Traffic Trace Info
DumpFile: 201106171400.dump
FileSize: 2743.10MB
Id: 201106171400
StartTime: Fri Jun 17 14:00:01 2011
EndTime: Fri Jun 17 14:15:00 2011
TotalTime: 899.52 seconds
TotalCapSize: -1940.07MB CapLen: 96 bytes
# of packets: 38480275 (22911.95MB)
AvgRate: 213.66Mbps stddev:32.76M
IP flow (unique src/dst pair) Information
# of flows: 1318683 (avg. 29.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.7% 2.3% 1.5% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 629073
Top 10 bandwidth usage (bytes/total in %):
10.9% 5.0% 3.5% 3.2% 3.1% 3.0% 3.0% 2.8% 2.6% 2.5%
# of IPv6 addresses: 3768
Top 10 bandwidth usage (bytes/total in %):
67.9% 42.8% 26.2% 8.0% 5.9% 3.9% 3.3% 3.0% 1.7% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106171400.pktlen.png)
detailed numbers
[ 32- 63]: 11132310
[ 64- 127]: 9421723
[ 128- 255]: 1640307
[ 256- 511]: 864235
[ 512- 1023]: 899190
[ 1024- 2047]: 14522510
Protocol Breakdown
![[protocol breakdown chart]](201106171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38480275 (100.00%) 24024918070 (100.00%) 624.34
ip 38216272 ( 99.31%) 23801202775 ( 99.07%) 622.80
tcp 32240085 ( 83.78%) 21628363309 ( 90.02%) 670.85
http(s) 12240649 ( 31.81%) 15764681904 ( 65.62%) 1287.90
http(c) 10243177 ( 26.62%) 3067528994 ( 12.77%) 299.47
squid 85775 ( 0.22%) 32615930 ( 0.14%) 380.25
smtp 236012 ( 0.61%) 150651581 ( 0.63%) 638.32
ftp 43176 ( 0.11%) 28290755 ( 0.12%) 655.24
pop3 16567 ( 0.04%) 6237254 ( 0.03%) 376.49
imap 5195 ( 0.01%) 1674998 ( 0.01%) 322.43
telnet 668 ( 0.00%) 60678 ( 0.00%) 90.84
ssh 17903 ( 0.05%) 3254788 ( 0.01%) 181.80
dns 20489 ( 0.05%) 1937500 ( 0.01%) 94.56
bgp 594 ( 0.00%) 127606 ( 0.00%) 214.82
napster 117 ( 0.00%) 7816 ( 0.00%) 66.80
realaud 92 ( 0.00%) 7399 ( 0.00%) 80.42
rtsp 10320 ( 0.03%) 11743297 ( 0.05%) 1137.92
icecast 5608 ( 0.01%) 868712 ( 0.00%) 154.91
hotline 123 ( 0.00%) 10148 ( 0.00%) 82.50
other 9313617 ( 24.20%) 2558663769 ( 10.65%) 274.72
udp 4335037 ( 11.27%) 1569960483 ( 6.53%) 362.16
dns 856879 ( 2.23%) 178791800 ( 0.74%) 208.65
realaud 34 ( 0.00%) 2483 ( 0.00%) 73.03
halflif 88 ( 0.00%) 7091 ( 0.00%) 80.58
starcra 23 ( 0.00%) 3517 ( 0.00%) 152.91
everque 454 ( 0.00%) 101404 ( 0.00%) 223.36
unreal 29 ( 0.00%) 2934 ( 0.00%) 101.17
quake 1903 ( 0.00%) 154058 ( 0.00%) 80.96
cuseeme 4 ( 0.00%) 647 ( 0.00%) 161.75
other 3472525 ( 9.02%) 1390642041 ( 5.79%) 400.47
icmp 409075 ( 1.06%) 64388632 ( 0.27%) 157.40
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 125 ( 0.00%) 23214 ( 0.00%) 185.71
ip6 1186904 ( 3.08%) 513022547 ( 2.14%) 432.24
other 44861 ( 0.12%) 25425320 ( 0.11%) 566.76
frag 18732 ( 0.05%) 14204924 ( 0.06%) 758.32
ip6 264003 ( 0.69%) 223715295 ( 0.93%) 847.40
tcp6 175613 ( 0.46%) 197905269 ( 0.82%) 1126.94
http(s) 18558 ( 0.05%) 18667854 ( 0.08%) 1005.92
http(c) 17212 ( 0.04%) 1548008 ( 0.01%) 89.94
smtp 131 ( 0.00%) 29451 ( 0.00%) 224.82
ftp 93 ( 0.00%) 8258 ( 0.00%) 88.80
dns 293 ( 0.00%) 77354 ( 0.00%) 264.01
bgp 92 ( 0.00%) 15376 ( 0.00%) 167.13
other 139234 ( 0.36%) 177558968 ( 0.74%) 1275.26
udp6 61662 ( 0.16%) 20046314 ( 0.08%) 325.10
dns 59407 ( 0.15%) 19773860 ( 0.08%) 332.85
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 103 ( 0.00%) 103.00
other 2253 ( 0.01%) 272240 ( 0.00%) 120.83
icmp6 24218 ( 0.06%) 3895658 ( 0.02%) 160.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2480 ( 0.01%) 1863974 ( 0.01%) 751.60
tcpdump file: 201106171400.dump.gz (965.75 MB)