Traffic Trace Info
DumpFile: 201107101400.dump
FileSize: 3050.21MB
Id: 201107101400
StartTime: Sun Jul 10 14:00:00 2011
EndTime: Sun Jul 10 14:15:00 2011
TotalTime: 900.29 seconds
TotalCapSize: -1708.35MB CapLen: 96 bytes
# of packets: 43419567 (25963.30MB)
AvgRate: 241.89Mbps stddev:35.16M
IP flow (unique src/dst pair) Information
# of flows: 1074951 (avg. 40.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.6% 1.9% 1.9% 1.9% 1.6% 1.6% 1.5% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 512544
Top 10 bandwidth usage (bytes/total in %):
12.5% 9.5% 5.8% 5.5% 4.4% 4.0% 4.0% 3.9% 2.7% 2.7%
# of IPv6 addresses: 3348
Top 10 bandwidth usage (bytes/total in %):
63.0% 35.6% 27.3% 11.4% 5.8% 4.3% 4.3% 4.2% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107101400.pktlen.png)
detailed numbers
[ 32- 63]: 13480630
[ 64- 127]: 9750799
[ 128- 255]: 1851201
[ 256- 511]: 756432
[ 512- 1023]: 1138524
[ 1024- 2047]: 16441981
Protocol Breakdown
![[protocol breakdown chart]](201107101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43419567 (100.00%) 27224495719 (100.00%) 627.01
ip 43168010 ( 99.42%) 27050421731 ( 99.36%) 626.63
tcp 35558286 ( 81.89%) 23415054826 ( 86.01%) 658.50
http(s) 14218251 ( 32.75%) 19352080530 ( 71.08%) 1361.07
http(c) 6410296 ( 14.76%) 863747241 ( 3.17%) 134.74
squid 637601 ( 1.47%) 557569686 ( 2.05%) 874.48
smtp 108449 ( 0.25%) 28781775 ( 0.11%) 265.39
ftp 59138 ( 0.14%) 40508258 ( 0.15%) 684.98
pop3 19157 ( 0.04%) 2035238 ( 0.01%) 106.24
imap 4401 ( 0.01%) 2509400 ( 0.01%) 570.19
telnet 868 ( 0.00%) 92682 ( 0.00%) 106.78
ssh 80858 ( 0.19%) 23099829 ( 0.08%) 285.68
dns 17454 ( 0.04%) 1397823 ( 0.01%) 80.09
bgp 531 ( 0.00%) 80891 ( 0.00%) 152.34
napster 382 ( 0.00%) 31981 ( 0.00%) 83.72
realaud 215 ( 0.00%) 16648 ( 0.00%) 77.43
rtsp 13509 ( 0.03%) 16018705 ( 0.06%) 1185.78
icecast 10994 ( 0.03%) 796996 ( 0.00%) 72.49
hotline 102 ( 0.00%) 6426 ( 0.00%) 63.00
other 13976080 ( 32.19%) 2526280717 ( 9.28%) 180.76
udp 6291120 ( 14.49%) 3066903632 ( 11.27%) 487.50
dns 511283 ( 1.18%) 102926765 ( 0.38%) 201.31
realaud 12 ( 0.00%) 1324 ( 0.00%) 110.33
halflif 891 ( 0.00%) 55082 ( 0.00%) 61.82
starcra 51 ( 0.00%) 9644 ( 0.00%) 189.10
everque 8959 ( 0.02%) 8996988 ( 0.03%) 1004.24
unreal 19 ( 0.00%) 3067 ( 0.00%) 161.42
quake 1376 ( 0.00%) 112415 ( 0.00%) 81.70
cuseeme 35 ( 0.00%) 5481 ( 0.00%) 156.60
other 5768426 ( 13.29%) 2954759921 ( 10.85%) 512.23
icmp 440906 ( 1.02%) 78412552 ( 0.29%) 177.84
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 9053 ( 0.02%) 2088654 ( 0.01%) 230.71
ip6 851520 ( 1.96%) 481958109 ( 1.77%) 566.00
other 16941 ( 0.04%) 5984786 ( 0.02%) 353.27
frag 389 ( 0.00%) 402296 ( 0.00%) 1034.18
ip6 251557 ( 0.58%) 174073988 ( 0.64%) 691.99
tcp6 199148 ( 0.46%) 160133795 ( 0.59%) 804.09
http(s) 12077 ( 0.03%) 14401117 ( 0.05%) 1192.44
http(c) 66518 ( 0.15%) 5868853 ( 0.02%) 88.23
smtp 158 ( 0.00%) 48759 ( 0.00%) 308.60
ftp 101 ( 0.00%) 9499 ( 0.00%) 94.05
dns 322 ( 0.00%) 74625 ( 0.00%) 231.75
bgp 96 ( 0.00%) 18017 ( 0.00%) 187.68
other 119876 ( 0.28%) 139712925 ( 0.51%) 1165.48
udp6 33411 ( 0.08%) 9321938 ( 0.03%) 279.01
dns 30289 ( 0.07%) 8499300 ( 0.03%) 280.61
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 4 ( 0.00%) 422 ( 0.00%) 105.50
other 3117 ( 0.01%) 822109 ( 0.00%) 263.75
icmp6 16646 ( 0.04%) 2875968 ( 0.01%) 172.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2322 ( 0.01%) 1738207 ( 0.01%) 748.58
tcpdump file: 201107101400.dump.gz (1058.89 MB)