Traffic Trace Info
DumpFile: 201106201400.dump
FileSize: 4313.01MB
Id: 201106201400
StartTime: Mon Jun 20 14:00:01 2011
EndTime: Mon Jun 20 14:15:00 2011
TotalTime: 899.63 seconds
TotalCapSize: -720.69MB CapLen: 96 bytes
# of packets: 61452069 (38441.07MB)
AvgRate: 358.56Mbps stddev:40.08M
IP flow (unique src/dst pair) Information
# of flows: 1185676 (avg. 51.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 10.0% 4.0% 3.3% 1.4% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 551873
Top 10 bandwidth usage (bytes/total in %):
16.4% 12.6% 11.7% 11.3% 10.5% 6.5% 4.4% 4.2% 3.4% 3.2%
# of IPv6 addresses: 4344
Top 10 bandwidth usage (bytes/total in %):
60.1% 25.4% 17.5% 17.2% 13.8% 12.5% 8.1% 4.8% 4.7% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106201400.pktlen.png)
detailed numbers
[ 32- 63]: 18010983
[ 64- 127]: 12500738
[ 128- 255]: 2151808
[ 256- 511]: 1046148
[ 512- 1023]: 3805625
[ 1024- 2047]: 23936767
Protocol Breakdown
![[protocol breakdown chart]](201106201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 61452069 (100.00%) 40308380377 (100.00%) 655.93
ip 61090429 ( 99.41%) 39963692633 ( 99.14%) 654.17
tcp 51803255 ( 84.30%) 36268199746 ( 89.98%) 700.11
http(s) 20777793 ( 33.81%) 24136290046 ( 59.88%) 1161.64
http(c) 18767725 ( 30.54%) 8221506183 ( 20.40%) 438.07
squid 102977 ( 0.17%) 60971962 ( 0.15%) 592.09
smtp 317406 ( 0.52%) 163043391 ( 0.40%) 513.67
ftp 48351 ( 0.08%) 35375050 ( 0.09%) 731.63
pop3 38437 ( 0.06%) 8932220 ( 0.02%) 232.39
imap 12545 ( 0.02%) 9326066 ( 0.02%) 743.41
telnet 535 ( 0.00%) 35736 ( 0.00%) 66.80
ssh 38426 ( 0.06%) 11125909 ( 0.03%) 289.54
dns 29864 ( 0.05%) 2630327 ( 0.01%) 88.08
bgp 544 ( 0.00%) 92205 ( 0.00%) 169.49
napster 1024 ( 0.00%) 68000 ( 0.00%) 66.41
realaud 175 ( 0.00%) 13086 ( 0.00%) 74.78
rtsp 8768 ( 0.01%) 10422328 ( 0.03%) 1188.68
icecast 10682 ( 0.02%) 4760527 ( 0.01%) 445.66
hotline 42 ( 0.00%) 2772 ( 0.00%) 66.00
other 11647959 ( 18.95%) 3603603818 ( 8.94%) 309.38
udp 6424108 ( 10.45%) 2762582968 ( 6.85%) 430.03
dns 866628 ( 1.41%) 170559417 ( 0.42%) 196.81
realaud 6 ( 0.00%) 851 ( 0.00%) 141.83
halflif 84 ( 0.00%) 6576 ( 0.00%) 78.29
starcra 52 ( 0.00%) 7442 ( 0.00%) 143.12
everque 498 ( 0.00%) 106408 ( 0.00%) 213.67
unreal 88 ( 0.00%) 21812 ( 0.00%) 247.86
quake 1836 ( 0.00%) 146369 ( 0.00%) 79.72
cuseeme 1 ( 0.00%) 89 ( 0.00%) 89.00
other 5554850 ( 9.04%) 2591708180 ( 6.43%) 466.57
icmp 415052 ( 0.68%) 50845782 ( 0.13%) 122.50
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 79 ( 0.00%) 15798 ( 0.00%) 199.97
ip6 2429112 ( 3.95%) 876814979 ( 2.18%) 360.96
other 18639 ( 0.03%) 5214200 ( 0.01%) 279.75
frag 560 ( 0.00%) 602195 ( 0.00%) 1075.35
ip6 361640 ( 0.59%) 344687744 ( 0.86%) 953.12
tcp6 253613 ( 0.41%) 307491712 ( 0.76%) 1212.44
http(s) 10168 ( 0.02%) 9236211 ( 0.02%) 908.36
http(c) 18406 ( 0.03%) 1571535 ( 0.00%) 85.38
smtp 644 ( 0.00%) 146148 ( 0.00%) 226.94
ftp 70 ( 0.00%) 6338 ( 0.00%) 90.54
dns 371 ( 0.00%) 89852 ( 0.00%) 242.19
bgp 97 ( 0.00%) 28500 ( 0.00%) 293.81
other 223857 ( 0.36%) 296413128 ( 0.74%) 1324.12
udp6 70910 ( 0.12%) 23180942 ( 0.06%) 326.91
dns 65185 ( 0.11%) 22415133 ( 0.06%) 343.87
starcra 4 ( 0.00%) 368 ( 0.00%) 92.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
unreal 1 ( 0.00%) 159 ( 0.00%) 159.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 5717 ( 0.01%) 764968 ( 0.00%) 133.81
icmp6 22414 ( 0.04%) 3572309 ( 0.01%) 159.38
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 14672 ( 0.02%) 10438565 ( 0.03%) 711.46
tcpdump file: 201106201400.dump.gz (1458.59 MB)