Traffic Trace Info
DumpFile: 201107141400.dump
FileSize: 3450.84MB
Id: 201107141400
StartTime: Thu Jul 14 14:00:00 2011
EndTime: Thu Jul 14 14:15:00 2011
TotalTime: 899.91 seconds
TotalCapSize: -1376.25MB CapLen: 96 bytes
# of packets: 47911681 (31649.22MB)
AvgRate: 295.04Mbps stddev:42.52M
IP flow (unique src/dst pair) Information
# of flows: 1088148 (avg. 44.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.3% 1.5% 1.5% 1.3% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 500891
Top 10 bandwidth usage (bytes/total in %):
10.1% 8.9% 7.3% 6.4% 4.9% 3.8% 3.6% 3.1% 2.9% 2.7%
# of IPv6 addresses: 4176
Top 10 bandwidth usage (bytes/total in %):
58.4% 32.2% 26.5% 12.1% 7.8% 4.0% 3.6% 2.5% 2.4% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107141400.pktlen.png)
detailed numbers
[ 32- 63]: 12406306
[ 64- 127]: 11483076
[ 128- 255]: 1468114
[ 256- 511]: 904687
[ 512- 1023]: 993029
[ 1024- 2047]: 20656469
Protocol Breakdown
![[protocol breakdown chart]](201107141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47911681 (100.00%) 33186613562 (100.00%) 692.66
ip 47543892 ( 99.23%) 32964476832 ( 99.33%) 693.35
tcp 41001180 ( 85.58%) 29908087897 ( 90.12%) 729.44
http(s) 17368038 ( 36.25%) 23657301501 ( 71.29%) 1362.12
http(c) 11308111 ( 23.60%) 1582802400 ( 4.77%) 139.97
squid 135708 ( 0.28%) 85155031 ( 0.26%) 627.49
smtp 186411 ( 0.39%) 91507282 ( 0.28%) 490.89
nntp 3 ( 0.00%) 234 ( 0.00%) 78.00
ftp 45297 ( 0.09%) 32527667 ( 0.10%) 718.10
pop3 28740 ( 0.06%) 6155784 ( 0.02%) 214.19
imap 7713 ( 0.02%) 6279208 ( 0.02%) 814.11
telnet 2576 ( 0.01%) 200289 ( 0.00%) 77.75
ssh 68038 ( 0.14%) 10450044 ( 0.03%) 153.59
dns 23511 ( 0.05%) 2171165 ( 0.01%) 92.35
bgp 579 ( 0.00%) 112941 ( 0.00%) 195.06
napster 219 ( 0.00%) 21686 ( 0.00%) 99.02
realaud 178 ( 0.00%) 11226 ( 0.00%) 63.07
rtsp 7403 ( 0.02%) 5667675 ( 0.02%) 765.59
icecast 2013 ( 0.00%) 188212 ( 0.00%) 93.50
hotline 105 ( 0.00%) 8314 ( 0.00%) 79.18
other 11816537 ( 24.66%) 4427527238 ( 13.34%) 374.69
udp 4831933 ( 10.09%) 1724707449 ( 5.20%) 356.94
dns 781235 ( 1.63%) 175010979 ( 0.53%) 224.02
realaud 27 ( 0.00%) 3329 ( 0.00%) 123.30
halflif 78 ( 0.00%) 6142 ( 0.00%) 78.74
starcra 54 ( 0.00%) 7508 ( 0.00%) 139.04
everque 1752 ( 0.00%) 1383726 ( 0.00%) 789.80
unreal 113 ( 0.00%) 108685 ( 0.00%) 961.81
quake 1744 ( 0.00%) 144020 ( 0.00%) 82.58
cuseeme 40 ( 0.00%) 6773 ( 0.00%) 169.32
other 4046666 ( 8.45%) 1547946368 ( 4.66%) 382.52
icmp 464642 ( 0.97%) 81284328 ( 0.24%) 174.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9058 ( 0.02%) 2091372 ( 0.01%) 230.89
ip6 1215797 ( 2.54%) 1240498864 ( 3.74%) 1020.32
other 21097 ( 0.04%) 7787652 ( 0.02%) 369.14
frag 976 ( 0.00%) 974368 ( 0.00%) 998.33
ip6 367789 ( 0.77%) 222136730 ( 0.67%) 603.98
tcp6 283867 ( 0.59%) 201744532 ( 0.61%) 710.70
http(s) 25249 ( 0.05%) 26341175 ( 0.08%) 1043.26
http(c) 72736 ( 0.15%) 6343306 ( 0.02%) 87.21
squid 39 ( 0.00%) 3210 ( 0.00%) 82.31
smtp 221 ( 0.00%) 66510 ( 0.00%) 300.95
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 300 ( 0.00%) 70761 ( 0.00%) 235.87
bgp 95 ( 0.00%) 16591 ( 0.00%) 174.64
other 185210 ( 0.39%) 168901374 ( 0.51%) 911.95
udp6 61415 ( 0.13%) 16375049 ( 0.05%) 266.63
dns 47503 ( 0.10%) 15071982 ( 0.05%) 317.28
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 98 ( 0.00%) 98.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 13908 ( 0.03%) 1302648 ( 0.00%) 93.66
icmp6 21880 ( 0.05%) 3451155 ( 0.01%) 157.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 596 ( 0.00%) 561778 ( 0.00%) 942.58
tcpdump file: 201107141400.dump.gz (1194.71 MB)