Traffic Trace Info
DumpFile: 201106151400.dump
FileSize: 8723.47MB
Id: 201106151400
StartTime: Wed Jun 15 14:00:01 2011
EndTime: Wed Jun 15 14:15:01 2011
TotalTime: 899.99 seconds
TotalCapSize: -1638.59MB CapLen: 96 bytes
# of packets: 142216200 (38316.84MB)
AvgRate: 357.20Mbps stddev:34.23M
IP flow (unique src/dst pair) Information
# of flows: 959654 (avg. 148.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.7% 5.9% 5.0% 2.9% 1.3% 1.3% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 452212
Top 10 bandwidth usage (bytes/total in %):
13.7% 13.4% 10.9% 8.0% 6.2% 5.3% 4.4% 4.1% 3.9% 3.3%
# of IPv6 addresses: 3865
Top 10 bandwidth usage (bytes/total in %):
63.6% 60.5% 14.3% 14.3% 10.4% 10.0% 2.1% 2.0% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106151400.pktlen.png)
detailed numbers
[ 32- 63]: 105005406
[ 64- 127]: 10823206
[ 128- 255]: 1637418
[ 256- 511]: 1118345
[ 512- 1023]: 2995154
[ 1024- 2047]: 20636671
Protocol Breakdown
![[protocol breakdown chart]](201106151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 142216200 (100.00%) 40178115980 (100.00%) 282.51
ip 141629962 ( 99.59%) 39545468823 ( 98.43%) 279.22
tcp 46655576 ( 32.81%) 30821366129 ( 76.71%) 660.61
http(s) 16812320 ( 11.82%) 19604810830 ( 48.79%) 1166.10
http(c) 14895269 ( 10.47%) 6664010278 ( 16.59%) 447.39
squid 192464 ( 0.14%) 106700216 ( 0.27%) 554.39
smtp 185605 ( 0.13%) 93225975 ( 0.23%) 502.28
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 44667 ( 0.03%) 32519701 ( 0.08%) 728.05
pop3 15118 ( 0.01%) 4226985 ( 0.01%) 279.60
imap 15761 ( 0.01%) 12563999 ( 0.03%) 797.16
telnet 497 ( 0.00%) 53615 ( 0.00%) 107.88
ssh 112342 ( 0.08%) 20446641 ( 0.05%) 182.00
dns 24900 ( 0.02%) 2456521 ( 0.01%) 98.66
bgp 753 ( 0.00%) 283340 ( 0.00%) 376.28
napster 2494 ( 0.00%) 160571 ( 0.00%) 64.38
realaud 107 ( 0.00%) 9090 ( 0.00%) 84.95
rtsp 26011 ( 0.02%) 11448601 ( 0.03%) 440.14
icecast 8114 ( 0.01%) 4695417 ( 0.01%) 578.68
hotline 117 ( 0.00%) 7352 ( 0.00%) 62.84
other 14319031 ( 10.07%) 4263746631 ( 10.61%) 297.77
udp 92997277 ( 65.39%) 7911995803 ( 19.69%) 85.08
dns 924674 ( 0.65%) 195783482 ( 0.49%) 211.73
realaud 17 ( 0.00%) 1570 ( 0.00%) 92.35
halflif 73 ( 0.00%) 5285 ( 0.00%) 72.40
starcra 13 ( 0.00%) 2065 ( 0.00%) 158.85
everque 2046 ( 0.00%) 254321 ( 0.00%) 124.30
unreal 30 ( 0.00%) 3142 ( 0.00%) 104.73
quake 1253 ( 0.00%) 102372 ( 0.00%) 81.70
cuseeme 3 ( 0.00%) 382 ( 0.00%) 127.33
other 92068537 ( 64.74%) 7715626186 ( 19.20%) 83.80
icmp 452838 ( 0.32%) 81142809 ( 0.20%) 179.19
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 32633 ( 0.02%) 30928704 ( 0.08%) 947.77
ip6 1474512 ( 1.04%) 695504116 ( 1.73%) 471.68
other 16942 ( 0.01%) 4512102 ( 0.01%) 266.33
frag 1771 ( 0.00%) 1605177 ( 0.00%) 906.37
ip6 586238 ( 0.41%) 632647157 ( 1.57%) 1079.16
tcp6 479782 ( 0.34%) 601693923 ( 1.50%) 1254.10
http(s) 19879 ( 0.01%) 23218895 ( 0.06%) 1168.01
http(c) 65609 ( 0.05%) 5746858 ( 0.01%) 87.59
squid 5 ( 0.00%) 523 ( 0.00%) 104.60
smtp 829 ( 0.00%) 116072 ( 0.00%) 140.01
ftp 156 ( 0.00%) 13973 ( 0.00%) 89.57
dns 262 ( 0.00%) 59155 ( 0.00%) 225.78
bgp 88 ( 0.00%) 21022 ( 0.00%) 238.89
other 392954 ( 0.28%) 572517425 ( 1.42%) 1456.96
udp6 71516 ( 0.05%) 21373065 ( 0.05%) 298.86
dns 64253 ( 0.05%) 20554031 ( 0.05%) 319.89
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 2 ( 0.00%) 224 ( 0.00%) 112.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 7259 ( 0.01%) 818594 ( 0.00%) 112.77
icmp6 27460 ( 0.02%) 4219515 ( 0.01%) 153.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7450 ( 0.01%) 5356574 ( 0.01%) 719.00
tcpdump file: 201106151400.dump.gz (2276.28 MB)