Traffic Trace Info
DumpFile: 201107041400.dump
FileSize: 3600.88MB
Id: 201107041400
StartTime: Mon Jul 4 14:00:00 2011
EndTime: Mon Jul 4 14:15:01 2011
TotalTime: 900.63 seconds
TotalCapSize: -1268.83MB CapLen: 96 bytes
# of packets: 50704957 (28645.31MB)
AvgRate: 266.82Mbps stddev:42.66M
IP flow (unique src/dst pair) Information
# of flows: 1112509 (avg. 45.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 2.2% 1.8% 1.7% 1.5% 1.3% 1.1% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 515869
Top 10 bandwidth usage (bytes/total in %):
14.6% 9.0% 6.3% 4.1% 3.3% 3.1% 3.0% 2.9% 2.6% 2.5%
# of IPv6 addresses: 4206
Top 10 bandwidth usage (bytes/total in %):
38.8% 19.0% 12.8% 11.7% 9.5% 9.5% 8.2% 7.6% 7.5% 7.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107041400.pktlen.png)
detailed numbers
[ 32- 63]: 16432657
[ 64- 127]: 12485901
[ 128- 255]: 1434886
[ 256- 511]: 1090214
[ 512- 1023]: 1038435
[ 1024- 2047]: 18222864
Protocol Breakdown
![[protocol breakdown chart]](201107041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50704957 (100.00%) 30036780759 (100.00%) 592.38
ip 50133769 ( 98.87%) 29834183055 ( 99.33%) 595.09
tcp 44004298 ( 86.79%) 26893489792 ( 89.54%) 611.16
http(s) 14758849 ( 29.11%) 18517964411 ( 61.65%) 1254.70
http(c) 16716768 ( 32.97%) 4886754634 ( 16.27%) 292.33
squid 115746 ( 0.23%) 51785251 ( 0.17%) 447.40
smtp 224648 ( 0.44%) 133775405 ( 0.45%) 595.49
ftp 55331 ( 0.11%) 41690517 ( 0.14%) 753.47
pop3 48994 ( 0.10%) 5119436 ( 0.02%) 104.49
imap 4257 ( 0.01%) 1097199 ( 0.00%) 257.74
telnet 405 ( 0.00%) 61508 ( 0.00%) 151.87
ssh 51128 ( 0.10%) 9674114 ( 0.03%) 189.21
dns 27269 ( 0.05%) 2437207 ( 0.01%) 89.38
bgp 547 ( 0.00%) 96936 ( 0.00%) 177.21
napster 774 ( 0.00%) 51012 ( 0.00%) 65.91
realaud 70 ( 0.00%) 4400 ( 0.00%) 62.86
rtsp 8954 ( 0.02%) 10488993 ( 0.03%) 1171.43
icecast 1979 ( 0.00%) 298969 ( 0.00%) 151.07
hotline 198 ( 0.00%) 42426 ( 0.00%) 214.27
other 11988381 ( 23.64%) 3232147374 ( 10.76%) 269.61
udp 4663963 ( 9.20%) 2317023177 ( 7.71%) 496.79
dns 725250 ( 1.43%) 171542104 ( 0.57%) 236.53
realaud 1889 ( 0.00%) 122347 ( 0.00%) 64.77
halflif 237 ( 0.00%) 45779 ( 0.00%) 193.16
starcra 46 ( 0.00%) 5003 ( 0.00%) 108.76
everque 570 ( 0.00%) 73712 ( 0.00%) 129.32
unreal 38 ( 0.00%) 7163 ( 0.00%) 188.50
quake 1838 ( 0.00%) 149249 ( 0.00%) 81.20
cuseeme 4 ( 0.00%) 327 ( 0.00%) 81.75
other 3933837 ( 7.76%) 2145007760 ( 7.14%) 545.27
icmp 692920 ( 1.37%) 87777292 ( 0.29%) 126.68
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9075 ( 0.02%) 2093122 ( 0.01%) 230.65
ip6 744115 ( 1.47%) 529549469 ( 1.76%) 711.65
other 19213 ( 0.04%) 4230933 ( 0.01%) 220.21
frag 1535 ( 0.00%) 1356402 ( 0.00%) 883.65
ip6 571188 ( 1.13%) 202597704 ( 0.67%) 354.70
tcp6 496949 ( 0.98%) 180807122 ( 0.60%) 363.83
http(s) 34724 ( 0.07%) 41453266 ( 0.14%) 1193.79
http(c) 83500 ( 0.16%) 7166464 ( 0.02%) 85.83
smtp 227 ( 0.00%) 70392 ( 0.00%) 310.10
ftp 4532 ( 0.01%) 454792 ( 0.00%) 100.35
dns 363 ( 0.00%) 83695 ( 0.00%) 230.56
bgp 92 ( 0.00%) 19285 ( 0.00%) 209.62
other 373511 ( 0.74%) 131559228 ( 0.44%) 352.22
udp6 50573 ( 0.10%) 15570372 ( 0.05%) 307.88
dns 48056 ( 0.09%) 15264626 ( 0.05%) 317.64
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 96 ( 0.00%) 96.00
other 2515 ( 0.00%) 305537 ( 0.00%) 121.49
icmp6 19497 ( 0.04%) 3224478 ( 0.01%) 165.38
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4138 ( 0.01%) 2991516 ( 0.01%) 722.94
tcpdump file: 201107041400.dump.gz (1242.21 MB)