Traffic Trace Info
DumpFile: 201107091400.dump
FileSize: 3094.86MB
Id: 201107091400
StartTime: Sat Jul 9 14:00:01 2011
EndTime: Sat Jul 9 14:15:00 2011
TotalTime: 899.75 seconds
TotalCapSize: -1679.94MB CapLen: 96 bytes
# of packets: 44483594 (29475.97MB)
AvgRate: 274.81Mbps stddev:61.79M
IP flow (unique src/dst pair) Information
# of flows: 902465 (avg. 49.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.6% 2.0% 1.7% 1.7% 1.6% 1.6% 1.5% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 397316
Top 10 bandwidth usage (bytes/total in %):
20.5% 6.7% 5.0% 4.4% 3.2% 3.1% 2.8% 2.7% 2.7% 2.7%
# of IPv6 addresses: 3640
Top 10 bandwidth usage (bytes/total in %):
60.5% 55.3% 13.0% 4.5% 3.7% 3.0% 2.9% 2.9% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107091400.pktlen.png)
detailed numbers
[ 32- 63]: 12872771
[ 64- 127]: 8885395
[ 128- 255]: 1794915
[ 256- 511]: 790768
[ 512- 1023]: 1010694
[ 1024- 2047]: 19129051
Protocol Breakdown
![[protocol breakdown chart]](201107091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44483594 (100.00%) 30907790953 (100.00%) 694.81
ip 44225770 ( 99.42%) 30760799130 ( 99.52%) 695.54
tcp 37048783 ( 83.29%) 27423152665 ( 88.73%) 740.19
http(s) 15729261 ( 35.36%) 21625977936 ( 69.97%) 1374.89
http(c) 7906690 ( 17.77%) 988109598 ( 3.20%) 124.97
squid 211036 ( 0.47%) 186387122 ( 0.60%) 883.20
smtp 90338 ( 0.20%) 22126679 ( 0.07%) 244.93
nntp 4 ( 0.00%) 244 ( 0.00%) 61.00
ftp 45149 ( 0.10%) 33239713 ( 0.11%) 736.22
pop3 7774 ( 0.02%) 1597961 ( 0.01%) 205.55
imap 36162 ( 0.08%) 49478195 ( 0.16%) 1368.24
telnet 852 ( 0.00%) 77141 ( 0.00%) 90.54
ssh 214662 ( 0.48%) 36768237 ( 0.12%) 171.28
dns 20464 ( 0.05%) 1723442 ( 0.01%) 84.22
bgp 545 ( 0.00%) 89756 ( 0.00%) 164.69
napster 216 ( 0.00%) 17316 ( 0.00%) 80.17
realaud 357 ( 0.00%) 24460 ( 0.00%) 68.52
rtsp 11346 ( 0.03%) 13478775 ( 0.04%) 1187.98
icecast 4761 ( 0.01%) 457902 ( 0.00%) 96.18
hotline 111 ( 0.00%) 7078 ( 0.00%) 63.77
other 12769051 ( 28.71%) 4463590870 ( 14.44%) 349.56
udp 5881695 ( 13.22%) 2623060793 ( 8.49%) 445.97
dns 524579 ( 1.18%) 122738109 ( 0.40%) 233.97
realaud 1965 ( 0.00%) 1153860 ( 0.00%) 587.21
halflif 21848 ( 0.05%) 4355339 ( 0.01%) 199.35
starcra 35 ( 0.00%) 6516 ( 0.00%) 186.17
everque 492 ( 0.00%) 214609 ( 0.00%) 436.20
unreal 17 ( 0.00%) 2462 ( 0.00%) 144.82
quake 1237 ( 0.00%) 100320 ( 0.00%) 81.10
cuseeme 11 ( 0.00%) 2150 ( 0.00%) 195.45
other 5322164 ( 11.96%) 2493903535 ( 8.07%) 468.59
icmp 430091 ( 0.97%) 78312270 ( 0.25%) 182.08
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9052 ( 0.02%) 2088616 ( 0.01%) 230.74
ip6 835981 ( 1.88%) 627161184 ( 2.03%) 750.21
other 19984 ( 0.04%) 7004442 ( 0.02%) 350.50
frag 20590 ( 0.05%) 15853333 ( 0.05%) 769.95
ip6 257824 ( 0.58%) 146991823 ( 0.48%) 570.12
tcp6 159807 ( 0.36%) 124891310 ( 0.40%) 781.51
http(s) 11090 ( 0.02%) 11435185 ( 0.04%) 1031.13
http(c) 59656 ( 0.13%) 5310916 ( 0.02%) 89.03
squid 268 ( 0.00%) 152591 ( 0.00%) 569.37
smtp 58 ( 0.00%) 14328 ( 0.00%) 247.03
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 329 ( 0.00%) 79443 ( 0.00%) 241.47
bgp 88 ( 0.00%) 14368 ( 0.00%) 163.27
other 88301 ( 0.20%) 107882874 ( 0.35%) 1221.76
udp6 72594 ( 0.16%) 14474116 ( 0.05%) 199.38
dns 33212 ( 0.07%) 9409819 ( 0.03%) 283.33
other 39382 ( 0.09%) 5064297 ( 0.02%) 128.59
icmp6 18987 ( 0.04%) 3050148 ( 0.01%) 160.64
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6405 ( 0.01%) 4572033 ( 0.01%) 713.82
tcpdump file: 201107091400.dump.gz (1065.13 MB)