Traffic Trace Info
DumpFile: 201108011400.dump
FileSize: 2949.31MB
Id: 201108011400
StartTime: Mon Aug 1 14:00:00 2011
EndTime: Mon Aug 1 14:15:00 2011
TotalTime: 899.91 seconds
TotalCapSize: -1787.23MB CapLen: 96 bytes
# of packets: 41977984 (28626.02MB)
AvgRate: 266.82Mbps stddev:40.50M
IP flow (unique src/dst pair) Information
# of flows: 1088515 (avg. 38.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 1.8% 1.6% 1.6% 1.3% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 538752
Top 10 bandwidth usage (bytes/total in %):
11.7% 9.0% 6.3% 6.3% 5.4% 5.3% 3.6% 2.7% 2.6% 2.3%
# of IPv6 addresses: 3893
Top 10 bandwidth usage (bytes/total in %):
52.2% 52.2% 15.8% 10.7% 4.6% 3.2% 3.0% 2.6% 2.4% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108011400.pktlen.png)
detailed numbers
[ 32- 63]: 9661326
[ 64- 127]: 10062349
[ 128- 255]: 1651538
[ 256- 511]: 1015062
[ 512- 1023]: 1235005
[ 1024- 2047]: 18352704
Protocol Breakdown
![[protocol breakdown chart]](201108011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41977984 (100.00%) 30016558018 (100.00%) 715.05
ip 41798893 ( 99.57%) 29896188281 ( 99.60%) 715.24
tcp 33479892 ( 79.76%) 25544020629 ( 85.10%) 762.97
http(s) 14708377 ( 35.04%) 19446849869 ( 64.79%) 1322.16
http(c) 8548351 ( 20.36%) 2166146709 ( 7.22%) 253.40
squid 145394 ( 0.35%) 93720269 ( 0.31%) 644.60
smtp 160225 ( 0.38%) 65604790 ( 0.22%) 409.45
ftp 69996 ( 0.17%) 40712047 ( 0.14%) 581.63
pop3 70664 ( 0.17%) 19157777 ( 0.06%) 271.11
imap 4381 ( 0.01%) 2075532 ( 0.01%) 473.76
telnet 426 ( 0.00%) 67815 ( 0.00%) 159.19
ssh 99668 ( 0.24%) 30543968 ( 0.10%) 306.46
dns 27309 ( 0.07%) 2232003 ( 0.01%) 81.73
bgp 546 ( 0.00%) 95946 ( 0.00%) 175.73
napster 2275 ( 0.01%) 145021 ( 0.00%) 63.75
realaud 52 ( 0.00%) 5984 ( 0.00%) 115.08
rtsp 55 ( 0.00%) 19039 ( 0.00%) 346.16
icecast 3343 ( 0.01%) 3067294 ( 0.01%) 917.53
hotline 34 ( 0.00%) 2154 ( 0.00%) 63.35
other 9638796 ( 22.96%) 3673574412 ( 12.24%) 381.12
udp 7055703 ( 16.81%) 3540441832 ( 11.79%) 501.78
dns 675343 ( 1.61%) 154381710 ( 0.51%) 228.60
rip 1 ( 0.00%) 192 ( 0.00%) 192.00
realaud 60 ( 0.00%) 10702 ( 0.00%) 178.37
halflif 281 ( 0.00%) 18802 ( 0.00%) 66.91
starcra 40 ( 0.00%) 6883 ( 0.00%) 172.07
everque 3979 ( 0.01%) 3234871 ( 0.01%) 812.99
unreal 31 ( 0.00%) 5984 ( 0.00%) 193.03
quake 1726 ( 0.00%) 153230 ( 0.00%) 88.78
cuseeme 5 ( 0.00%) 443 ( 0.00%) 88.60
other 6355137 ( 15.14%) 3381435679 ( 11.27%) 532.08
icmp 393034 ( 0.94%) 89592246 ( 0.30%) 227.95
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 740 ( 0.00%) 168912 ( 0.00%) 228.26
ip6 849730 ( 2.02%) 716689908 ( 2.39%) 843.43
other 19609 ( 0.05%) 5255484 ( 0.02%) 268.01
frag 47709 ( 0.11%) 33225229 ( 0.11%) 696.41
ip6 179091 ( 0.43%) 120369737 ( 0.40%) 672.11
tcp6 98438 ( 0.23%) 97521041 ( 0.32%) 990.68
http(s) 13185 ( 0.03%) 15491284 ( 0.05%) 1174.92
http(c) 26528 ( 0.06%) 2248575 ( 0.01%) 84.76
squid 20 ( 0.00%) 1680 ( 0.00%) 84.00
smtp 566 ( 0.00%) 132870 ( 0.00%) 234.75
ftp 1594 ( 0.00%) 587932 ( 0.00%) 368.84
dns 410 ( 0.00%) 79403 ( 0.00%) 193.67
bgp 93 ( 0.00%) 14464 ( 0.00%) 155.53
other 56042 ( 0.13%) 78964833 ( 0.26%) 1409.03
udp6 50363 ( 0.12%) 14069797 ( 0.05%) 279.37
dns 45408 ( 0.11%) 13414549 ( 0.04%) 295.42
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
starcra 5 ( 0.00%) 420 ( 0.00%) 84.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 4948 ( 0.01%) 654612 ( 0.00%) 132.30
icmp6 23084 ( 0.05%) 3627949 ( 0.01%) 157.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7176 ( 0.02%) 5146870 ( 0.02%) 717.23
tcpdump file: 201108011400.dump.gz (1014.76 MB)