Traffic Trace Info
DumpFile: 201107031400.dump
FileSize: 2709.05MB
Id: 201107031400
StartTime: Sun Jul 3 14:00:01 2011
EndTime: Sun Jul 3 14:15:00 2011
TotalTime: 899.38 seconds
TotalCapSize: -1969.12MB CapLen: 96 bytes
# of packets: 38150893 (23237.33MB)
AvgRate: 216.75Mbps stddev:50.13M
IP flow (unique src/dst pair) Information
# of flows: 747727 (avg. 51.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.1% 2.2% 1.8% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 361658
Top 10 bandwidth usage (bytes/total in %):
22.5% 19.7% 19.7% 3.7% 2.6% 2.6% 2.3% 2.2% 2.1% 2.0%
# of IPv6 addresses: 3137
Top 10 bandwidth usage (bytes/total in %):
30.8% 29.4% 27.9% 27.3% 10.1% 6.2% 6.2% 6.2% 5.6% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107031400.pktlen.png)
detailed numbers
[ 32- 63]: 10658836
[ 64- 127]: 10149184
[ 128- 255]: 1074141
[ 256- 511]: 656032
[ 512- 1023]: 718313
[ 1024- 2047]: 14894387
Protocol Breakdown
![[protocol breakdown chart]](201107031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38150893 (100.00%) 24366104030 (100.00%) 638.68
ip 37921958 ( 99.40%) 24208331305 ( 99.35%) 638.37
tcp 32017891 ( 83.92%) 21334634274 ( 87.56%) 666.33
http(s) 10160980 ( 26.63%) 13736876483 ( 56.38%) 1351.92
http(c) 5822306 ( 15.26%) 718439797 ( 2.95%) 123.39
squid 103727 ( 0.27%) 73018324 ( 0.30%) 703.95
smtp 109856 ( 0.29%) 22891883 ( 0.09%) 208.38
ftp 52627 ( 0.14%) 38286495 ( 0.16%) 727.51
pop3 1935291 ( 5.07%) 135484086 ( 0.56%) 70.01
imap 4200 ( 0.01%) 1698359 ( 0.01%) 404.37
telnet 844 ( 0.00%) 96071 ( 0.00%) 113.83
ssh 130353 ( 0.34%) 25488736 ( 0.10%) 195.54
dns 14925 ( 0.04%) 1147912 ( 0.00%) 76.91
bgp 551 ( 0.00%) 87963 ( 0.00%) 159.64
napster 367 ( 0.00%) 24515 ( 0.00%) 66.80
realaud 52 ( 0.00%) 3302 ( 0.00%) 63.50
rtsp 6159 ( 0.02%) 3392515 ( 0.01%) 550.82
icecast 6879 ( 0.02%) 1168483 ( 0.00%) 169.86
hotline 100 ( 0.00%) 6725 ( 0.00%) 67.25
other 13668674 ( 35.83%) 6576522625 ( 26.99%) 481.14
udp 4743067 ( 12.43%) 2423274290 ( 9.95%) 510.91
dns 406654 ( 1.07%) 93274451 ( 0.38%) 229.37
realaud 74 ( 0.00%) 13995 ( 0.00%) 189.12
halflif 500 ( 0.00%) 37861 ( 0.00%) 75.72
starcra 47 ( 0.00%) 4869 ( 0.00%) 103.60
everque 402 ( 0.00%) 71248 ( 0.00%) 177.23
unreal 36 ( 0.00%) 6593 ( 0.00%) 183.14
quake 1788 ( 0.00%) 146589 ( 0.00%) 81.98
cuseeme 4 ( 0.00%) 360 ( 0.00%) 90.00
other 4333496 ( 11.36%) 2329684783 ( 9.56%) 537.60
icmp 391897 ( 1.03%) 72833321 ( 0.30%) 185.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9056 ( 0.02%) 2089424 ( 0.01%) 230.72
ip6 743959 ( 1.95%) 370385738 ( 1.52%) 497.86
other 15903 ( 0.04%) 5094988 ( 0.02%) 320.38
frag 518 ( 0.00%) 527481 ( 0.00%) 1018.30
ip6 228933 ( 0.60%) 157772605 ( 0.65%) 689.16
tcp6 175280 ( 0.46%) 141740802 ( 0.58%) 808.65
http(s) 13914 ( 0.04%) 14727693 ( 0.06%) 1058.48
http(c) 61721 ( 0.16%) 5492739 ( 0.02%) 88.99
squid 11 ( 0.00%) 1050 ( 0.00%) 95.45
smtp 193 ( 0.00%) 73499 ( 0.00%) 380.82
ftp 25 ( 0.00%) 2297 ( 0.00%) 91.88
dns 262 ( 0.00%) 65160 ( 0.00%) 248.70
bgp 94 ( 0.00%) 17268 ( 0.00%) 183.70
icecast 1 ( 0.00%) 94 ( 0.00%) 94.00
other 99059 ( 0.26%) 121361002 ( 0.50%) 1225.14
udp6 30286 ( 0.08%) 8290129 ( 0.03%) 273.73
dns 27556 ( 0.07%) 7468100 ( 0.03%) 271.02
everque 1 ( 0.00%) 97 ( 0.00%) 97.00
quake 2 ( 0.00%) 220 ( 0.00%) 110.00
other 2727 ( 0.01%) 821712 ( 0.00%) 301.32
icmp6 16811 ( 0.04%) 3095912 ( 0.01%) 184.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6526 ( 0.02%) 4641682 ( 0.02%) 711.26
tcpdump file: 201107031400.dump.gz (903.33 MB)