Traffic Trace Info
DumpFile: 201106111400.dump
FileSize: 2626.11MB
Id: 201106111400
StartTime: Sat Jun 11 14:00:00 2011
EndTime: Sat Jun 11 14:15:00 2011
TotalTime: 900.06 seconds
TotalCapSize: -2014.87MB CapLen: 96 bytes
# of packets: 35714783 (23597.07MB)
AvgRate: 219.94Mbps stddev:45.81M
IP flow (unique src/dst pair) Information
# of flows: 1083264 (avg. 32.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.8% 4.6% 2.3% 2.0% 1.1% 1.0% 0.9% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 513006
Top 10 bandwidth usage (bytes/total in %):
20.2% 10.0% 10.0% 7.1% 5.6% 4.8% 3.2% 2.8% 2.8% 2.4%
# of IPv6 addresses: 3589
Top 10 bandwidth usage (bytes/total in %):
38.6% 24.1% 21.8% 17.4% 15.6% 15.6% 14.5% 9.5% 7.6% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106111400.pktlen.png)
detailed numbers
[ 32- 63]: 7889360
[ 64- 127]: 8917114
[ 128- 255]: 1814867
[ 256- 511]: 816289
[ 512- 1023]: 727929
[ 1024- 2047]: 15549224
Protocol Breakdown
![[protocol breakdown chart]](201106111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35714783 (100.00%) 24743324712 (100.00%) 692.80
ip 34361897 ( 96.21%) 24218286961 ( 97.88%) 704.80
tcp 25181064 ( 70.51%) 18940594801 ( 76.55%) 752.18
http(s) 11532556 ( 32.29%) 15642058009 ( 63.22%) 1356.34
http(c) 6658050 ( 18.64%) 1234283705 ( 4.99%) 185.38
squid 163497 ( 0.46%) 108575689 ( 0.44%) 664.08
smtp 136479 ( 0.38%) 37449844 ( 0.15%) 274.40
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 51047 ( 0.14%) 37873049 ( 0.15%) 741.93
pop3 8660 ( 0.02%) 1628819 ( 0.01%) 188.09
imap 15441 ( 0.04%) 16905314 ( 0.07%) 1094.83
telnet 57923 ( 0.16%) 4163236 ( 0.02%) 71.88
ssh 22215 ( 0.06%) 3952220 ( 0.02%) 177.91
dns 17599 ( 0.05%) 1635854 ( 0.01%) 92.95
bgp 579 ( 0.00%) 97627 ( 0.00%) 168.61
napster 90 ( 0.00%) 5893 ( 0.00%) 65.48
realaud 114 ( 0.00%) 25322 ( 0.00%) 222.12
rtsp 8758 ( 0.02%) 10433863 ( 0.04%) 1191.35
icecast 13063 ( 0.04%) 5703724 ( 0.02%) 436.63
hotline 119 ( 0.00%) 8486 ( 0.00%) 71.31
other 6494866 ( 18.19%) 1835793661 ( 7.42%) 282.65
udp 5105052 ( 14.29%) 2082841205 ( 8.42%) 408.00
dns 592352 ( 1.66%) 117938764 ( 0.48%) 199.10
rip 2 ( 0.00%) 496 ( 0.00%) 248.00
realaud 186 ( 0.00%) 15106 ( 0.00%) 81.22
halflif 99 ( 0.00%) 8434 ( 0.00%) 85.19
starcra 52 ( 0.00%) 8265 ( 0.00%) 158.94
everque 239 ( 0.00%) 54817 ( 0.00%) 229.36
unreal 16 ( 0.00%) 2521 ( 0.00%) 157.56
quake 1910 ( 0.01%) 154330 ( 0.00%) 80.80
cuseeme 4 ( 0.00%) 325 ( 0.00%) 81.25
other 4509642 ( 12.63%) 1964551410 ( 7.94%) 435.63
icmp 412078 ( 1.15%) 69159649 ( 0.28%) 167.83
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 300 ( 0.00%) 47672 ( 0.00%) 158.91
ip6 3646058 ( 10.21%) 3119880029 ( 12.61%) 855.69
other 17161 ( 0.05%) 5744445 ( 0.02%) 334.74
frag 5332 ( 0.01%) 4517611 ( 0.02%) 847.26
ip6 1352886 ( 3.79%) 525037751 ( 2.12%) 388.09
tcp6 1298795 ( 3.64%) 512146539 ( 2.07%) 394.32
http(s) 35693 ( 0.10%) 50566395 ( 0.20%) 1416.70
http(c) 32709 ( 0.09%) 2704129 ( 0.01%) 82.67
smtp 71 ( 0.00%) 24619 ( 0.00%) 346.75
ftp 67 ( 0.00%) 5945 ( 0.00%) 88.73
ssh 931785 ( 2.61%) 81817878 ( 0.33%) 87.81
dns 266 ( 0.00%) 54942 ( 0.00%) 206.55
bgp 92 ( 0.00%) 17559 ( 0.00%) 190.86
other 298112 ( 0.83%) 376955072 ( 1.52%) 1264.47
udp6 33127 ( 0.09%) 9372385 ( 0.04%) 282.92
dns 31465 ( 0.09%) 9046113 ( 0.04%) 287.50
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 1659 ( 0.00%) 325951 ( 0.00%) 196.47
icmp6 20660 ( 0.06%) 3257247 ( 0.01%) 157.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 274 ( 0.00%) 257500 ( 0.00%) 939.78
tcpdump file: 201106111400.dump.gz (873.43 MB)