.00%) 709 ( 0.00%) 78.78
realaud 860 ( 0.00%) 55497 ( 0.00%) 64.53
halflif 75 ( 0.00%) 5385 ( 0.00%) 71.80
starcra 35 ( 0.00%) 4480 ( 0.00%) 128.00
everque 360 ( 0.00%) 75314 ( 0.00%) 209.21
unreal 20 ( 0.00%) 3295 ( 0.00%) 164.75
quake 1844 ( 0.00%) 144073 ( 0.00%) 78.13
cuseeme 7 ( 0.00%) 849 ( 0.00%) 121.29
other 80400224 ( 63.34%) 7203664146 ( 17.24%) 89.60
icmp 546709 ( 0.43%) 72752753 ( 0.17%) 133.07
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 156 ( 0.00%) 28856 ( 0.00%) 184.97
ip6 1636564 ( 1.29%) 641886399 ( 1.54%) 392.22
other 45962 ( 0.04%) 7402507 ( 0.02%) 161.06
frag 750 ( 0.00%) 722261 ( 0.00%) 963.01
ip6 1351605 ( 1.06%) 1888190407 ( 4.52%) 1397.00
tcp6 1292510 ( 1.02%) 1872340894 ( 4.48%) 1448.61
http(s) 22581 ( 0.02%) 32046639 ( 0.08%) 1419.19
http(c) 49209 ( 0.04%) 4342168 ( 0.01%) 88.24
smtp 170 ( 0.00%) 39582 ( 0.00%) 232.84
ftp 358 ( 0.00%) 37155 ( 0.00%) 103.78
dns 235 ( 0.00%) 56480 ( 0.00%) 240.34
bgp 102 ( 0.00%) 21879 ( 0.00%) 214.50
other 1219855 ( 0.96%) 1835796991 ( 4.39%) 1504.93
udp6 39206 ( 0.03%) 12093994 ( 0.03%) 308.47
dns 37577 ( 0.03%) 11890097 ( 0.03%) 316.42
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
other 1627 ( 0.00%) 203688 ( 0.00%) 125.19
icmp6 18904 ( 0.01%) 3008398 ( 0.01%) 159.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 955 ( 0.00%) 743041 ( 0.00%) 778.05
tcpdump file: 201105301400.dump.gz (2050.38 MB)