Traffic Trace Info
DumpFile: 201107291400.dump
FileSize: 3820.66MB
Id: 201107291400
StartTime: Fri Jul 29 14:00:00 2011
EndTime: Fri Jul 29 14:15:00 2011
TotalTime: 899.88 seconds
TotalCapSize: -1086.51MB CapLen: 96 bytes
# of packets: 53160194 (33674.32MB)
AvgRate: 313.90Mbps stddev:35.55M
IP flow (unique src/dst pair) Information
# of flows: 1262572 (avg. 42.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 2.1% 1.8% 1.8% 1.4% 1.4% 1.4% 1.4% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 605033
Top 10 bandwidth usage (bytes/total in %):
11.6% 10.1% 7.2% 7.0% 6.4% 6.4% 5.5% 3.0% 2.6% 2.3%
# of IPv6 addresses: 4072
Top 10 bandwidth usage (bytes/total in %):
38.2% 23.3% 14.8% 10.1% 8.3% 7.2% 6.6% 6.1% 5.9% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107291400.pktlen.png)
detailed numbers
[ 32- 63]: 15891932
[ 64- 127]: 12148969
[ 128- 255]: 1389760
[ 256- 511]: 932168
[ 512- 1023]: 1083895
[ 1024- 2047]: 21713470
Protocol Breakdown
![[protocol breakdown chart]](201107291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53160194 (100.00%) 35310086667 (100.00%) 664.22
ip 52916737 ( 99.54%) 35145224633 ( 99.53%) 664.16
tcp 47435120 ( 89.23%) 32929078068 ( 93.26%) 694.19
http(s) 18941168 ( 35.63%) 25354192643 ( 71.80%) 1338.58
http(c) 10110297 ( 19.02%) 1881791732 ( 5.33%) 186.13
squid 163799 ( 0.31%) 113549115 ( 0.32%) 693.22
smtp 169005 ( 0.32%) 74565688 ( 0.21%) 441.20
ftp 24326 ( 0.05%) 1943181 ( 0.01%) 79.88
pop3 37014 ( 0.07%) 4064215 ( 0.01%) 109.80
imap 7836 ( 0.01%) 6532767 ( 0.02%) 833.69
telnet 437 ( 0.00%) 63920 ( 0.00%) 146.27
ssh 221568 ( 0.42%) 39402848 ( 0.11%) 177.84
dns 24813 ( 0.05%) 2032645 ( 0.01%) 81.92
bgp 586 ( 0.00%) 114320 ( 0.00%) 195.09
napster 333 ( 0.00%) 24921 ( 0.00%) 74.84
realaud 145 ( 0.00%) 16654 ( 0.00%) 114.86
rtsp 30110 ( 0.06%) 33659906 ( 0.10%) 1117.90
icecast 5093 ( 0.01%) 544675 ( 0.00%) 106.95
hotline 302 ( 0.00%) 18875 ( 0.00%) 62.50
other 17698287 ( 33.29%) 5416559903 ( 15.34%) 306.05
udp 4000174 ( 7.52%) 1348265319 ( 3.82%) 337.05
dns 704620 ( 1.33%) 161934004 ( 0.46%) 229.82
realaud 27 ( 0.00%) 3291 ( 0.00%) 121.89
halflif 183 ( 0.00%) 12363 ( 0.00%) 67.56
starcra 89 ( 0.00%) 15803 ( 0.00%) 177.56
everque 4603 ( 0.01%) 515368 ( 0.00%) 111.96
unreal 13 ( 0.00%) 2240 ( 0.00%) 172.31
quake 1908 ( 0.00%) 162039 ( 0.00%) 84.93
cuseeme 2 ( 0.00%) 392 ( 0.00%) 196.00
other 3288525 ( 6.19%) 1185534162 ( 3.36%) 360.51
icmp 525024 ( 0.99%) 88851328 ( 0.25%) 169.23
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 54 ( 0.00%) 10324 ( 0.00%) 191.19
ip6 926571 ( 1.74%) 772277112 ( 2.19%) 833.48
other 29609 ( 0.06%) 6723212 ( 0.02%) 227.07
frag 931 ( 0.00%) 899336 ( 0.00%) 965.99
ip6 243457 ( 0.46%) 164862034 ( 0.47%) 677.17
tcp6 152346 ( 0.29%) 130644143 ( 0.37%) 857.55
http(s) 19347 ( 0.04%) 20292245 ( 0.06%) 1048.86
http(c) 45413 ( 0.09%) 3983124 ( 0.01%) 87.71
smtp 1004 ( 0.00%) 536100 ( 0.00%) 533.96
ftp 44 ( 0.00%) 4040 ( 0.00%) 91.82
ssh 181 ( 0.00%) 32292 ( 0.00%) 178.41
dns 267 ( 0.00%) 63258 ( 0.00%) 236.92
bgp 92 ( 0.00%) 14992 ( 0.00%) 162.96
other 85998 ( 0.16%) 105718092 ( 0.30%) 1229.31
udp6 56385 ( 0.11%) 23590992 ( 0.07%) 418.39
dns 42901 ( 0.08%) 12903419 ( 0.04%) 300.77
halflif 3 ( 0.00%) 326 ( 0.00%) 108.67
everque 7 ( 0.00%) 662 ( 0.00%) 94.57
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 13473 ( 0.03%) 10686473 ( 0.03%) 793.18
icmp6 25220 ( 0.05%) 3851048 ( 0.01%) 152.70
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9475 ( 0.02%) 6771635 ( 0.02%) 714.68
tcpdump file: 201107291400.dump.gz (1306.49 MB)