Traffic Trace Info
DumpFile: 201106161400.dump
FileSize: 3171.22MB
Id: 201106161400
StartTime: Thu Jun 16 14:00:00 2011
EndTime: Thu Jun 16 14:15:00 2011
TotalTime: 899.67 seconds
TotalCapSize: -1598.55MB CapLen: 96 bytes
# of packets: 44154817 (26608.17MB)
AvgRate: 248.11Mbps stddev:44.93M
IP flow (unique src/dst pair) Information
# of flows: 1111066 (avg. 39.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 2.3% 2.3% 1.7% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 568783
Top 10 bandwidth usage (bytes/total in %):
16.5% 6.8% 6.5% 3.6% 3.1% 3.0% 3.0% 2.8% 2.5% 2.4%
# of IPv6 addresses: 4008
Top 10 bandwidth usage (bytes/total in %):
34.3% 34.3% 23.6% 23.6% 15.8% 14.8% 8.2% 5.1% 5.1% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106161400.pktlen.png)
detailed numbers
[ 32- 63]: 11335534
[ 64- 127]: 12705400
[ 128- 255]: 1248811
[ 256- 511]: 882332
[ 512- 1023]: 1049835
[ 1024- 2047]: 16932905
Protocol Breakdown
![[protocol breakdown chart]](201106161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44154817 (100.00%) 27900690235 (100.00%) 631.88
ip 43702819 ( 98.98%) 27484871980 ( 98.51%) 628.90
tcp 36615656 ( 82.93%) 25201203660 ( 90.32%) 688.26
http(s) 14762370 ( 33.43%) 20006391572 ( 71.71%) 1355.23
http(c) 11266682 ( 25.52%) 2027998291 ( 7.27%) 180.00
squid 133952 ( 0.30%) 86357408 ( 0.31%) 644.69
smtp 206735 ( 0.47%) 137808439 ( 0.49%) 666.59
ftp 31696 ( 0.07%) 19008767 ( 0.07%) 599.72
pop3 49128 ( 0.11%) 4666559 ( 0.02%) 94.99
imap 12567 ( 0.03%) 7629313 ( 0.03%) 607.09
telnet 722 ( 0.00%) 72703 ( 0.00%) 100.70
ssh 272686 ( 0.62%) 119066918 ( 0.43%) 436.64
dns 27021 ( 0.06%) 2408886 ( 0.01%) 89.15
bgp 1301 ( 0.00%) 806205 ( 0.00%) 619.68
napster 193 ( 0.00%) 110294 ( 0.00%) 571.47
realaud 136 ( 0.00%) 14393 ( 0.00%) 105.83
rtsp 22882 ( 0.05%) 24865081 ( 0.09%) 1086.67
icecast 26101 ( 0.06%) 23336380 ( 0.08%) 894.08
hotline 91 ( 0.00%) 8640 ( 0.00%) 94.95
other 9801392 ( 22.20%) 2740653751 ( 9.82%) 279.62
udp 5393032 ( 12.21%) 1745928541 ( 6.26%) 323.74
dns 897291 ( 2.03%) 187813161 ( 0.67%) 209.31
realaud 11 ( 0.00%) 1007 ( 0.00%) 91.55
halflif 81 ( 0.00%) 6366 ( 0.00%) 78.59
starcra 86 ( 0.00%) 14513 ( 0.00%) 168.76
everque 3307 ( 0.01%) 533353 ( 0.00%) 161.28
unreal 28 ( 0.00%) 2923 ( 0.00%) 104.39
quake 1849 ( 0.00%) 150038 ( 0.00%) 81.15
cuseeme 10 ( 0.00%) 1721 ( 0.00%) 172.10
other 4490016 ( 10.17%) 1557338303 ( 5.58%) 346.84
icmp 455949 ( 1.03%) 69956847 ( 0.25%) 153.43
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 622 ( 0.00%) 147060 ( 0.00%) 236.43
ip6 1220223 ( 2.76%) 463508269 ( 1.66%) 379.86
other 17152 ( 0.04%) 4108333 ( 0.01%) 239.53
frag 2088 ( 0.00%) 1688876 ( 0.01%) 808.85
ip6 451998 ( 1.02%) 415818255 ( 1.49%) 919.96
tcp6 323854 ( 0.73%) 368554698 ( 1.32%) 1138.03
http(s) 108233 ( 0.25%) 114009769 ( 0.41%) 1053.37
http(c) 33382 ( 0.08%) 2890359 ( 0.01%) 86.58
smtp 14346 ( 0.03%) 21362749 ( 0.08%) 1489.11
ftp 93 ( 0.00%) 8258 ( 0.00%) 88.80
ssh 302 ( 0.00%) 122860 ( 0.00%) 406.82
dns 354 ( 0.00%) 79742 ( 0.00%) 225.26
bgp 174 ( 0.00%) 95199 ( 0.00%) 547.12
realaud 10 ( 0.00%) 1539 ( 0.00%) 153.90
other 166960 ( 0.38%) 229984223 ( 0.82%) 1377.48
udp6 71336 ( 0.16%) 22045164 ( 0.08%) 309.03
dns 61111 ( 0.14%) 20578080 ( 0.07%) 336.73
everque 2 ( 0.00%) 212 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 117 ( 0.00%) 117.00
other 10222 ( 0.02%) 1466755 ( 0.01%) 143.49
icmp6 27466 ( 0.06%) 4493369 ( 0.02%) 163.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 29312 ( 0.07%) 20720944 ( 0.07%) 706.91
tcpdump file: 201106161400.dump.gz (1097.62 MB)