Traffic Trace Info
DumpFile: 201107081400.dump
FileSize: 2972.49MB
Id: 201107081400
StartTime: Fri Jul 8 14:00:01 2011
EndTime: Fri Jul 8 14:15:00 2011
TotalTime: 899.37 seconds
TotalCapSize: -1760.04MB CapLen: 96 bytes
# of packets: 41712139 (24409.45MB)
AvgRate: 227.66Mbps stddev:37.78M
IP flow (unique src/dst pair) Information
# of flows: 1202164 (avg. 34.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 4.0% 1.9% 1.9% 1.6% 1.5% 1.5% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 565697
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.6% 9.8% 6.8% 4.0% 3.4% 3.3% 2.6% 2.2% 2.1%
# of IPv6 addresses: 4050
Top 10 bandwidth usage (bytes/total in %):
16.1% 16.1% 14.3% 14.3% 13.9% 12.9% 12.1% 5.5% 4.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107081400.pktlen.png)
detailed numbers
[ 32- 63]: 12014902
[ 64- 127]: 10508464
[ 128- 255]: 2070574
[ 256- 511]: 822736
[ 512- 1023]: 792869
[ 1024- 2047]: 15502594
Protocol Breakdown
![[protocol breakdown chart]](201107081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41712139 (100.00%) 25595166714 (100.00%) 613.61
ip 41461321 ( 99.40%) 25471770561 ( 99.52%) 614.35
tcp 34920377 ( 83.72%) 22578414093 ( 88.21%) 646.57
http(s) 11624291 ( 27.87%) 15191068024 ( 59.35%) 1306.84
http(c) 8439624 ( 20.23%) 1525818183 ( 5.96%) 180.79
squid 99200 ( 0.24%) 56797202 ( 0.22%) 572.55
smtp 219420 ( 0.53%) 124799124 ( 0.49%) 568.77
ftp 52925 ( 0.13%) 38211927 ( 0.15%) 722.00
pop3 24622 ( 0.06%) 12559147 ( 0.05%) 510.08
imap 3375 ( 0.01%) 938603 ( 0.00%) 278.10
telnet 1021 ( 0.00%) 102761 ( 0.00%) 100.65
ssh 636420 ( 1.53%) 541731461 ( 2.12%) 851.22
dns 24693 ( 0.06%) 2406356 ( 0.01%) 97.45
bgp 580 ( 0.00%) 102840 ( 0.00%) 177.31
napster 210 ( 0.00%) 13212 ( 0.00%) 62.91
realaud 221 ( 0.00%) 21147 ( 0.00%) 95.69
rtsp 9355 ( 0.02%) 11169346 ( 0.04%) 1193.94
icecast 4293 ( 0.01%) 298151 ( 0.00%) 69.45
hotline 52 ( 0.00%) 3234 ( 0.00%) 62.19
other 13780074 ( 33.04%) 5072373315 ( 19.82%) 368.09
udp 5262665 ( 12.62%) 2346444528 ( 9.17%) 445.87
dns 711279 ( 1.71%) 166402029 ( 0.65%) 233.95
realaud 21 ( 0.00%) 2758 ( 0.00%) 131.33
halflif 425 ( 0.00%) 55965 ( 0.00%) 131.68
starcra 66 ( 0.00%) 10156 ( 0.00%) 153.88
everque 216 ( 0.00%) 42301 ( 0.00%) 195.84
unreal 33 ( 0.00%) 5865 ( 0.00%) 177.73
quake 1866 ( 0.00%) 149711 ( 0.00%) 80.23
cuseeme 6 ( 0.00%) 580 ( 0.00%) 96.67
other 4548540 ( 10.90%) 2179546283 ( 8.52%) 479.17
icmp 509929 ( 1.22%) 98696254 ( 0.39%) 193.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9409 ( 0.02%) 2218758 ( 0.01%) 235.81
ip6 741906 ( 1.78%) 440737872 ( 1.72%) 594.06
other 16850 ( 0.04%) 5239786 ( 0.02%) 310.97
frag 158077 ( 0.38%) 233674593 ( 0.91%) 1478.23
ip6 250818 ( 0.60%) 123396153 ( 0.48%) 491.97
tcp6 174166 ( 0.42%) 89952569 ( 0.35%) 516.48
http(s) 25547 ( 0.06%) 27886460 ( 0.11%) 1091.57
http(c) 106521 ( 0.26%) 9193238 ( 0.04%) 86.30
smtp 522 ( 0.00%) 182626 ( 0.00%) 349.86
ftp 47 ( 0.00%) 4383 ( 0.00%) 93.26
dns 272 ( 0.00%) 63114 ( 0.00%) 232.04
bgp 98 ( 0.00%) 28048 ( 0.00%) 286.20
icecast 4 ( 0.00%) 482 ( 0.00%) 120.50
other 41155 ( 0.10%) 52594218 ( 0.21%) 1277.95
udp6 47693 ( 0.11%) 14959652 ( 0.06%) 313.67
dns 46432 ( 0.11%) 14798866 ( 0.06%) 318.72
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1260 ( 0.00%) 160676 ( 0.00%) 127.52
icmp6 17715 ( 0.04%) 3014737 ( 0.01%) 170.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11214 ( 0.03%) 15465115 ( 0.06%) 1379.09
tcpdump file: 201107081400.dump.gz (1046.62 MB)