Traffic Trace Info
DumpFile: 201107251400.dump
FileSize: 3681.58MB
Id: 201107251400
StartTime: Mon Jul 25 14:00:00 2011
EndTime: Mon Jul 25 14:15:00 2011
TotalTime: 899.92 seconds
TotalCapSize: -1195.27MB CapLen: 96 bytes
# of packets: 51172988 (33416.50MB)
AvgRate: 311.49Mbps stddev:79.05M
IP flow (unique src/dst pair) Information
# of flows: 1221657 (avg. 41.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.1% 5.5% 2.1% 1.7% 1.3% 1.2% 1.2% 1.1% 1.1% 0.8%
IP address Information
# of IPv4 addresses: 586525
Top 10 bandwidth usage (bytes/total in %):
15.7% 10.2% 10.2% 5.6% 5.6% 5.2% 5.1% 3.0% 2.7% 2.5%
# of IPv6 addresses: 4289
Top 10 bandwidth usage (bytes/total in %):
41.5% 19.3% 19.3% 17.7% 14.9% 14.5% 10.6% 6.7% 5.8% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107251400.pktlen.png)
detailed numbers
[ 32- 63]: 14104111
[ 64- 127]: 12068569
[ 128- 255]: 1330580
[ 256- 511]: 946151
[ 512- 1023]: 1079583
[ 1024- 2047]: 21643994
Protocol Breakdown
![[protocol breakdown chart]](201107251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51172988 (100.00%) 35039745107 (100.00%) 684.73
ip 50845987 ( 99.36%) 34723257066 ( 99.10%) 682.91
tcp 45010693 ( 87.96%) 32425074181 ( 92.54%) 720.39
http(s) 19790449 ( 38.67%) 27121422376 ( 77.40%) 1370.43
http(c) 9983238 ( 19.51%) 1653792873 ( 4.72%) 165.66
squid 127488 ( 0.25%) 104058410 ( 0.30%) 816.22
smtp 153447 ( 0.30%) 77492949 ( 0.22%) 505.01
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 130153 ( 0.25%) 76840460 ( 0.22%) 590.39
pop3 51136 ( 0.10%) 7447798 ( 0.02%) 145.65
imap 8808 ( 0.02%) 8208875 ( 0.02%) 931.98
telnet 886 ( 0.00%) 93155 ( 0.00%) 105.14
ssh 88764 ( 0.17%) 12926806 ( 0.04%) 145.63
dns 31674 ( 0.06%) 2584030 ( 0.01%) 81.58
bgp 564 ( 0.00%) 103226 ( 0.00%) 183.02
napster 1259 ( 0.00%) 81517 ( 0.00%) 64.75
realaud 142 ( 0.00%) 10309 ( 0.00%) 72.60
rtsp 33377 ( 0.07%) 34595339 ( 0.10%) 1036.50
icecast 59982 ( 0.12%) 3885795 ( 0.01%) 64.78
hotline 67 ( 0.00%) 4925 ( 0.00%) 73.51
other 14549255 ( 28.43%) 3321525098 ( 9.48%) 228.30
udp 4565057 ( 8.92%) 1843777617 ( 5.26%) 403.89
dns 727818 ( 1.42%) 160368062 ( 0.46%) 220.34
realaud 16 ( 0.00%) 1562 ( 0.00%) 97.62
halflif 92 ( 0.00%) 9258 ( 0.00%) 100.63
starcra 88 ( 0.00%) 10326 ( 0.00%) 117.34
everque 391 ( 0.00%) 73167 ( 0.00%) 187.13
unreal 15 ( 0.00%) 1930 ( 0.00%) 128.67
quake 1721 ( 0.00%) 142832 ( 0.00%) 82.99
cuseeme 20 ( 0.00%) 2323 ( 0.00%) 116.15
other 3834781 ( 7.49%) 1683089923 ( 4.80%) 438.90
icmp 450710 ( 0.88%) 82498435 ( 0.24%) 183.04
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 182 ( 0.00%) 27012 ( 0.00%) 148.42
ip6 803879 ( 1.57%) 366925851 ( 1.05%) 456.44
other 15282 ( 0.03%) 4934810 ( 0.01%) 322.92
frag 500 ( 0.00%) 531008 ( 0.00%) 1062.02
ip6 327001 ( 0.64%) 316488041 ( 0.90%) 967.85
tcp6 219308 ( 0.43%) 275076445 ( 0.79%) 1254.29
http(s) 72140 ( 0.14%) 97731321 ( 0.28%) 1354.75
http(c) 7015 ( 0.01%) 720382 ( 0.00%) 102.69
squid 62 ( 0.00%) 9749 ( 0.00%) 157.24
smtp 612 ( 0.00%) 267244 ( 0.00%) 436.67
ftp 41 ( 0.00%) 3746 ( 0.00%) 91.37
dns 464 ( 0.00%) 95324 ( 0.00%) 205.44
bgp 94 ( 0.00%) 28011 ( 0.00%) 297.99
other 138880 ( 0.27%) 176220668 ( 0.50%) 1268.87
udp6 52765 ( 0.10%) 17718509 ( 0.05%) 335.80
dns 42896 ( 0.08%) 15027913 ( 0.04%) 350.33
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
other 9867 ( 0.02%) 2690385 ( 0.01%) 272.66
icmp6 26539 ( 0.05%) 3705840 ( 0.01%) 139.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28359 ( 0.06%) 19983167 ( 0.06%) 704.65
tcpdump file: 201107251400.dump.gz (1256.08 MB)