Traffic Trace Info
DumpFile: 201107301400.dump
FileSize: 2468.17MB
Id: 201107301400
StartTime: Sat Jul 30 14:00:00 2011
EndTime: Sat Jul 30 14:15:00 2011
TotalTime: 899.85 seconds
TotalCapSize: 1937.78MB CapLen: 96 bytes
# of packets: 34758717 (20397.03MB)
AvgRate: 190.12Mbps stddev:50.71M
IP flow (unique src/dst pair) Information
# of flows: 975552 (avg. 35.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.2% 2.0% 1.8% 1.7% 1.6% 1.2% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 522577
Top 10 bandwidth usage (bytes/total in %):
27.5% 5.5% 3.8% 3.4% 3.0% 2.8% 2.8% 2.5% 2.3% 2.2%
# of IPv6 addresses: 3288
Top 10 bandwidth usage (bytes/total in %):
67.2% 37.6% 29.5% 23.9% 15.0% 8.6% 1.3% 1.2% 1.0% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107301400.pktlen.png)
detailed numbers
[ 32- 63]: 11018559
[ 64- 127]: 8410490
[ 128- 255]: 1018366
[ 256- 511]: 691575
[ 512- 1023]: 732446
[ 1024- 2047]: 12887281
Protocol Breakdown
![[protocol breakdown chart]](201107301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34758717 (100.00%) 21387835111 (100.00%) 615.32
ip 34505640 ( 99.27%) 21123906781 ( 98.77%) 612.19
tcp 30760200 ( 88.50%) 19841317582 ( 92.77%) 645.03
http(s) 12246000 ( 35.23%) 16515498114 ( 77.22%) 1348.64
http(c) 6184396 ( 17.79%) 660597517 ( 3.09%) 106.82
squid 247484 ( 0.71%) 269159160 ( 1.26%) 1087.58
smtp 119477 ( 0.34%) 54624807 ( 0.26%) 457.20
ftp 71280 ( 0.21%) 41756083 ( 0.20%) 585.80
pop3 8790 ( 0.03%) 1806245 ( 0.01%) 205.49
imap 7719 ( 0.02%) 5469373 ( 0.03%) 708.56
telnet 1393 ( 0.00%) 158449 ( 0.00%) 113.75
ssh 26312 ( 0.08%) 2967302 ( 0.01%) 112.77
dns 22446 ( 0.06%) 1685509 ( 0.01%) 75.09
bgp 520 ( 0.00%) 86986 ( 0.00%) 167.28
napster 359 ( 0.00%) 26748 ( 0.00%) 74.51
realaud 1269 ( 0.00%) 80949 ( 0.00%) 63.79
rtsp 44969 ( 0.13%) 53085591 ( 0.25%) 1180.49
icecast 1257 ( 0.00%) 101972 ( 0.00%) 81.12
hotline 78 ( 0.00%) 5480 ( 0.00%) 70.26
other 11776450 ( 33.88%) 2234207237 ( 10.45%) 189.72
udp 2938370 ( 8.45%) 884162135 ( 4.13%) 300.90
dns 494610 ( 1.42%) 107191163 ( 0.50%) 216.72
realaud 15 ( 0.00%) 1582 ( 0.00%) 105.47
halflif 536 ( 0.00%) 81675 ( 0.00%) 152.38
starcra 25 ( 0.00%) 3492 ( 0.00%) 139.68
everque 428 ( 0.00%) 81063 ( 0.00%) 189.40
unreal 18 ( 0.00%) 2986 ( 0.00%) 165.89
quake 1378 ( 0.00%) 116782 ( 0.00%) 84.75
cuseeme 796 ( 0.00%) 891192 ( 0.00%) 1119.59
other 2440487 ( 7.02%) 775746517 ( 3.63%) 317.87
icmp 367518 ( 1.06%) 46338770 ( 0.22%) 126.09
ipip 94 ( 0.00%) 10340 ( 0.00%) 110.00
ipsec 77 ( 0.00%) 17358 ( 0.00%) 225.43
ip6 422450 ( 1.22%) 346746329 ( 1.62%) 820.80
other 16931 ( 0.05%) 5314267 ( 0.02%) 313.88
frag 611 ( 0.00%) 660121 ( 0.00%) 1080.39
ip6 253077 ( 0.73%) 263928330 ( 1.23%) 1042.88
tcp6 197643 ( 0.57%) 251022093 ( 1.17%) 1270.08
http(s) 6552 ( 0.02%) 5734941 ( 0.03%) 875.30
http(c) 10675 ( 0.03%) 1350623 ( 0.01%) 126.52
smtp 196 ( 0.00%) 28265 ( 0.00%) 144.21
ftp 70 ( 0.00%) 6469 ( 0.00%) 92.41
dns 415 ( 0.00%) 96479 ( 0.00%) 232.48
bgp 87 ( 0.00%) 13925 ( 0.00%) 160.06
other 179648 ( 0.52%) 243791391 ( 1.14%) 1357.05
udp6 32065 ( 0.09%) 8895120 ( 0.04%) 277.41
dns 30782 ( 0.09%) 8709235 ( 0.04%) 282.93
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1280 ( 0.00%) 185555 ( 0.00%) 144.96
icmp6 23086 ( 0.07%) 3756021 ( 0.02%) 162.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 253 ( 0.00%) 251016 ( 0.00%) 992.16
tcpdump file: 201107301400.dump.gz (869.69 MB)