Traffic Trace Info
DumpFile: 201107071400.dump
FileSize: 3118.35MB
Id: 201107071400
StartTime: Thu Jul 7 14:00:00 2011
EndTime: Thu Jul 7 14:15:01 2011
TotalTime: 900.60 seconds
TotalCapSize: -1637.09MB CapLen: 96 bytes
# of packets: 43213534 (27793.26MB)
AvgRate: 258.89Mbps stddev:35.96M
IP flow (unique src/dst pair) Information
# of flows: 1182866 (avg. 36.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 5.0% 2.2% 2.1% 1.4% 1.3% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 621479
Top 10 bandwidth usage (bytes/total in %):
16.5% 9.7% 7.4% 6.6% 5.1% 4.0% 3.3% 3.2% 2.3% 2.2%
# of IPv6 addresses: 4021
Top 10 bandwidth usage (bytes/total in %):
65.7% 35.0% 30.6% 12.5% 6.3% 5.9% 4.4% 3.2% 3.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107071400.pktlen.png)
detailed numbers
[ 32- 63]: 10392152
[ 64- 127]: 11348903
[ 128- 255]: 1335803
[ 256- 511]: 1085133
[ 512- 1023]: 984865
[ 1024- 2047]: 18066678
Protocol Breakdown
![[protocol breakdown chart]](201107071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43213534 (100.00%) 29143340191 (100.00%) 674.40
ip 42855197 ( 99.17%) 28854958990 ( 99.01%) 673.31
tcp 36351193 ( 84.12%) 25163037367 ( 86.34%) 692.22
http(s) 12511982 ( 28.95%) 16557743704 ( 56.81%) 1323.35
http(c) 10134435 ( 23.45%) 1972161463 ( 6.77%) 194.60
squid 371200 ( 0.86%) 260961491 ( 0.90%) 703.02
smtp 214643 ( 0.50%) 136659341 ( 0.47%) 636.68
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 1069696 ( 2.48%) 1498834728 ( 5.14%) 1401.18
pop3 18925 ( 0.04%) 2682164 ( 0.01%) 141.73
imap 4889 ( 0.01%) 3086583 ( 0.01%) 631.33
telnet 748 ( 0.00%) 83698 ( 0.00%) 111.90
ssh 325463 ( 0.75%) 56261951 ( 0.19%) 172.87
dns 36682 ( 0.08%) 2944507 ( 0.01%) 80.27
bgp 583 ( 0.00%) 123625 ( 0.00%) 212.05
napster 248 ( 0.00%) 17104 ( 0.00%) 68.97
realaud 102 ( 0.00%) 7682 ( 0.00%) 75.31
rtsp 10474 ( 0.02%) 12278152 ( 0.04%) 1172.25
icecast 3347 ( 0.01%) 400603 ( 0.00%) 119.69
hotline 31 ( 0.00%) 2215 ( 0.00%) 71.45
other 11647739 ( 26.95%) 4658787990 ( 15.99%) 399.97
udp 5175415 ( 11.98%) 3029109064 ( 10.39%) 585.29
dns 733395 ( 1.70%) 164597889 ( 0.56%) 224.43
realaud 14 ( 0.00%) 1908 ( 0.00%) 136.29
halflif 3065 ( 0.01%) 207976 ( 0.00%) 67.86
starcra 61 ( 0.00%) 10306 ( 0.00%) 168.95
everque 291 ( 0.00%) 48551 ( 0.00%) 166.84
unreal 35 ( 0.00%) 6132 ( 0.00%) 175.20
quake 1840 ( 0.00%) 152004 ( 0.00%) 82.61
cuseeme 15 ( 0.00%) 1428 ( 0.00%) 95.20
other 4436616 ( 10.27%) 2864043584 ( 9.83%) 645.55
icmp 499103 ( 1.15%) 97007666 ( 0.33%) 194.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 13926 ( 0.03%) 4266544 ( 0.01%) 306.37
ip6 798099 ( 1.85%) 555738792 ( 1.91%) 696.33
other 17276 ( 0.04%) 5780287 ( 0.02%) 334.58
frag 415 ( 0.00%) 426910 ( 0.00%) 1028.70
ip6 358337 ( 0.83%) 288381201 ( 0.99%) 804.78
tcp6 291035 ( 0.67%) 270395459 ( 0.93%) 929.08
http(s) 23142 ( 0.05%) 28402692 ( 0.10%) 1227.32
http(c) 89817 ( 0.21%) 7755308 ( 0.03%) 86.35
squid 267 ( 0.00%) 151358 ( 0.00%) 566.88
smtp 155 ( 0.00%) 80624 ( 0.00%) 520.15
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 229 ( 0.00%) 50679 ( 0.00%) 221.31
bgp 88 ( 0.00%) 17906 ( 0.00%) 203.48
other 177320 ( 0.41%) 233935287 ( 0.80%) 1319.28
udp6 47322 ( 0.11%) 14681331 ( 0.05%) 310.24
dns 45771 ( 0.11%) 14493335 ( 0.05%) 316.65
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 2 ( 0.00%) 219 ( 0.00%) 109.50
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1546 ( 0.00%) 187449 ( 0.00%) 121.25
icmp6 19640 ( 0.05%) 3001905 ( 0.01%) 152.85
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 309 ( 0.00%) 298290 ( 0.00%) 965.34
tcpdump file: 201107071400.dump.gz (1062.24 MB)