Traffic Trace Info
DumpFile: 201106221400.dump
FileSize: 2969.80MB
Id: 201106221400
StartTime: Wed Jun 22 14:00:00 2011
EndTime: Wed Jun 22 14:15:00 2011
TotalTime: 899.91 seconds
TotalCapSize: -1744.90MB CapLen: 96 bytes
# of packets: 40545030 (21264.37MB)
AvgRate: 198.21Mbps stddev:31.76M
IP flow (unique src/dst pair) Information
# of flows: 1167464 (avg. 34.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 2.1% 1.4% 1.3% 1.3% 1.2% 1.1% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 568260
Top 10 bandwidth usage (bytes/total in %):
11.7% 9.0% 6.1% 3.9% 2.7% 2.6% 2.5% 2.3% 2.3% 2.2%
# of IPv6 addresses: 4445
Top 10 bandwidth usage (bytes/total in %):
44.7% 30.4% 30.4% 19.6% 16.1% 9.2% 9.1% 2.5% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106221400.pktlen.png)
detailed numbers
[ 32- 63]: 10902179
[ 64- 127]: 13068674
[ 128- 255]: 1359267
[ 256- 511]: 907506
[ 512- 1023]: 1009139
[ 1024- 2047]: 13298265
Protocol Breakdown
![[protocol breakdown chart]](201106221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40545030 (100.00%) 22297308813 (100.00%) 549.94
ip 38153405 ( 94.10%) 21781929125 ( 97.69%) 570.90
tcp 31974949 ( 78.86%) 19226220380 ( 86.23%) 601.29
http(s) 9749810 ( 24.05%) 12330584660 ( 55.30%) 1264.70
http(c) 9895231 ( 24.41%) 2090149626 ( 9.37%) 211.23
squid 71572 ( 0.18%) 33719164 ( 0.15%) 471.12
smtp 322993 ( 0.80%) 257602063 ( 1.16%) 797.55
ftp 14312 ( 0.04%) 2192858 ( 0.01%) 153.22
pop3 31589 ( 0.08%) 2909195 ( 0.01%) 92.10
imap 5567 ( 0.01%) 2523608 ( 0.01%) 453.32
telnet 1071 ( 0.00%) 76434 ( 0.00%) 71.37
ssh 66198 ( 0.16%) 9361954 ( 0.04%) 141.42
dns 19531 ( 0.05%) 1925245 ( 0.01%) 98.57
bgp 625 ( 0.00%) 148668 ( 0.00%) 237.87
napster 611 ( 0.00%) 40671 ( 0.00%) 66.56
realaud 46 ( 0.00%) 7130 ( 0.00%) 155.00
rtsp 8670 ( 0.02%) 10404936 ( 0.05%) 1200.11
icecast 2683 ( 0.01%) 554321 ( 0.00%) 206.60
hotline 81 ( 0.00%) 5134 ( 0.00%) 63.38
other 11784359 ( 29.06%) 4484014713 ( 20.11%) 380.51
udp 4745545 ( 11.70%) 1761290029 ( 7.90%) 371.15
dns 863619 ( 2.13%) 179300718 ( 0.80%) 207.62
realaud 15 ( 0.00%) 1575 ( 0.00%) 105.00
halflif 91 ( 0.00%) 7247 ( 0.00%) 79.64
starcra 27 ( 0.00%) 3418 ( 0.00%) 126.59
everque 286 ( 0.00%) 62366 ( 0.00%) 218.06
unreal 48 ( 0.00%) 9094 ( 0.00%) 189.46
quake 1869 ( 0.00%) 150466 ( 0.00%) 80.51
cuseeme 5 ( 0.00%) 450 ( 0.00%) 90.00
other 3879366 ( 9.57%) 1581667765 ( 7.09%) 407.71
icmp 518715 ( 1.28%) 76309198 ( 0.34%) 147.11
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10614 ( 0.03%) 9943268 ( 0.04%) 936.81
ip6 884356 ( 2.18%) 702001632 ( 3.15%) 793.80
other 19042 ( 0.05%) 6145458 ( 0.03%) 322.73
frag 2279 ( 0.01%) 1821724 ( 0.01%) 799.35
ip6 2391625 ( 5.90%) 515379688 ( 2.31%) 215.49
tcp6 2296436 ( 5.66%) 485589359 ( 2.18%) 211.45
http(s) 30421 ( 0.08%) 35098248 ( 0.16%) 1153.75
http(c) 2038133 ( 5.03%) 173623488 ( 0.78%) 85.19
smtp 678 ( 0.00%) 165854 ( 0.00%) 244.62
ftp 85 ( 0.00%) 7666 ( 0.00%) 90.19
imap 336 ( 0.00%) 176986 ( 0.00%) 526.74
dns 453 ( 0.00%) 103317 ( 0.00%) 228.07
bgp 96 ( 0.00%) 23857 ( 0.00%) 248.51
icecast 3 ( 0.00%) 234 ( 0.00%) 78.00
other 226231 ( 0.56%) 276389709 ( 1.24%) 1221.71
udp6 60741 ( 0.15%) 19601191 ( 0.09%) 322.70
dns 53250 ( 0.13%) 17306603 ( 0.08%) 325.01
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
other 7488 ( 0.02%) 2294267 ( 0.01%) 306.39
icmp6 25812 ( 0.06%) 4004082 ( 0.02%) 155.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8606 ( 0.02%) 6180976 ( 0.03%) 718.22
tcpdump file: 201106221400.dump.gz (1028.58 MB)