Traffic Trace Info
DumpFile: 201106121400.dump
FileSize: 3228.63MB
Id: 201106121400
StartTime: Sun Jun 12 14:00:00 2011
EndTime: Sun Jun 12 14:15:01 2011
TotalTime: 900.56 seconds
TotalCapSize: -1531.55MB CapLen: 96 bytes
# of packets: 43525478 (25579.51MB)
AvgRate: 238.27Mbps stddev:33.92M
IP flow (unique src/dst pair) Information
# of flows: 1028246 (avg. 42.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 4.2% 4.1% 1.6% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 503147
Top 10 bandwidth usage (bytes/total in %):
17.2% 9.2% 9.2% 5.5% 5.1% 4.3% 4.3% 4.2% 4.2% 3.7%
# of IPv6 addresses: 3425
Top 10 bandwidth usage (bytes/total in %):
36.7% 21.8% 20.2% 19.2% 18.8% 17.5% 9.8% 9.0% 8.0% 8.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106121400.pktlen.png)
detailed numbers
[ 32- 63]: 11752424
[ 64- 127]: 11910337
[ 128- 255]: 1785161
[ 256- 511]: 739299
[ 512- 1023]: 880990
[ 1024- 2047]: 16457267
Protocol Breakdown
![[protocol breakdown chart]](201106121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43525478 (100.00%) 26822058702 (100.00%) 616.24
ip 42428658 ( 97.48%) 26602797860 ( 99.18%) 627.00
tcp 32736193 ( 75.21%) 20800138127 ( 77.55%) 635.39
http(s) 11886775 ( 27.31%) 15754456075 ( 58.74%) 1325.38
http(c) 6339278 ( 14.56%) 923318803 ( 3.44%) 145.65
squid 207003 ( 0.48%) 154662240 ( 0.58%) 747.15
smtp 178253 ( 0.41%) 95109288 ( 0.35%) 533.56
ftp 29587 ( 0.07%) 16167204 ( 0.06%) 546.43
pop3 5115 ( 0.01%) 2296140 ( 0.01%) 448.90
imap 3134 ( 0.01%) 1470112 ( 0.01%) 469.08
telnet 6782 ( 0.02%) 449737 ( 0.00%) 66.31
ssh 490884 ( 1.13%) 68530016 ( 0.26%) 139.61
dns 12583 ( 0.03%) 1012753 ( 0.00%) 80.49
bgp 554 ( 0.00%) 94459 ( 0.00%) 170.50
napster 2025 ( 0.00%) 128366 ( 0.00%) 63.39
realaud 301 ( 0.00%) 31878 ( 0.00%) 105.91
rtsp 14871 ( 0.03%) 17977509 ( 0.07%) 1208.90
icecast 3300 ( 0.01%) 612366 ( 0.00%) 185.57
hotline 118 ( 0.00%) 8456 ( 0.00%) 71.66
other 13555630 ( 31.14%) 3763812725 ( 14.03%) 277.66
udp 5190371 ( 11.92%) 2156736932 ( 8.04%) 415.53
dns 528554 ( 1.21%) 94998975 ( 0.35%) 179.73
realaud 896 ( 0.00%) 54288 ( 0.00%) 60.59
halflif 65 ( 0.00%) 5267 ( 0.00%) 81.03
starcra 25 ( 0.00%) 2687 ( 0.00%) 107.48
everque 314 ( 0.00%) 52119 ( 0.00%) 165.98
unreal 9 ( 0.00%) 862 ( 0.00%) 95.78
quake 1342 ( 0.00%) 109241 ( 0.00%) 81.40
cuseeme 5 ( 0.00%) 938 ( 0.00%) 187.60
other 4658896 ( 10.70%) 2061409476 ( 7.69%) 442.47
icmp 377314 ( 0.87%) 60842474 ( 0.23%) 161.25
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 304 ( 0.00%) 48448 ( 0.00%) 159.37
ip6 4108041 ( 9.44%) 3580670176 ( 13.35%) 871.62
other 16250 ( 0.04%) 4342433 ( 0.02%) 267.23
frag 1150 ( 0.00%) 960686 ( 0.00%) 835.38
ip6 1096820 ( 2.52%) 219260842 ( 0.82%) 199.91
tcp6 1005669 ( 2.31%) 180763310 ( 0.67%) 179.74
http(s) 5878 ( 0.01%) 6082562 ( 0.02%) 1034.80
http(c) 15673 ( 0.04%) 1444088 ( 0.01%) 92.14
smtp 75 ( 0.00%) 8511 ( 0.00%) 113.48
ftp 93 ( 0.00%) 8394 ( 0.00%) 90.26
ssh 913327 ( 2.10%) 80464566 ( 0.30%) 88.10
dns 268 ( 0.00%) 64147 ( 0.00%) 239.35
bgp 95 ( 0.00%) 18864 ( 0.00%) 198.57
other 70260 ( 0.16%) 92672178 ( 0.35%) 1318.99
udp6 30349 ( 0.07%) 8396645 ( 0.03%) 276.67
dns 28889 ( 0.07%) 8185108 ( 0.03%) 283.33
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1458 ( 0.00%) 211319 ( 0.00%) 144.94
icmp6 22877 ( 0.05%) 3426860 ( 0.01%) 149.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 37895 ( 0.09%) 26669947 ( 0.10%) 703.79
tcpdump file: 201106121400.dump.gz (1107.89 MB)