Traffic Trace Info
DumpFile: 201106041400.dump
FileSize: 8087.85MB
Id: 201106041400
StartTime: Sat Jun 4 14:00:01 2011
EndTime: Sat Jun 4 14:15:01 2011
TotalTime: 899.98 seconds
TotalCapSize: 1975.46MB CapLen: 96 bytes
# of packets: 132144765 (35195.72MB)
AvgRate: 328.13Mbps stddev:50.08M
IP flow (unique src/dst pair) Information
# of flows: 899728 (avg. 146.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 3.2% 2.0% 2.0% 1.9% 1.4% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 515203
Top 10 bandwidth usage (bytes/total in %):
25.3% 15.6% 12.3% 7.6% 5.0% 4.4% 3.3% 3.1% 2.4% 2.0%
# of IPv6 addresses: 3217
Top 10 bandwidth usage (bytes/total in %):
80.1% 42.6% 38.7% 4.1% 3.5% 3.5% 2.9% 2.1% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106041400.pktlen.png)
detailed numbers
[ 32- 63]: 101369747
[ 64- 127]: 7385099
[ 128- 255]: 1777060
[ 256- 511]: 965458
[ 512- 1023]: 1083413
[ 1024- 2047]: 19563988
Protocol Breakdown
![[protocol breakdown chart]](201106041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 132144765 (100.00%) 36905387698 (100.00%) 279.28
ip 131885088 ( 99.80%) 36673572966 ( 99.37%) 278.07
tcp 28584211 ( 21.63%) 27547935693 ( 74.64%) 963.75
http(s) 16476480 ( 12.47%) 22340908685 ( 60.54%) 1355.93
http(c) 6686568 ( 5.06%) 1410408957 ( 3.82%) 210.93
squid 75541 ( 0.06%) 48689980 ( 0.13%) 644.55
smtp 134260 ( 0.10%) 62127326 ( 0.17%) 462.74
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 36856 ( 0.03%) 23206797 ( 0.06%) 629.66
pop3 5874 ( 0.00%) 669819 ( 0.00%) 114.03
imap 481324 ( 0.36%) 719244953 ( 1.95%) 1494.31
telnet 991 ( 0.00%) 87080 ( 0.00%) 87.87
ssh 44705 ( 0.03%) 31177485 ( 0.08%) 697.40
dns 20612 ( 0.02%) 1734236 ( 0.00%) 84.14
bgp 676 ( 0.00%) 93436 ( 0.00%) 138.22
napster 35 ( 0.00%) 2569 ( 0.00%) 73.40
realaud 552 ( 0.00%) 56921 ( 0.00%) 103.12
rtsp 19956 ( 0.02%) 20614283 ( 0.06%) 1032.99
icecast 589 ( 0.00%) 53749 ( 0.00%) 91.25
hotline 16 ( 0.00%) 1273 ( 0.00%) 79.56
other 4599174 ( 3.48%) 2888858024 ( 7.83%) 628.13
udp 101070359 ( 76.48%) 8277527878 ( 22.43%) 81.90
dns 19460846 ( 14.73%) 1255453078 ( 3.40%) 64.51
rip 39 ( 0.00%) 2808 ( 0.00%) 72.00
realaud 8 ( 0.00%) 648 ( 0.00%) 81.00
halflif 69 ( 0.00%) 4972 ( 0.00%) 72.06
starcra 53 ( 0.00%) 7059 ( 0.00%) 133.19
everque 416 ( 0.00%) 56798 ( 0.00%) 136.53
unreal 55 ( 0.00%) 10254 ( 0.00%) 186.44
quake 2262 ( 0.00%) 264742 ( 0.00%) 117.04
cuseeme 12 ( 0.00%) 1966 ( 0.00%) 163.83
other 81605098 ( 61.75%) 7021499846 ( 19.03%) 86.04
icmp 442583 ( 0.33%) 72937993 ( 0.20%) 164.80
ipip 185 ( 0.00%) 19220 ( 0.00%) 103.89
ipsec 276 ( 0.00%) 44184 ( 0.00%) 160.09
ip6 1770389 ( 1.34%) 770148971 ( 2.09%) 435.02
other 17085 ( 0.01%) 4959027 ( 0.01%) 290.26
frag 5210 ( 0.00%) 3912626 ( 0.01%) 750.98
ip6 259677 ( 0.20%) 231814732 ( 0.63%) 892.70
tcp6 196548 ( 0.15%) 211688480 ( 0.57%) 1077.03
http(s) 2390 ( 0.00%) 1841767 ( 0.00%) 770.61
http(c) 36367 ( 0.03%) 4073770 ( 0.01%) 112.02
smtp 224 ( 0.00%) 45837 ( 0.00%) 204.63
ftp 44 ( 0.00%) 3920 ( 0.00%) 89.09
dns 194 ( 0.00%) 51388 ( 0.00%) 264.89
bgp 90 ( 0.00%) 14524 ( 0.00%) 161.38
other 157239 ( 0.12%) 205657274 ( 0.56%) 1307.93
udp6 30621 ( 0.02%) 8265126 ( 0.02%) 269.92
dns 28612 ( 0.02%) 7946263 ( 0.02%) 277.72
halflif 2 ( 0.00%) 203 ( 0.00%) 101.50
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2006 ( 0.00%) 318554 ( 0.00%) 158.80
icmp6 20067 ( 0.02%) 3083871 ( 0.01%) 153.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12411 ( 0.01%) 8773175 ( 0.02%) 706.89
tcpdump file: 201106041400.dump.gz (1902.73 MB)