Traffic Trace Info
DumpFile: 201106241400.dump
FileSize: 3036.65MB
Id: 201106241400
StartTime: Fri Jun 24 14:00:01 2011
EndTime: Fri Jun 24 14:15:01 2011
TotalTime: 900.34 seconds
TotalCapSize: -1701.28MB CapLen: 96 bytes
# of packets: 42066608 (24204.20MB)
AvgRate: 225.49Mbps stddev:41.98M
IP flow (unique src/dst pair) Information
# of flows: 1181389 (avg. 35.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.8% 1.7% 1.7% 1.6% 1.6% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 536264
Top 10 bandwidth usage (bytes/total in %):
8.2% 5.2% 4.3% 3.9% 3.7% 3.6% 3.1% 2.8% 2.8% 2.8%
# of IPv6 addresses: 4415
Top 10 bandwidth usage (bytes/total in %):
43.0% 31.0% 22.8% 22.7% 6.9% 6.9% 5.6% 4.8% 4.7% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106241400.pktlen.png)
detailed numbers
[ 32- 63]: 12777708
[ 64- 127]: 10536734
[ 128- 255]: 1468659
[ 256- 511]: 1032818
[ 512- 1023]: 965942
[ 1024- 2047]: 15284747
Protocol Breakdown
![[protocol breakdown chart]](201106241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42066608 (100.00%) 25379942462 (100.00%) 603.33
ip 41684813 ( 99.09%) 25170471427 ( 99.17%) 603.83
tcp 36259869 ( 86.20%) 22972899839 ( 90.52%) 633.56
http(s) 14256459 ( 33.89%) 17979908284 ( 70.84%) 1261.18
http(c) 9144158 ( 21.74%) 1986948855 ( 7.83%) 217.29
squid 140691 ( 0.33%) 63896417 ( 0.25%) 454.16
smtp 212089 ( 0.50%) 117531639 ( 0.46%) 554.16
nntp 14 ( 0.00%) 874 ( 0.00%) 62.43
ftp 56884 ( 0.14%) 38301019 ( 0.15%) 673.32
pop3 15288 ( 0.04%) 2350532 ( 0.01%) 153.75
imap 5272 ( 0.01%) 3207646 ( 0.01%) 608.43
telnet 669 ( 0.00%) 79054 ( 0.00%) 118.17
ssh 155125 ( 0.37%) 68201057 ( 0.27%) 439.65
dns 22841 ( 0.05%) 2144163 ( 0.01%) 93.87
bgp 572 ( 0.00%) 113559 ( 0.00%) 198.53
napster 251 ( 0.00%) 24035 ( 0.00%) 95.76
realaud 209 ( 0.00%) 14387 ( 0.00%) 68.84
rtsp 8681 ( 0.02%) 10408955 ( 0.04%) 1199.05
icecast 21436 ( 0.05%) 16877857 ( 0.07%) 787.36
hotline 129 ( 0.00%) 8449 ( 0.00%) 65.50
other 12219101 ( 29.05%) 2682883057 ( 10.57%) 219.56
udp 3974528 ( 9.45%) 1364743737 ( 5.38%) 343.37
dns 860477 ( 2.05%) 174361529 ( 0.69%) 202.63
realaud 20 ( 0.00%) 2855 ( 0.00%) 142.75
halflif 762 ( 0.00%) 137795 ( 0.00%) 180.83
starcra 15 ( 0.00%) 3125 ( 0.00%) 208.33
everque 733 ( 0.00%) 185046 ( 0.00%) 252.45
unreal 26 ( 0.00%) 3018 ( 0.00%) 116.08
quake 1783 ( 0.00%) 140280 ( 0.00%) 78.68
cuseeme 8 ( 0.00%) 1039 ( 0.00%) 129.88
other 3110610 ( 7.39%) 1189841260 ( 4.69%) 382.51
icmp 600169 ( 1.43%) 92469891 ( 0.36%) 154.07
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9684 ( 0.02%) 2318504 ( 0.01%) 239.42
ip6 818585 ( 1.95%) 730770928 ( 2.88%) 892.72
other 21793 ( 0.05%) 7249258 ( 0.03%) 332.64
frag 627 ( 0.00%) 693651 ( 0.00%) 1106.30
ip6 381795 ( 0.91%) 209471035 ( 0.83%) 548.65
tcp6 298392 ( 0.71%) 187582916 ( 0.74%) 628.65
http(s) 17187 ( 0.04%) 20538575 ( 0.08%) 1195.01
http(c) 156330 ( 0.37%) 13246857 ( 0.05%) 84.74
squid 1 ( 0.00%) 82 ( 0.00%) 82.00
smtp 270 ( 0.00%) 48540 ( 0.00%) 179.78
ftp 86 ( 0.00%) 7829 ( 0.00%) 91.03
dns 280 ( 0.00%) 65541 ( 0.00%) 234.07
bgp 97 ( 0.00%) 24159 ( 0.00%) 249.06
other 124141 ( 0.30%) 153651333 ( 0.61%) 1237.72
udp6 57932 ( 0.14%) 17091686 ( 0.07%) 295.03
dns 45834 ( 0.11%) 14869632 ( 0.06%) 324.42
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 2 ( 0.00%) 204 ( 0.00%) 102.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 12094 ( 0.03%) 2221642 ( 0.01%) 183.70
icmp6 24169 ( 0.06%) 3749628 ( 0.01%) 155.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1272 ( 0.00%) 1042725 ( 0.00%) 819.75
tcpdump file: 201106241400.dump.gz (1090.69 MB)