Traffic Trace Info
DumpFile: 201107181400.dump
FileSize: 3918.65MB
Id: 201107181400
StartTime: Mon Jul 18 14:00:00 2011
EndTime: Mon Jul 18 14:15:00 2011
TotalTime: 899.76 seconds
TotalCapSize: -1025.96MB CapLen: 96 bytes
# of packets: 55613859 (38738.31MB)
AvgRate: 361.10Mbps stddev:51.24M
IP flow (unique src/dst pair) Information
# of flows: 1252914 (avg. 44.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 6.4% 5.7% 4.4% 2.7% 1.4% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 606485
Top 10 bandwidth usage (bytes/total in %):
13.3% 8.9% 8.2% 7.6% 7.6% 6.7% 5.9% 5.8% 4.5% 3.7%
# of IPv6 addresses: 4128
Top 10 bandwidth usage (bytes/total in %):
23.6% 21.5% 19.4% 12.8% 10.8% 10.0% 9.2% 6.7% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107181400.pktlen.png)
detailed numbers
[ 32- 63]: 14731940
[ 64- 127]: 11244670
[ 128- 255]: 1085485
[ 256- 511]: 800942
[ 512- 1023]: 3082808
[ 1024- 2047]: 24668014
Protocol Breakdown
![[protocol breakdown chart]](201107181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55613859 (100.00%) 40620062192 (100.00%) 730.39
ip 55280390 ( 99.40%) 40357585273 ( 99.35%) 730.05
tcp 48770290 ( 87.69%) 36739205919 ( 90.45%) 753.31
http(s) 18099928 ( 32.55%) 21027837210 ( 51.77%) 1161.76
http(c) 13636282 ( 24.52%) 6689914523 ( 16.47%) 490.60
squid 105015 ( 0.19%) 72003119 ( 0.18%) 685.65
smtp 176203 ( 0.32%) 104815463 ( 0.26%) 594.86
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 81257 ( 0.15%) 44976415 ( 0.11%) 553.51
pop3 8836 ( 0.02%) 3105136 ( 0.01%) 351.42
imap 2717 ( 0.00%) 1311845 ( 0.00%) 482.83
telnet 594 ( 0.00%) 73878 ( 0.00%) 124.37
ssh 2398132 ( 4.31%) 3106071130 ( 7.65%) 1295.20
dns 26192 ( 0.05%) 2223676 ( 0.01%) 84.90
bgp 582 ( 0.00%) 122543 ( 0.00%) 210.55
napster 2991 ( 0.01%) 187701 ( 0.00%) 62.76
realaud 399 ( 0.00%) 33246 ( 0.00%) 83.32
rtsp 31734 ( 0.06%) 33720630 ( 0.08%) 1062.60
icecast 3242 ( 0.01%) 500957 ( 0.00%) 154.52
hotline 46 ( 0.00%) 2878 ( 0.00%) 62.57
other 14196139 ( 25.53%) 5652305509 ( 13.92%) 398.16
udp 5106370 ( 9.18%) 2904615226 ( 7.15%) 568.82
dns 646559 ( 1.16%) 149968276 ( 0.37%) 231.95
realaud 2191 ( 0.00%) 3088592 ( 0.01%) 1409.67
halflif 86 ( 0.00%) 7513 ( 0.00%) 87.36
starcra 67 ( 0.00%) 9384 ( 0.00%) 140.06
everque 216 ( 0.00%) 36072 ( 0.00%) 167.00
unreal 81 ( 0.00%) 13440 ( 0.00%) 165.93
quake 1791 ( 0.00%) 146110 ( 0.00%) 81.58
cuseeme 5 ( 0.00%) 439 ( 0.00%) 87.80
other 4455298 ( 8.01%) 2751298789 ( 6.77%) 617.53
icmp 532770 ( 0.96%) 99827808 ( 0.25%) 187.38
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9705 ( 0.02%) 2745718 ( 0.01%) 282.92
ip6 844879 ( 1.52%) 607303145 ( 1.50%) 718.80
other 16192 ( 0.03%) 3868297 ( 0.01%) 238.90
frag 482 ( 0.00%) 514246 ( 0.00%) 1066.90
ip6 333469 ( 0.60%) 262476919 ( 0.65%) 787.11
tcp6 221593 ( 0.40%) 213004866 ( 0.52%) 961.24
http(s) 15397 ( 0.03%) 13297932 ( 0.03%) 863.67
http(c) 22065 ( 0.04%) 2049056 ( 0.01%) 92.86
squid 5 ( 0.00%) 422 ( 0.00%) 84.40
smtp 122 ( 0.00%) 20026 ( 0.00%) 164.15
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 288 ( 0.00%) 70532 ( 0.00%) 244.90
bgp 93 ( 0.00%) 20241 ( 0.00%) 217.65
other 183606 ( 0.33%) 197545052 ( 0.49%) 1075.92
udp6 59242 ( 0.11%) 24353274 ( 0.06%) 411.08
dns 32238 ( 0.06%) 9783295 ( 0.02%) 303.47
other 27004 ( 0.05%) 14569979 ( 0.04%) 539.55
icmp6 21646 ( 0.04%) 3337422 ( 0.01%) 154.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 30958 ( 0.06%) 21777277 ( 0.05%) 703.45
tcpdump file: 201107181400.dump.gz (1288.77 MB)