Traffic Trace Info
DumpFile: 201105311400.dump
FileSize: 7414.09MB
Id: 201105311400
StartTime: Tue May 31 14:00:05 2011
EndTime: Tue May 31 14:11:58 2011
TotalTime: 713.36 seconds
TotalCapSize: 1521.30MB CapLen: 96 bytes
# of packets: 117753588 (35913.27MB)
AvgRate: 422.59Mbps stddev:43.48M
IP flow (unique src/dst pair) Information
# of flows: 909797 (avg. 129.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.7% 10.3% 6.5% 3.2% 2.7% 1.7% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 475063
Top 10 bandwidth usage (bytes/total in %):
16.6% 16.6% 12.3% 11.7% 10.7% 7.2% 6.7% 3.4% 3.3% 3.3%
# of IPv6 addresses: 3243
Top 10 bandwidth usage (bytes/total in %):
94.0% 92.6% 2.9% 1.5% 1.4% 0.8% 0.7% 0.7% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201105311400.pktlen.png)
detailed numbers
[ 32- 63]: 82443162
[ 64- 127]: 10786611
[ 128- 255]: 1671314
[ 256- 511]: 830105
[ 512- 1023]: 1083243
[ 1024- 2047]: 20939153
Protocol Breakdown
![[protocol breakdown chart]](201105311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 117753588 (100.00%) 37657788912 (100.00%) 319.80
ip 116757764 ( 99.15%) 36348467431 ( 96.52%) 311.32
tcp 36231167 ( 30.77%) 29018482477 ( 77.06%) 800.93
http(s) 11404683 ( 9.69%) 15073623426 ( 40.03%) 1321.70
http(c) 8949994 ( 7.60%) 1719405866 ( 4.57%) 192.11
squid 119928 ( 0.10%) 58283690 ( 0.15%) 485.99
smtp 139038 ( 0.12%) 73704185 ( 0.20%) 530.10
nntp 2 ( 0.00%) 132 ( 0.00%) 66.00
ftp 17166 ( 0.01%) 10621913 ( 0.03%) 618.78
pop3 30783 ( 0.03%) 8414133 ( 0.02%) 273.34
imap 3107 ( 0.00%) 882709 ( 0.00%) 284.10
telnet 1136 ( 0.00%) 99224 ( 0.00%) 87.35
ssh 6187852 ( 5.25%) 6067660330 ( 16.11%) 980.58
dns 17517 ( 0.01%) 1583808 ( 0.00%) 90.42
bgp 443 ( 0.00%) 87640 ( 0.00%) 197.83
napster 277 ( 0.00%) 19156 ( 0.00%) 69.16
realaud 49 ( 0.00%) 4032 ( 0.00%) 82.29
rtsp 3780 ( 0.00%) 2416741 ( 0.01%) 639.35
icecast 2790 ( 0.00%) 196920 ( 0.00%) 70.58
hotline 55 ( 0.00%) 4515 ( 0.00%) 82.09
other 9352566 ( 7.94%) 6001473997 ( 15.94%) 641.69
udp 78568228 ( 66.72%) 6363510262 ( 16.90%) 80.99
dns 8807253 ( 7.48%) 634223009 ( 1.68%) 72.01
realaud 5 ( 0.00%) 669 ( 0.00%) 133.80
halflif 24 ( 0.00%) 2477 ( 0.00%) 103.21
starcra 55 ( 0.00%) 7143 ( 0.00%) 129.87
everque 274 ( 0.00%) 48780 ( 0.00%) 178.03
unreal 85 ( 0.00%) 19170 ( 0.00%) 225.53
quake 30 ( 0.00%) 2594 ( 0.00%) 86.47
cuseeme 3 ( 0.00%) 314 ( 0.00%) 104.67
other 69760346 ( 59.24%) 5729118875 ( 15.21%) 82.13
icmp 322214 ( 0.27%) 49599525 ( 0.13%) 153.93
ipip 146 ( 0.00%) 15196 ( 0.00%) 104.08
ipsec 169 ( 0.00%) 32178 ( 0.00%) 190.40
ip6 1618090 ( 1.37%) 912260926 ( 2.42%) 563.79
other 17750 ( 0.02%) 4566867 ( 0.01%) 257.29
frag 1095 ( 0.00%) 997704 ( 0.00%) 911.15
ip6 995824 ( 0.85%) 1309321481 ( 3.48%) 1314.81
tcp6 946481 ( 0.80%) 1295482874 ( 3.44%) 1368.74
http(s) 19560 ( 0.02%) 27117004 ( 0.07%) 1386.35
http(c) 90152 ( 0.08%) 8038920 ( 0.02%) 89.17
smtp 318 ( 0.00%) 83147 ( 0.00%) 261.47
ftp 640 ( 0.00%) 68358 ( 0.00%) 106.81
dns 210 ( 0.00%) 51072 ( 0.00%) 243.20
bgp 68 ( 0.00%) 14393 ( 0.00%) 211.66
other 835533 ( 0.71%) 1260109980 ( 3.35%) 1508.15
udp6 33878 ( 0.03%) 10757708 ( 0.03%) 317.54
dns 33588 ( 0.03%) 10708016 ( 0.03%) 318.80
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 288 ( 0.00%) 49477 ( 0.00%) 171.80
icmp6 14558 ( 0.01%) 2399326 ( 0.01%) 164.81
pim6 24 ( 0.00%) 3264 ( 0.00%) 136.00
other6 883 ( 0.00%) 678309 ( 0.00%) 768.19
tcpdump file: 201105311400.dump.gz (1844.91 MB)