Traffic Trace Info
DumpFile: 201106251400.dump
FileSize: 3141.73MB
Id: 201106251400
StartTime: Sat Jun 25 14:00:00 2011
EndTime: Sat Jun 25 14:15:00 2011
TotalTime: 899.62 seconds
TotalCapSize: -1631.37MB CapLen: 96 bytes
# of packets: 44371771 (30059.10MB)
AvgRate: 280.34Mbps stddev:52.42M
IP flow (unique src/dst pair) Information
# of flows: 1050244 (avg. 42.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.9% 2.5% 1.7% 1.5% 1.3% 1.3% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 524030
Top 10 bandwidth usage (bytes/total in %):
16.4% 15.0% 6.5% 5.5% 5.3% 5.1% 4.9% 2.5% 2.5% 2.2%
# of IPv6 addresses: 3402
Top 10 bandwidth usage (bytes/total in %):
62.9% 38.9% 29.7% 29.1% 14.0% 3.6% 2.6% 1.2% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106251400.pktlen.png)
detailed numbers
[ 32- 63]: 12559828
[ 64- 127]: 8624814
[ 128- 255]: 1146524
[ 256- 511]: 737511
[ 512- 1023]: 1968212
[ 1024- 2047]: 19334882
Protocol Breakdown
![[protocol breakdown chart]](201106251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44371771 (100.00%) 31519250751 (100.00%) 710.34
ip 43990955 ( 99.14%) 31163988369 ( 98.87%) 708.42
tcp 38341541 ( 86.41%) 28758540891 ( 91.24%) 750.06
http(s) 17735887 ( 39.97%) 21620144401 ( 68.59%) 1219.01
http(c) 10878434 ( 24.52%) 4985309042 ( 15.82%) 458.27
squid 148309 ( 0.33%) 73333673 ( 0.23%) 494.47
smtp 201764 ( 0.45%) 136810493 ( 0.43%) 678.07
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 56600 ( 0.13%) 42463145 ( 0.13%) 750.23
pop3 20886 ( 0.05%) 2012285 ( 0.01%) 96.35
imap 113018 ( 0.25%) 10609458 ( 0.03%) 93.87
telnet 44 ( 0.00%) 2700 ( 0.00%) 61.36
ssh 84380 ( 0.19%) 12342535 ( 0.04%) 146.27
dns 20615 ( 0.05%) 1754671 ( 0.01%) 85.12
bgp 592 ( 0.00%) 100840 ( 0.00%) 170.34
napster 163 ( 0.00%) 15589 ( 0.00%) 95.64
realaud 214 ( 0.00%) 15773 ( 0.00%) 73.71
rtsp 6296 ( 0.01%) 7694578 ( 0.02%) 1222.14
icecast 1585 ( 0.00%) 197943 ( 0.00%) 124.89
hotline 142 ( 0.00%) 9615 ( 0.00%) 67.71
other 9072608 ( 20.45%) 1865723904 ( 5.92%) 205.64
udp 4406386 ( 9.93%) 1862235528 ( 5.91%) 422.62
dns 837740 ( 1.89%) 143644591 ( 0.46%) 171.47
realaud 12 ( 0.00%) 1967 ( 0.00%) 163.92
halflif 186 ( 0.00%) 36691 ( 0.00%) 197.26
starcra 47 ( 0.00%) 9659 ( 0.00%) 205.51
everque 241 ( 0.00%) 54015 ( 0.00%) 224.13
unreal 76 ( 0.00%) 14810 ( 0.00%) 194.87
quake 1686 ( 0.00%) 136698 ( 0.00%) 81.08
cuseeme 8 ( 0.00%) 1398 ( 0.00%) 174.75
other 3566327 ( 8.04%) 1718310784 ( 5.45%) 481.82
icmp 448036 ( 1.01%) 68768469 ( 0.22%) 153.49
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9547 ( 0.02%) 2226818 ( 0.01%) 233.25
ip6 767553 ( 1.73%) 466748658 ( 1.48%) 608.10
other 17707 ( 0.04%) 5448735 ( 0.02%) 307.72
frag 449 ( 0.00%) 472008 ( 0.00%) 1051.24
ip6 380816 ( 0.86%) 355262382 ( 1.13%) 932.90
tcp6 323415 ( 0.73%) 341560063 ( 1.08%) 1056.10
http(s) 24584 ( 0.06%) 33529216 ( 0.11%) 1363.86
http(c) 91641 ( 0.21%) 8110921 ( 0.03%) 88.51
smtp 377 ( 0.00%) 73342 ( 0.00%) 194.54
ftp 85 ( 0.00%) 7666 ( 0.00%) 90.19
dns 344 ( 0.00%) 68359 ( 0.00%) 198.72
bgp 93 ( 0.00%) 18235 ( 0.00%) 196.08
other 206291 ( 0.46%) 299752324 ( 0.95%) 1453.06
udp6 34658 ( 0.08%) 9945186 ( 0.03%) 286.95
dns 33528 ( 0.08%) 9781700 ( 0.03%) 291.75
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
halflif 3 ( 0.00%) 318 ( 0.00%) 106.00
starcra 29 ( 0.00%) 2755 ( 0.00%) 95.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 4 ( 0.00%) 437 ( 0.00%) 109.25
other 1092 ( 0.00%) 159749 ( 0.00%) 146.29
icmp6 22455 ( 0.05%) 3499323 ( 0.01%) 155.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 258 ( 0.00%) 253730 ( 0.00%) 983.45
tcpdump file: 201106251400.dump.gz (1046.23 MB)