Traffic Trace Info
DumpFile: 201106181400.dump
FileSize: 3552.00MB
Id: 201106181400
StartTime: Sat Jun 18 14:00:01 2011
EndTime: Sat Jun 18 14:15:01 2011
TotalTime: 899.69 seconds
TotalCapSize: -1292.56MB CapLen: 96 bytes
# of packets: 49056648 (30162.58MB)
AvgRate: 281.22Mbps stddev:47.83M
IP flow (unique src/dst pair) Information
# of flows: 1014957 (avg. 48.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.3% 2.0% 1.9% 1.7% 1.7% 1.6% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 493138
Top 10 bandwidth usage (bytes/total in %):
16.9% 7.8% 6.4% 6.3% 5.7% 4.8% 3.4% 2.5% 2.3% 2.1%
# of IPv6 addresses: 3511
Top 10 bandwidth usage (bytes/total in %):
47.7% 47.7% 32.9% 32.8% 9.9% 9.8% 2.0% 1.1% 0.9% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106181400.pktlen.png)
detailed numbers
[ 32- 63]: 11802668
[ 64- 127]: 14253411
[ 128- 255]: 1457071
[ 256- 511]: 1598894
[ 512- 1023]: 757223
[ 1024- 2047]: 19187381
Protocol Breakdown
![[protocol breakdown chart]](201106181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49056648 (100.00%) 31627760131 (100.00%) 644.72
ip 46537217 ( 94.86%) 31214556565 ( 98.69%) 670.74
tcp 37579489 ( 76.60%) 27704449392 ( 87.60%) 737.22
http(s) 17052220 ( 34.76%) 23876400316 ( 75.49%) 1400.19
http(c) 8691411 ( 17.72%) 1009171776 ( 3.19%) 116.11
squid 108644 ( 0.22%) 65344636 ( 0.21%) 601.46
smtp 134111 ( 0.27%) 73664523 ( 0.23%) 549.28
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 43746 ( 0.09%) 33814073 ( 0.11%) 772.96
pop3 17912 ( 0.04%) 3010590 ( 0.01%) 168.08
imap 12194 ( 0.02%) 9429817 ( 0.03%) 773.32
telnet 638 ( 0.00%) 69619 ( 0.00%) 109.12
ssh 99368 ( 0.20%) 84461368 ( 0.27%) 849.99
dns 17231 ( 0.04%) 1550630 ( 0.00%) 89.99
bgp 692 ( 0.00%) 221487 ( 0.00%) 320.07
napster 697 ( 0.00%) 47583 ( 0.00%) 68.27
realaud 1980 ( 0.00%) 127098 ( 0.00%) 64.19
rtsp 6236 ( 0.01%) 7670013 ( 0.02%) 1229.96
icecast 23303 ( 0.05%) 23234196 ( 0.07%) 997.05
hotline 76 ( 0.00%) 6103 ( 0.00%) 80.30
other 11369023 ( 23.18%) 2516225138 ( 7.96%) 221.32
udp 6587033 ( 13.43%) 2755737901 ( 8.71%) 418.36
dns 654051 ( 1.33%) 128639392 ( 0.41%) 196.68
realaud 35 ( 0.00%) 3118 ( 0.00%) 89.09
halflif 145 ( 0.00%) 26667 ( 0.00%) 183.91
starcra 16 ( 0.00%) 1811 ( 0.00%) 113.19
everque 1485 ( 0.00%) 1205586 ( 0.00%) 811.84
unreal 18 ( 0.00%) 5344 ( 0.00%) 296.89
quake 1891 ( 0.00%) 158723 ( 0.00%) 83.94
cuseeme 3 ( 0.00%) 300 ( 0.00%) 100.00
other 5929249 ( 12.09%) 2625600656 ( 8.30%) 442.82
icmp 396523 ( 0.81%) 61412657 ( 0.19%) 154.88
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 24 ( 0.00%) 4720 ( 0.00%) 196.67
ip6 1945627 ( 3.97%) 684979550 ( 2.17%) 352.06
other 28336 ( 0.06%) 7953075 ( 0.03%) 280.67
frag 781 ( 0.00%) 829089 ( 0.00%) 1061.57
ip6 2519431 ( 5.14%) 413203566 ( 1.31%) 164.01
tcp6 2429488 ( 4.95%) 386169079 ( 1.22%) 158.95
http(s) 7094 ( 0.01%) 6423895 ( 0.02%) 905.54
http(c) 2297782 ( 4.68%) 197764072 ( 0.63%) 86.07
smtp 241 ( 0.00%) 92919 ( 0.00%) 385.56
ftp 67 ( 0.00%) 5945 ( 0.00%) 88.73
dns 249 ( 0.00%) 61120 ( 0.00%) 245.46
bgp 95 ( 0.00%) 21824 ( 0.00%) 229.73
hotline 5 ( 0.00%) 583 ( 0.00%) 116.60
other 123955 ( 0.25%) 181798721 ( 0.57%) 1466.65
udp6 50041 ( 0.10%) 14646709 ( 0.05%) 292.69
dns 48600 ( 0.10%) 14421361 ( 0.05%) 296.74
everque 3 ( 0.00%) 328 ( 0.00%) 109.33
other 1438 ( 0.00%) 225020 ( 0.00%) 156.48
icmp6 28375 ( 0.06%) 4238858 ( 0.01%) 149.39
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11496 ( 0.02%) 8144704 ( 0.03%) 708.48
tcpdump file: 201106181400.dump.gz (1195.20 MB)