Traffic Trace Info
DumpFile: 201106081400.dump
FileSize: 7283.52MB
Id: 201106081400
StartTime: Wed Jun 8 14:00:02 2011
EndTime: Wed Jun 8 14:15:00 2011
TotalTime: 898.27 seconds
TotalCapSize: 1346.12MB CapLen: 96 bytes
# of packets: 120676833 (25704.28MB)
AvgRate: 241.19Mbps stddev:78.53M
IP flow (unique src/dst pair) Information
# of flows: 919308 (avg. 131.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.7% 9.7% 6.1% 5.0% 2.1% 1.4% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 480546
Top 10 bandwidth usage (bytes/total in %):
19.5% 9.7% 9.7% 8.2% 7.3% 6.5% 6.3% 5.2% 5.2% 3.3%
# of IPv6 addresses: 4902
Top 10 bandwidth usage (bytes/total in %):
15.4% 13.2% 10.7% 9.4% 4.7% 4.3% 4.3% 3.8% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106081400.pktlen.png)
detailed numbers
[ 32- 63]: 94093324
[ 64- 127]: 10206701
[ 128- 255]: 1488787
[ 256- 511]: 796400
[ 512- 1023]: 931527
[ 1024- 2047]: 13160094
Protocol Breakdown
![[protocol breakdown chart]](201106081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 120676833 (100.00%) 26952890043 (100.00%) 223.35
ip 120295542 ( 99.68%) 26785734620 ( 99.38%) 222.67
tcp 27619552 ( 22.89%) 19317481828 ( 71.67%) 699.41
http(s) 10483957 ( 8.69%) 14121921755 ( 52.39%) 1347.00
http(c) 7337421 ( 6.08%) 1088667480 ( 4.04%) 148.37
squid 67366 ( 0.06%) 39434251 ( 0.15%) 585.37
smtp 133490 ( 0.11%) 56852620 ( 0.21%) 425.89
nntp 4 ( 0.00%) 268 ( 0.00%) 67.00
ftp 286208 ( 0.24%) 320707616 ( 1.19%) 1120.54
pop3 11877 ( 0.01%) 5062567 ( 0.02%) 426.25
imap 7142 ( 0.01%) 5314302 ( 0.02%) 744.09
telnet 601 ( 0.00%) 54915 ( 0.00%) 91.37
ssh 1248122 ( 1.03%) 259403389 ( 0.96%) 207.83
dns 24253 ( 0.02%) 1989922 ( 0.01%) 82.05
bgp 591 ( 0.00%) 203985 ( 0.00%) 345.15
napster 599 ( 0.00%) 38099 ( 0.00%) 63.60
realaud 28 ( 0.00%) 2084 ( 0.00%) 74.43
rtsp 10829 ( 0.01%) 12265052 ( 0.05%) 1132.61
icecast 66555 ( 0.06%) 65098615 ( 0.24%) 978.12
hotline 26 ( 0.00%) 1612 ( 0.00%) 62.00
other 7940483 ( 6.58%) 3340463296 ( 12.39%) 420.69
udp 90800405 ( 75.24%) 6819776755 ( 25.30%) 75.11
dns 1004366 ( 0.83%) 201937504 ( 0.75%) 201.06
realaud 7 ( 0.00%) 1105 ( 0.00%) 157.86
halflif 67 ( 0.00%) 6807 ( 0.00%) 101.60
starcra 56 ( 0.00%) 7990 ( 0.00%) 142.68
everque 268 ( 0.00%) 52507 ( 0.00%) 195.92
unreal 10 ( 0.00%) 1684 ( 0.00%) 168.40
quake 880 ( 0.00%) 72471 ( 0.00%) 82.35
cuseeme 1 ( 0.00%) 89 ( 0.00%) 89.00
other 89794541 ( 74.41%) 6617572680 ( 24.55%) 73.70
icmp 497044 ( 0.41%) 61628556 ( 0.23%) 123.99
ipip 138 ( 0.00%) 14376 ( 0.00%) 104.17
ipsec 304 ( 0.00%) 70432 ( 0.00%) 231.68
ip6 1365813 ( 1.13%) 584022693 ( 2.17%) 427.60
other 12286 ( 0.01%) 2739980 ( 0.01%) 223.02
frag 841 ( 0.00%) 815840 ( 0.00%) 970.08
ip6 381291 ( 0.32%) 167155423 ( 0.62%) 438.39
tcp6 213669 ( 0.18%) 98775227 ( 0.37%) 462.28
http(s) 76533 ( 0.06%) 65703081 ( 0.24%) 858.49
http(c) 107961 ( 0.09%) 14374767 ( 0.05%) 133.15
squid 2 ( 0.00%) 152 ( 0.00%) 76.00
smtp 247 ( 0.00%) 100676 ( 0.00%) 407.60
ftp 48 ( 0.00%) 4307 ( 0.00%) 89.73
ssh 135 ( 0.00%) 15882 ( 0.00%) 117.64
dns 136 ( 0.00%) 30485 ( 0.00%) 224.15
bgp 162 ( 0.00%) 102919 ( 0.00%) 635.30
other 28445 ( 0.02%) 18442958 ( 0.07%) 648.37
udp6 114110 ( 0.09%) 39403880 ( 0.15%) 345.31
dns 109659 ( 0.09%) 38002391 ( 0.14%) 346.55
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 100 ( 0.00%) 100.00
other 4449 ( 0.00%) 1401288 ( 0.01%) 314.97
icmp6 16327 ( 0.01%) 2745552 ( 0.01%) 168.16
pim6 21 ( 0.00%) 2856 ( 0.00%) 136.00
other6 37164 ( 0.03%) 26227908 ( 0.10%) 705.73
tcpdump file: 201106081400.dump.gz (1784.26 MB)