Traffic Trace Info
DumpFile: 201107131400.dump
FileSize: 3625.34MB
Id: 201107131400
StartTime: Wed Jul 13 14:00:01 2011
EndTime: Wed Jul 13 14:15:00 2011
TotalTime: 899.46 seconds
TotalCapSize: -1242.81MB CapLen: 96 bytes
# of packets: 50601991 (33423.05MB)
AvgRate: 311.71Mbps stddev:49.05M
IP flow (unique src/dst pair) Information
# of flows: 1006048 (avg. 50.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.1% 1.9% 1.7% 1.6% 1.6% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 443398
Top 10 bandwidth usage (bytes/total in %):
10.7% 7.2% 6.1% 6.0% 4.2% 2.8% 2.8% 2.2% 2.2% 2.2%
# of IPv6 addresses: 4113
Top 10 bandwidth usage (bytes/total in %):
32.1% 32.1% 17.5% 13.1% 11.6% 10.5% 8.5% 7.5% 7.0% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107131400.pktlen.png)
detailed numbers
[ 32- 63]: 13197837
[ 64- 127]: 11787598
[ 128- 255]: 1921944
[ 256- 511]: 947394
[ 512- 1023]: 1006371
[ 1024- 2047]: 21740847
Protocol Breakdown
![[protocol breakdown chart]](201107131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50601991 (100.00%) 35046612044 (100.00%) 692.59
ip 50106285 ( 99.02%) 34732191944 ( 99.10%) 693.17
tcp 42535140 ( 84.06%) 30466542266 ( 86.93%) 716.27
http(s) 17511140 ( 34.61%) 23870332061 ( 68.11%) 1363.15
http(c) 11771965 ( 23.26%) 2851117294 ( 8.14%) 242.20
squid 145237 ( 0.29%) 75245891 ( 0.21%) 518.09
smtp 321058 ( 0.63%) 233942414 ( 0.67%) 728.66
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 53404 ( 0.11%) 35926370 ( 0.10%) 672.73
pop3 12765 ( 0.03%) 2437425 ( 0.01%) 190.95
imap 6191 ( 0.01%) 2547397 ( 0.01%) 411.47
telnet 815 ( 0.00%) 87704 ( 0.00%) 107.61
ssh 89235 ( 0.18%) 31975931 ( 0.09%) 358.33
dns 23573 ( 0.05%) 2240816 ( 0.01%) 95.06
bgp 561 ( 0.00%) 106674 ( 0.00%) 190.15
napster 353 ( 0.00%) 26110 ( 0.00%) 73.97
realaud 198 ( 0.00%) 13732 ( 0.00%) 69.35
rtsp 11847 ( 0.02%) 9919908 ( 0.03%) 837.34
icecast 7481 ( 0.01%) 643190 ( 0.00%) 85.98
hotline 57 ( 0.00%) 4043 ( 0.00%) 70.93
other 12579254 ( 24.86%) 3349974940 ( 9.56%) 266.31
udp 6085781 ( 12.03%) 3366318052 ( 9.61%) 553.14
dns 777987 ( 1.54%) 178219523 ( 0.51%) 229.08
realaud 48 ( 0.00%) 4069 ( 0.00%) 84.77
halflif 99 ( 0.00%) 7880 ( 0.00%) 79.60
starcra 62 ( 0.00%) 8736 ( 0.00%) 140.90
everque 7540 ( 0.01%) 6812180 ( 0.02%) 903.47
unreal 39 ( 0.00%) 7020 ( 0.00%) 180.00
quake 1849 ( 0.00%) 150896 ( 0.00%) 81.61
cuseeme 7 ( 0.00%) 3309 ( 0.00%) 472.71
other 5294366 ( 10.46%) 3180782992 ( 9.08%) 600.79
icmp 412646 ( 0.82%) 62490988 ( 0.18%) 151.44
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11430 ( 0.02%) 3321316 ( 0.01%) 290.58
ip6 1043998 ( 2.06%) 828115047 ( 2.36%) 793.22
other 17105 ( 0.03%) 5385005 ( 0.02%) 314.82
frag 45960 ( 0.09%) 36076572 ( 0.10%) 784.96
ip6 495706 ( 0.98%) 314420100 ( 0.90%) 634.29
tcp6 382127 ( 0.76%) 250113228 ( 0.71%) 654.53
http(s) 27869 ( 0.06%) 22899271 ( 0.07%) 821.68
http(c) 194185 ( 0.38%) 16944841 ( 0.05%) 87.26
squid 57 ( 0.00%) 13234 ( 0.00%) 232.18
smtp 290 ( 0.00%) 46085 ( 0.00%) 158.91
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 390 ( 0.00%) 96729 ( 0.00%) 248.02
bgp 90 ( 0.00%) 19751 ( 0.00%) 219.46
other 159229 ( 0.31%) 210091712 ( 0.60%) 1319.43
udp6 88141 ( 0.17%) 57141328 ( 0.16%) 648.29
dns 47325 ( 0.09%) 15239657 ( 0.04%) 322.02
realaud 1 ( 0.00%) 95 ( 0.00%) 95.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 40813 ( 0.08%) 41901358 ( 0.12%) 1026.67
icmp6 20021 ( 0.04%) 3288641 ( 0.01%) 164.26
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5387 ( 0.01%) 3872823 ( 0.01%) 718.92
tcpdump file: 201107131400.dump.gz (1224.58 MB)