Traffic Trace Info
DumpFile: 201107161400.dump
FileSize: 3208.37MB
Id: 201107161400
StartTime: Sat Jul 16 14:00:00 2011
EndTime: Sat Jul 16 14:15:01 2011
TotalTime: 900.52 seconds
TotalCapSize: -1568.42MB CapLen: 96 bytes
# of packets: 44613132 (25338.55MB)
AvgRate: 236.03Mbps stddev:51.63M
IP flow (unique src/dst pair) Information
# of flows: 1062569 (avg. 41.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.6% 1.9% 1.8% 1.3% 1.2% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 468263
Top 10 bandwidth usage (bytes/total in %):
30.3% 6.5% 4.2% 3.6% 3.6% 3.4% 3.2% 3.1% 3.0% 2.2%
# of IPv6 addresses: 3509
Top 10 bandwidth usage (bytes/total in %):
71.9% 61.4% 15.5% 9.8% 8.6% 6.9% 5.2% 5.2% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107161400.pktlen.png)
detailed numbers
[ 32- 63]: 15346221
[ 64- 127]: 10650844
[ 128- 255]: 1001550
[ 256- 511]: 599806
[ 512- 1023]: 858701
[ 1024- 2047]: 16156010
Protocol Breakdown
![[protocol breakdown chart]](201107161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44613132 (100.00%) 26569391191 (100.00%) 595.55
ip 43660849 ( 97.87%) 25437664887 ( 95.74%) 582.62
tcp 37535349 ( 84.14%) 22687596230 ( 85.39%) 604.43
http(s) 14031770 ( 31.45%) 19070298404 ( 71.78%) 1359.08
http(c) 7010510 ( 15.71%) 919603269 ( 3.46%) 131.17
squid 168337 ( 0.38%) 116494833 ( 0.44%) 692.03
smtp 111544 ( 0.25%) 43916186 ( 0.17%) 393.71
ftp 58344 ( 0.13%) 39800843 ( 0.15%) 682.18
pop3 701409 ( 1.57%) 71022951 ( 0.27%) 101.26
imap 260063 ( 0.58%) 19074245 ( 0.07%) 73.34
telnet 1337 ( 0.00%) 122185 ( 0.00%) 91.39
ssh 129827 ( 0.29%) 18611200 ( 0.07%) 143.35
dns 24867 ( 0.06%) 1989427 ( 0.01%) 80.00
bgp 593 ( 0.00%) 120945 ( 0.00%) 203.95
napster 537 ( 0.00%) 37056 ( 0.00%) 69.01
realaud 113 ( 0.00%) 7073 ( 0.00%) 62.59
rtsp 43392 ( 0.10%) 37556490 ( 0.14%) 865.52
icecast 1312 ( 0.00%) 328513 ( 0.00%) 250.39
hotline 174 ( 0.00%) 13962 ( 0.00%) 80.24
other 14991220 ( 33.60%) 2348598648 ( 8.84%) 156.66
udp 3873373 ( 8.68%) 1591501988 ( 5.99%) 410.88
dns 539216 ( 1.21%) 118251403 ( 0.45%) 219.30
realaud 1813 ( 0.00%) 109665 ( 0.00%) 60.49
halflif 41485 ( 0.09%) 8623109 ( 0.03%) 207.86
starcra 99 ( 0.00%) 17644 ( 0.00%) 178.22
everque 5687 ( 0.01%) 5394800 ( 0.02%) 948.62
unreal 9 ( 0.00%) 1223 ( 0.00%) 135.89
quake 1407 ( 0.00%) 115795 ( 0.00%) 82.30
cuseeme 6 ( 0.00%) 405 ( 0.00%) 67.50
other 3283570 ( 7.36%) 1458931821 ( 5.49%) 444.31
icmp 477192 ( 1.07%) 81952134 ( 0.31%) 171.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9066 ( 0.02%) 2092172 ( 0.01%) 230.77
ip6 1744885 ( 3.91%) 1067955594 ( 4.02%) 612.05
other 20799 ( 0.05%) 6547499 ( 0.02%) 314.80
frag 611 ( 0.00%) 625817 ( 0.00%) 1024.25
ip6 952283 ( 2.13%) 1131726304 ( 4.26%) 1188.43
tcp6 879330 ( 1.97%) 1104015603 ( 4.16%) 1255.52
http(s) 11111 ( 0.02%) 11068252 ( 0.04%) 996.15
http(c) 114708 ( 0.26%) 9934896 ( 0.04%) 86.61
smtp 201 ( 0.00%) 86249 ( 0.00%) 429.10
ftp 20 ( 0.00%) 1887 ( 0.00%) 94.35
dns 228 ( 0.00%) 52147 ( 0.00%) 228.71
bgp 92 ( 0.00%) 17092 ( 0.00%) 185.78
other 752970 ( 1.69%) 1082855080 ( 4.08%) 1438.11
udp6 31841 ( 0.07%) 9594161 ( 0.04%) 301.31
dns 30036 ( 0.07%) 9352864 ( 0.04%) 311.39
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1803 ( 0.00%) 241075 ( 0.00%) 133.71
icmp6 19789 ( 0.04%) 3113184 ( 0.01%) 157.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21293 ( 0.05%) 14999276 ( 0.06%) 704.42
tcpdump file: 201107161400.dump.gz (1112.88 MB)