Traffic Trace Info
DumpFile: 201106031400.dump
FileSize: 4464.89MB
Id: 201106031400
StartTime: Fri Jun 3 14:00:00 2011
EndTime: Fri Jun 3 14:15:00 2011
TotalTime: 899.81 seconds
TotalCapSize: -666.86MB CapLen: 96 bytes
# of packets: 67878264 (32309.16MB)
AvgRate: 301.21Mbps stddev:46.63M
IP flow (unique src/dst pair) Information
# of flows: 1114496 (avg. 60.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.3% 2.8% 2.1% 1.6% 1.5% 1.5% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 628790
Top 10 bandwidth usage (bytes/total in %):
8.6% 7.2% 6.3% 6.0% 5.1% 5.1% 4.8% 4.6% 4.3% 4.3%
# of IPv6 addresses: 3509
Top 10 bandwidth usage (bytes/total in %):
77.2% 43.3% 34.0% 11.8% 11.8% 1.7% 1.6% 1.2% 1.0% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106031400.pktlen.png)
detailed numbers
[ 32- 63]: 33369274
[ 64- 127]: 10106956
[ 128- 255]: 1973123
[ 256- 511]: 1224061
[ 512- 1023]: 1039805
[ 1024- 2047]: 20165045
Protocol Breakdown
![[protocol breakdown chart]](201106031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 67878264 (100.00%) 33878604795 (100.00%) 499.11
ip 67592507 ( 99.58%) 33618553828 ( 99.23%) 497.37
tcp 34877818 ( 51.38%) 28034481658 ( 82.75%) 803.79
http(s) 15722741 ( 23.16%) 21628924455 ( 63.84%) 1375.65
http(c) 9909678 ( 14.60%) 1867286749 ( 5.51%) 188.43
squid 122205 ( 0.18%) 63693213 ( 0.19%) 521.20
smtp 180465 ( 0.27%) 94928210 ( 0.28%) 526.02
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 53445 ( 0.08%) 34485087 ( 0.10%) 645.24
pop3 44171 ( 0.07%) 8574348 ( 0.03%) 194.12
imap 3167 ( 0.00%) 869173 ( 0.00%) 274.45
telnet 1920 ( 0.00%) 364534 ( 0.00%) 189.86
ssh 1217096 ( 1.79%) 1706392439 ( 5.04%) 1402.02
dns 21049 ( 0.03%) 2054993 ( 0.01%) 97.63
bgp 1102 ( 0.00%) 149510 ( 0.00%) 135.67
napster 278 ( 0.00%) 22585 ( 0.00%) 81.24
realaud 362 ( 0.00%) 48571 ( 0.00%) 134.17
rtsp 14215 ( 0.02%) 15253501 ( 0.05%) 1073.06
icecast 928 ( 0.00%) 112575 ( 0.00%) 121.31
hotline 32 ( 0.00%) 1980 ( 0.00%) 61.88
other 7584959 ( 11.17%) 2611319435 ( 7.71%) 344.28
udp 30319881 ( 44.67%) 4565909862 ( 13.48%) 150.59
dns 818399 ( 1.21%) 177891795 ( 0.53%) 217.37
realaud 16 ( 0.00%) 2460 ( 0.00%) 153.75
halflif 136 ( 0.00%) 15989 ( 0.00%) 117.57
starcra 55 ( 0.00%) 10587 ( 0.00%) 192.49
everque 551 ( 0.00%) 116683 ( 0.00%) 211.77
unreal 24 ( 0.00%) 4139 ( 0.00%) 172.46
quake 1931 ( 0.00%) 151408 ( 0.00%) 78.41
cuseeme 7 ( 0.00%) 541 ( 0.00%) 77.29
other 29496611 ( 43.46%) 4387485141 ( 12.95%) 148.75
icmp 429770 ( 0.63%) 72198568 ( 0.21%) 167.99
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 780 ( 0.00%) 207052 ( 0.00%) 265.45
ip6 1944429 ( 2.86%) 939981697 ( 2.77%) 483.42
other 19643 ( 0.03%) 5755611 ( 0.02%) 293.01
frag 5224 ( 0.01%) 4241581 ( 0.01%) 811.94
ip6 285757 ( 0.42%) 260050967 ( 0.77%) 910.04
tcp6 224127 ( 0.33%) 243776231 ( 0.72%) 1087.67
http(s) 27479 ( 0.04%) 37666450 ( 0.11%) 1370.74
http(c) 50701 ( 0.07%) 4616042 ( 0.01%) 91.04
smtp 218 ( 0.00%) 41725 ( 0.00%) 191.40
ftp 88 ( 0.00%) 7830 ( 0.00%) 88.98
dns 313 ( 0.00%) 69903 ( 0.00%) 223.33
bgp 91 ( 0.00%) 18021 ( 0.00%) 198.03
other 145237 ( 0.21%) 201356260 ( 0.59%) 1386.40
udp6 40883 ( 0.06%) 12228912 ( 0.04%) 299.12
dns 37710 ( 0.06%) 11923925 ( 0.04%) 316.20
quake 1 ( 0.00%) 122 ( 0.00%) 122.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 3171 ( 0.00%) 304764 ( 0.00%) 96.11
icmp6 19927 ( 0.03%) 3286796 ( 0.01%) 164.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 790 ( 0.00%) 754948 ( 0.00%) 955.63
tcpdump file: 201106031400.dump.gz (1340.66 MB)