Traffic Trace Info
DumpFile: 201107211400.dump
FileSize: 6802.32MB
Id: 201107211400
StartTime: Thu Jul 21 14:00:03 2011
EndTime: Thu Jul 21 14:13:38 2011
TotalTime: 814.47 seconds
TotalCapSize: 1013.20MB CapLen: 96 bytes
# of packets: 110959840 (34302.79MB)
AvgRate: 353.38Mbps stddev:54.41M
IP flow (unique src/dst pair) Information
# of flows: 881873 (avg. 125.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.8% 14.8% 3.9% 2.2% 1.5% 1.4% 1.2% 1.0% 0.9% 0.6%
IP address Information
# of IPv4 addresses: 394273
Top 10 bandwidth usage (bytes/total in %):
17.9% 17.9% 14.9% 14.9% 8.9% 4.5% 4.4% 4.2% 4.1% 2.9%
# of IPv6 addresses: 3854
Top 10 bandwidth usage (bytes/total in %):
35.1% 25.8% 20.1% 17.3% 14.9% 12.0% 8.1% 3.9% 3.7% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107211400.pktlen.png)
detailed numbers
[ 32- 63]: 10232416
[ 64- 127]: 78994222
[ 128- 255]: 1360383
[ 256- 511]: 690743
[ 512- 1023]: 835201
[ 1024- 2047]: 18846875
Protocol Breakdown
![[protocol breakdown chart]](201107211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 110959840 (100.00%) 35969078393 (100.00%) 324.16
ip 110761586 ( 99.82%) 35862616511 ( 99.70%) 323.78
tcp 36334829 ( 32.75%) 27518449170 ( 76.51%) 757.36
http(s) 13316834 ( 12.00%) 17967028073 ( 49.95%) 1349.20
http(c) 8173828 ( 7.37%) 1683085135 ( 4.68%) 205.91
squid 90009 ( 0.08%) 57233618 ( 0.16%) 635.87
smtp 131700 ( 0.12%) 68945528 ( 0.19%) 523.50
nntp 4 ( 0.00%) 244 ( 0.00%) 61.00
ftp 54590 ( 0.05%) 28709264 ( 0.08%) 525.91
pop3 43682 ( 0.04%) 8872963 ( 0.02%) 203.13
imap 10317 ( 0.01%) 4975011 ( 0.01%) 482.21
telnet 437 ( 0.00%) 59586 ( 0.00%) 136.35
ssh 4207818 ( 3.79%) 5334233367 ( 14.83%) 1267.70
dns 23218 ( 0.02%) 2056490 ( 0.01%) 88.57
bgp 516 ( 0.00%) 105959 ( 0.00%) 205.35
napster 512 ( 0.00%) 32991 ( 0.00%) 64.44
realaud 55 ( 0.00%) 8900 ( 0.00%) 161.82
rtsp 16723 ( 0.02%) 17179156 ( 0.05%) 1027.28
icecast 3547 ( 0.00%) 408695 ( 0.00%) 115.22
hotline 156 ( 0.00%) 10074 ( 0.00%) 64.58
other 10260882 ( 9.25%) 2345504056 ( 6.52%) 228.59
udp 73268157 ( 66.03%) 7676953306 ( 21.34%) 104.78
dns 645736 ( 0.58%) 148888208 ( 0.41%) 230.57
realaud 560 ( 0.00%) 34078 ( 0.00%) 60.85
halflif 49 ( 0.00%) 3686 ( 0.00%) 75.22
starcra 22 ( 0.00%) 3206 ( 0.00%) 145.73
everque 371 ( 0.00%) 107967 ( 0.00%) 291.02
unreal 64 ( 0.00%) 6810 ( 0.00%) 106.41
quake 1299 ( 0.00%) 108027 ( 0.00%) 83.16
cuseeme 3 ( 0.00%) 251 ( 0.00%) 83.67
other 72619968 ( 65.45%) 7527740208 ( 20.93%) 103.66
icmp 350620 ( 0.32%) 32280191 ( 0.09%) 92.07
ipip 166 ( 0.00%) 17288 ( 0.00%) 104.14
ipsec 235 ( 0.00%) 39506 ( 0.00%) 168.11
ip6 720646 ( 0.65%) 593896120 ( 1.65%) 824.12
other 86933 ( 0.08%) 40980930 ( 0.11%) 471.41
frag 548 ( 0.00%) 601415 ( 0.00%) 1097.47
ip6 198254 ( 0.18%) 106461882 ( 0.30%) 537.00
tcp6 134049 ( 0.12%) 86152698 ( 0.24%) 642.70
http(s) 15649 ( 0.01%) 15334887 ( 0.04%) 979.93
http(c) 45947 ( 0.04%) 3722245 ( 0.01%) 81.01
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 210 ( 0.00%) 77714 ( 0.00%) 370.07
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 335 ( 0.00%) 78943 ( 0.00%) 235.65
bgp 85 ( 0.00%) 24227 ( 0.00%) 285.02
other 71800 ( 0.06%) 66912569 ( 0.19%) 931.93
udp6 45881 ( 0.04%) 17250161 ( 0.05%) 375.98
dns 38399 ( 0.03%) 13061474 ( 0.04%) 340.15
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 7481 ( 0.01%) 4188575 ( 0.01%) 559.90
icmp6 17993 ( 0.02%) 2773237 ( 0.01%) 154.13
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 304 ( 0.00%) 282114 ( 0.00%) 928.01
tcpdump file: 201107211400.dump.gz (1686.87 MB)