Traffic Trace Info
DumpFile: 201106071400.dump
FileSize: 7259.41MB
Id: 201106071400
StartTime: Tue Jun 7 14:00:01 2011
EndTime: Tue Jun 7 14:15:02 2011
TotalTime: 900.32 seconds
TotalCapSize: 1355.46MB CapLen: 96 bytes
# of packets: 118485300 (27312.57MB)
AvgRate: 254.46Mbps stddev:60.28M
IP flow (unique src/dst pair) Information
# of flows: 1305070 (avg. 90.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 6.1% 5.9% 2.4% 2.3% 1.6% 1.6% 1.4% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 690125
Top 10 bandwidth usage (bytes/total in %):
17.0% 7.7% 6.5% 6.2% 6.2% 6.1% 5.3% 4.8% 2.8% 2.5%
# of IPv6 addresses: 3619
Top 10 bandwidth usage (bytes/total in %):
73.4% 73.4% 5.2% 2.8% 2.4% 2.4% 1.5% 1.4% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106071400.pktlen.png)
detailed numbers
[ 32- 63]: 90144071
[ 64- 127]: 10202968
[ 128- 255]: 1886935
[ 256- 511]: 804552
[ 512- 1023]: 870524
[ 1024- 2047]: 14576250
Protocol Breakdown
![[protocol breakdown chart]](201106071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 118485300 (100.00%) 28639306544 (100.00%) 241.71
ip 118272730 ( 99.82%) 28506826253 ( 99.54%) 241.03
tcp 29580853 ( 24.97%) 19810040002 ( 69.17%) 669.69
http(s) 11509344 ( 9.71%) 14667920565 ( 51.22%) 1274.44
http(c) 9079620 ( 7.66%) 2632317857 ( 9.19%) 289.91
squid 151506 ( 0.13%) 116805557 ( 0.41%) 770.96
smtp 272574 ( 0.23%) 224761018 ( 0.78%) 824.59
nntp 613 ( 0.00%) 37956 ( 0.00%) 61.92
ftp 30547 ( 0.03%) 17719952 ( 0.06%) 580.09
pop3 55372 ( 0.05%) 10073383 ( 0.04%) 181.92
imap 3665 ( 0.00%) 1240154 ( 0.00%) 338.38
telnet 874 ( 0.00%) 86687 ( 0.00%) 99.18
ssh 39457 ( 0.03%) 23966997 ( 0.08%) 607.42
dns 17983 ( 0.02%) 1616502 ( 0.01%) 89.89
bgp 498 ( 0.00%) 103227 ( 0.00%) 207.28
napster 1019 ( 0.00%) 67339 ( 0.00%) 66.08
realaud 66 ( 0.00%) 5470 ( 0.00%) 82.88
rtsp 12128 ( 0.01%) 13790071 ( 0.05%) 1137.04
icecast 6107 ( 0.01%) 3255563 ( 0.01%) 533.09
hotline 45 ( 0.00%) 6973 ( 0.00%) 154.96
other 8399434 ( 7.09%) 2096264671 ( 7.32%) 249.57
udp 86599127 ( 73.09%) 7822880626 ( 27.32%) 90.33
dns 7972648 ( 6.73%) 583204797 ( 2.04%) 73.15
realaud 14 ( 0.00%) 1295 ( 0.00%) 92.50
halflif 79 ( 0.00%) 6559 ( 0.00%) 83.03
starcra 34 ( 0.00%) 4641 ( 0.00%) 136.50
everque 388 ( 0.00%) 89270 ( 0.00%) 230.08
unreal 118 ( 0.00%) 94632 ( 0.00%) 801.97
quake 1538 ( 0.00%) 125666 ( 0.00%) 81.71
cuseeme 26 ( 0.00%) 2673 ( 0.00%) 102.81
other 78624107 ( 66.36%) 7239237683 ( 25.28%) 92.07
icmp 572370 ( 0.48%) 82284871 ( 0.29%) 143.76
ipip 151 ( 0.00%) 15758 ( 0.00%) 104.36
ipsec 758 ( 0.00%) 211488 ( 0.00%) 279.01
ip6 1505895 ( 1.27%) 787443494 ( 2.75%) 522.91
other 13576 ( 0.01%) 3950014 ( 0.01%) 290.96
frag 855 ( 0.00%) 819575 ( 0.00%) 958.57
ip6 212570 ( 0.18%) 132480291 ( 0.46%) 623.23
tcp6 152938 ( 0.13%) 117646359 ( 0.41%) 769.24
http(s) 3610 ( 0.00%) 2686238 ( 0.01%) 744.11
http(c) 67569 ( 0.06%) 5640549 ( 0.02%) 83.48
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 207 ( 0.00%) 67377 ( 0.00%) 325.49
ftp 52 ( 0.00%) 4700 ( 0.00%) 90.38
dns 229 ( 0.00%) 58175 ( 0.00%) 254.04
bgp 71 ( 0.00%) 14506 ( 0.00%) 204.31
other 81194 ( 0.07%) 109174306 ( 0.38%) 1344.61
udp6 36677 ( 0.03%) 10530291 ( 0.04%) 287.11
dns 34465 ( 0.03%) 10236820 ( 0.04%) 297.02
halflif 1 ( 0.00%) 122 ( 0.00%) 122.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 2207 ( 0.00%) 292910 ( 0.00%) 132.72
icmp6 21533 ( 0.02%) 3216497 ( 0.01%) 149.38
pim6 24 ( 0.00%) 3264 ( 0.00%) 136.00
other6 1398 ( 0.00%) 1083880 ( 0.00%) 775.31
tcpdump file: 201106071400.dump.gz (1825.52 MB)