Traffic Trace Info
DumpFile: 201106231400.dump
FileSize: 3227.44MB
Id: 201106231400
StartTime: Thu Jun 23 14:00:00 2011
EndTime: Thu Jun 23 14:15:00 2011
TotalTime: 900.08 seconds
TotalCapSize: -1546.60MB CapLen: 96 bytes
# of packets: 44434745 (27670.34MB)
AvgRate: 257.85Mbps stddev:31.08M
IP flow (unique src/dst pair) Information
# of flows: 1083080 (avg. 41.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 2.4% 1.7% 1.4% 1.0% 0.8% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 511264
Top 10 bandwidth usage (bytes/total in %):
7.5% 7.5% 5.5% 4.6% 3.9% 3.7% 3.6% 3.1% 2.6% 2.6%
# of IPv6 addresses: 4079
Top 10 bandwidth usage (bytes/total in %):
56.2% 39.3% 24.9% 17.4% 16.9% 7.7% 4.2% 3.9% 2.1% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106231400.pktlen.png)
detailed numbers
[ 32- 63]: 10531536
[ 64- 127]: 12585651
[ 128- 255]: 1431916
[ 256- 511]: 1015511
[ 512- 1023]: 949922
[ 1024- 2047]: 17920209
Protocol Breakdown
![[protocol breakdown chart]](201106231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44434745 (100.00%) 29014455614 (100.00%) 652.97
ip 43952487 ( 98.91%) 28649050599 ( 98.74%) 651.82
tcp 37838786 ( 85.16%) 26017176290 ( 89.67%) 687.58
http(s) 13778679 ( 31.01%) 18074500493 ( 62.29%) 1311.77
http(c) 10497298 ( 23.62%) 2428532826 ( 8.37%) 231.35
squid 139317 ( 0.31%) 96486995 ( 0.33%) 692.57
smtp 285447 ( 0.64%) 159081389 ( 0.55%) 557.31
nntp 114 ( 0.00%) 7174 ( 0.00%) 62.93
ftp 52013 ( 0.12%) 37129170 ( 0.13%) 713.84
pop3 65310 ( 0.15%) 9755326 ( 0.03%) 149.37
imap 4113 ( 0.01%) 1097237 ( 0.00%) 266.77
telnet 308 ( 0.00%) 22078 ( 0.00%) 71.68
ssh 223030 ( 0.50%) 122623443 ( 0.42%) 549.81
dns 22776 ( 0.05%) 2146773 ( 0.01%) 94.26
bgp 554 ( 0.00%) 91043 ( 0.00%) 164.34
napster 196 ( 0.00%) 16689 ( 0.00%) 85.15
realaud 94 ( 0.00%) 7029 ( 0.00%) 74.78
rtsp 28911 ( 0.07%) 33674650 ( 0.12%) 1164.77
icecast 1046 ( 0.00%) 163350 ( 0.00%) 156.17
hotline 61 ( 0.00%) 5372 ( 0.00%) 88.07
other 12739519 ( 28.67%) 5051835253 ( 17.41%) 396.55
udp 4822492 ( 10.85%) 2014281425 ( 6.94%) 417.68
dns 882066 ( 1.99%) 181779149 ( 0.63%) 206.08
realaud 9 ( 0.00%) 1340 ( 0.00%) 148.89
halflif 65 ( 0.00%) 6423 ( 0.00%) 98.82
starcra 15 ( 0.00%) 1705 ( 0.00%) 113.67
everque 24209 ( 0.05%) 4585750 ( 0.02%) 189.42
unreal 27 ( 0.00%) 4502 ( 0.00%) 166.74
quake 1358 ( 0.00%) 110526 ( 0.00%) 81.39
cuseeme 9 ( 0.00%) 812 ( 0.00%) 90.22
other 3914633 ( 8.81%) 1827743401 ( 6.30%) 466.90
icmp 453094 ( 1.02%) 68985311 ( 0.24%) 152.25
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9775 ( 0.02%) 2296906 ( 0.01%) 234.98
ip6 810246 ( 1.82%) 540870953 ( 1.86%) 667.54
other 17909 ( 0.04%) 5420444 ( 0.02%) 302.67
frag 559 ( 0.00%) 584474 ( 0.00%) 1045.57
ip6 482258 ( 1.09%) 365405015 ( 1.26%) 757.70
tcp6 403571 ( 0.91%) 343705467 ( 1.18%) 851.66
http(s) 38772 ( 0.09%) 52047172 ( 0.18%) 1342.39
http(c) 164559 ( 0.37%) 13243999 ( 0.05%) 80.48
smtp 108 ( 0.00%) 30024 ( 0.00%) 278.00
ftp 153 ( 0.00%) 14555 ( 0.00%) 95.13
dns 411 ( 0.00%) 102434 ( 0.00%) 249.23
bgp 92 ( 0.00%) 20361 ( 0.00%) 221.32
other 199476 ( 0.45%) 278246922 ( 0.96%) 1394.89
udp6 53715 ( 0.12%) 17210531 ( 0.06%) 320.40
dns 52339 ( 0.12%) 17018277 ( 0.06%) 325.15
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1373 ( 0.00%) 191930 ( 0.00%) 139.79
icmp6 24236 ( 0.05%) 3854983 ( 0.01%) 159.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 706 ( 0.00%) 629954 ( 0.00%) 892.29
tcpdump file: 201106231400.dump.gz (1127.77 MB)