Traffic Trace Info
DumpFile: 201106101400.dump
FileSize: 8373.19MB
Id: 201106101400
StartTime: Fri Jun 10 14:00:01 2011
EndTime: Fri Jun 10 14:15:01 2011
TotalTime: 899.96 seconds
TotalCapSize: -1907.65MB CapLen: 96 bytes
# of packets: 136893401 (29798.13MB)
AvgRate: 277.90Mbps stddev:36.64M
IP flow (unique src/dst pair) Information
# of flows: 1061303 (avg. 128.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.3% 9.5% 4.7% 1.4% 1.2% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 517307
Top 10 bandwidth usage (bytes/total in %):
18.3% 13.5% 9.7% 9.7% 5.6% 4.8% 4.7% 4.4% 2.5% 2.1%
# of IPv6 addresses: 3965
Top 10 bandwidth usage (bytes/total in %):
37.5% 37.5% 18.2% 16.2% 16.2% 9.3% 8.2% 7.6% 5.6% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106101400.pktlen.png)
detailed numbers
[ 32- 63]: 104562857
[ 64- 127]: 12518248
[ 128- 255]: 2402335
[ 256- 511]: 908015
[ 512- 1023]: 1177865
[ 1024- 2047]: 15324081
Protocol Breakdown
![[protocol breakdown chart]](201106101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 136893401 (100.00%) 31245606364 (100.00%) 228.25
ip 135290617 ( 98.83%) 30746819315 ( 98.40%) 227.26
tcp 31133603 ( 22.74%) 18736372916 ( 59.96%) 601.81
http(s) 10953445 ( 8.00%) 14312224350 ( 45.81%) 1306.64
http(c) 8850163 ( 6.47%) 1605641228 ( 5.14%) 181.43
squid 243433 ( 0.18%) 178851626 ( 0.57%) 734.71
smtp 156508 ( 0.11%) 64468568 ( 0.21%) 411.92
ftp 59574 ( 0.04%) 41872327 ( 0.13%) 702.86
pop3 54987 ( 0.04%) 4853074 ( 0.02%) 88.26
imap 4609 ( 0.00%) 1482494 ( 0.00%) 321.65
telnet 1098 ( 0.00%) 92945 ( 0.00%) 84.65
ssh 209470 ( 0.15%) 32008372 ( 0.10%) 152.81
dns 22220 ( 0.02%) 2238601 ( 0.01%) 100.75
bgp 596 ( 0.00%) 125100 ( 0.00%) 209.90
napster 98 ( 0.00%) 9084 ( 0.00%) 92.69
realaud 2032 ( 0.00%) 129896 ( 0.00%) 63.93
rtsp 8682 ( 0.01%) 10394806 ( 0.03%) 1197.28
icecast 1434 ( 0.00%) 256219 ( 0.00%) 178.67
hotline 74 ( 0.00%) 4750 ( 0.00%) 64.19
other 10565180 ( 7.72%) 2481719476 ( 7.94%) 234.90
udp 99851284 ( 72.94%) 8286209530 ( 26.52%) 82.99
dns 791060 ( 0.58%) 170691433 ( 0.55%) 215.78
realaud 9366 ( 0.01%) 6719890 ( 0.02%) 717.48
halflif 71 ( 0.00%) 5561 ( 0.00%) 78.32
starcra 66 ( 0.00%) 8618 ( 0.00%) 130.58
everque 635 ( 0.00%) 90458 ( 0.00%) 142.45
unreal 42 ( 0.00%) 4276 ( 0.00%) 101.81
quake 1976 ( 0.00%) 161335 ( 0.00%) 81.65
cuseeme 5 ( 0.00%) 475 ( 0.00%) 95.00
other 99047057 ( 72.35%) 8108359109 ( 25.95%) 81.86
icmp 513148 ( 0.37%) 105231575 ( 0.34%) 205.07
ipip 182 ( 0.00%) 18976 ( 0.00%) 104.26
ipsec 1021 ( 0.00%) 603274 ( 0.00%) 590.87
ip6 3775224 ( 2.76%) 3614116623 ( 11.57%) 957.33
other 16155 ( 0.01%) 4266421 ( 0.01%) 264.09
frag 1931 ( 0.00%) 1215684 ( 0.00%) 629.56
ip6 1602784 ( 1.17%) 498787049 ( 1.60%) 311.20
tcp6 1528794 ( 1.12%) 478348697 ( 1.53%) 312.89
http(s) 66550 ( 0.05%) 96331173 ( 0.31%) 1447.50
http(c) 236997 ( 0.17%) 18006634 ( 0.06%) 75.98
squid 29 ( 0.00%) 12638 ( 0.00%) 435.79
smtp 179 ( 0.00%) 106016 ( 0.00%) 592.27
ftp 65 ( 0.00%) 5769 ( 0.00%) 88.75
ssh 1035704 ( 0.76%) 91470960 ( 0.29%) 88.32
dns 299 ( 0.00%) 68280 ( 0.00%) 228.36
bgp 95 ( 0.00%) 16435 ( 0.00%) 173.00
other 188876 ( 0.14%) 272330792 ( 0.87%) 1441.85
udp6 46535 ( 0.03%) 14744084 ( 0.05%) 316.84
dns 43778 ( 0.03%) 13973811 ( 0.04%) 319.20
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 2754 ( 0.00%) 769952 ( 0.00%) 279.58
icmp6 24354 ( 0.02%) 3454990 ( 0.01%) 141.87
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3070 ( 0.00%) 2235062 ( 0.01%) 728.03
tcpdump file: 201106101400.dump.gz (2117.65 MB)