Traffic Trace Info
DumpFile: 201107221400.dump
FileSize: 2775.08MB
Id: 201107221400
StartTime: Fri Jul 22 14:00:01 2011
EndTime: Fri Jul 22 14:15:01 2011
TotalTime: 899.67 seconds
TotalCapSize: -1915.09MB CapLen: 96 bytes
# of packets: 38938918 (24636.11MB)
AvgRate: 229.72Mbps stddev:39.01M
IP flow (unique src/dst pair) Information
# of flows: 947161 (avg. 41.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 2.9% 2.0% 1.8% 1.1% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 440001
Top 10 bandwidth usage (bytes/total in %):
11.9% 9.3% 9.2% 9.0% 3.6% 3.6% 3.6% 3.0% 2.6% 2.4%
# of IPv6 addresses: 4112
Top 10 bandwidth usage (bytes/total in %):
43.1% 41.4% 22.5% 22.4% 10.3% 6.6% 4.3% 3.6% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107221400.pktlen.png)
detailed numbers
[ 32- 63]: 9989134
[ 64- 127]: 10028481
[ 128- 255]: 1363762
[ 256- 511]: 832489
[ 512- 1023]: 936281
[ 1024- 2047]: 15788771
Protocol Breakdown
![[protocol breakdown chart]](201107221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38938918 (100.00%) 25832830646 (100.00%) 663.42
ip 38597515 ( 99.12%) 25537208452 ( 98.86%) 661.63
tcp 32224538 ( 82.76%) 22372174502 ( 86.60%) 694.26
http(s) 13309321 ( 34.18%) 17844806080 ( 69.08%) 1340.78
http(c) 8608754 ( 22.11%) 1648948878 ( 6.38%) 191.54
squid 139717 ( 0.36%) 88116368 ( 0.34%) 630.68
smtp 169582 ( 0.44%) 68186905 ( 0.26%) 402.09
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 53871 ( 0.14%) 26195061 ( 0.10%) 486.26
pop3 25167 ( 0.06%) 6116797 ( 0.02%) 243.05
imap 86777 ( 0.22%) 121007707 ( 0.47%) 1394.47
telnet 669 ( 0.00%) 78404 ( 0.00%) 117.20
ssh 540463 ( 1.39%) 220200360 ( 0.85%) 407.43
dns 29394 ( 0.08%) 2529716 ( 0.01%) 86.06
bgp 574 ( 0.00%) 108777 ( 0.00%) 189.51
napster 1356 ( 0.00%) 85788 ( 0.00%) 63.27
realaud 101 ( 0.00%) 12232 ( 0.00%) 121.11
rtsp 2557 ( 0.01%) 201128 ( 0.00%) 78.66
icecast 5790 ( 0.01%) 599287 ( 0.00%) 103.50
hotline 396 ( 0.00%) 26141 ( 0.00%) 66.01
other 9250047 ( 23.76%) 2344954753 ( 9.08%) 253.51
udp 5192914 ( 13.34%) 2618154362 ( 10.13%) 504.18
dns 710305 ( 1.82%) 165490108 ( 0.64%) 232.98
realaud 12 ( 0.00%) 1794 ( 0.00%) 149.50
halflif 111 ( 0.00%) 7592 ( 0.00%) 68.40
starcra 30 ( 0.00%) 2264 ( 0.00%) 75.47
everque 371 ( 0.00%) 53244 ( 0.00%) 143.51
unreal 65 ( 0.00%) 12181 ( 0.00%) 187.40
quake 1719 ( 0.00%) 143352 ( 0.00%) 83.39
cuseeme 3 ( 0.00%) 565 ( 0.00%) 188.33
other 4480195 ( 11.51%) 2452353753 ( 9.49%) 547.38
icmp 392875 ( 1.01%) 61938416 ( 0.24%) 157.65
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1342 ( 0.00%) 502376 ( 0.00%) 374.35
ip6 716120 ( 1.84%) 470104849 ( 1.82%) 656.46
other 69542 ( 0.18%) 14314787 ( 0.06%) 205.84
frag 553 ( 0.00%) 620479 ( 0.00%) 1122.02
ip6 341403 ( 0.88%) 295622194 ( 1.14%) 865.90
tcp6 244150 ( 0.63%) 259737647 ( 1.01%) 1063.84
http(s) 63973 ( 0.16%) 85175625 ( 0.33%) 1331.43
http(c) 15227 ( 0.04%) 1486811 ( 0.01%) 97.64
smtp 2425 ( 0.01%) 817930 ( 0.00%) 337.29
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 300 ( 0.00%) 62040 ( 0.00%) 206.80
bgp 94 ( 0.00%) 17960 ( 0.00%) 191.06
other 162114 ( 0.42%) 172175676 ( 0.67%) 1062.07
udp6 51813 ( 0.13%) 15441100 ( 0.06%) 298.02
dns 41325 ( 0.11%) 13839893 ( 0.05%) 334.90
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 228 ( 0.00%) 114.00
cuseeme 1 ( 0.00%) 111 ( 0.00%) 111.00
other 10484 ( 0.03%) 1600761 ( 0.01%) 152.69
icmp6 21020 ( 0.05%) 3218771 ( 0.01%) 153.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24390 ( 0.06%) 17220596 ( 0.07%) 706.05
tcpdump file: 201107221400.dump.gz (963.60 MB)