Traffic Trace Info
DumpFile: 201108021400.dump
FileSize: 3981.50MB
Id: 201108021400
StartTime: Tue Aug 2 14:00:00 2011
EndTime: Tue Aug 2 14:15:00 2011
TotalTime: 900.13 seconds
TotalCapSize: -956.30MB CapLen: 96 bytes
# of packets: 55167674 (34631.46MB)
AvgRate: 322.70Mbps stddev:55.78M
IP flow (unique src/dst pair) Information
# of flows: 1103813 (avg. 49.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.4% 2.0% 1.5% 1.5% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 533627
Top 10 bandwidth usage (bytes/total in %):
14.0% 8.9% 5.7% 5.2% 4.4% 3.7% 3.6% 3.6% 3.6% 2.6%
# of IPv6 addresses: 4264
Top 10 bandwidth usage (bytes/total in %):
77.6% 69.5% 15.9% 15.9% 6.7% 1.0% 1.0% 0.8% 0.7% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108021400.pktlen.png)
detailed numbers
[ 32- 63]: 16358863
[ 64- 127]: 13229993
[ 128- 255]: 1179425
[ 256- 511]: 907029
[ 512- 1023]: 987131
[ 1024- 2047]: 22505233
Protocol Breakdown
![[protocol breakdown chart]](201108021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55167674 (100.00%) 36313720324 (100.00%) 658.24
ip 54369871 ( 98.55%) 35514048974 ( 97.80%) 653.19
tcp 49092050 ( 88.99%) 33351096224 ( 91.84%) 679.36
http(s) 19110588 ( 34.64%) 25599150527 ( 70.49%) 1339.53
http(c) 9997143 ( 18.12%) 2064266410 ( 5.68%) 206.49
squid 156557 ( 0.28%) 107703404 ( 0.30%) 687.95
smtp 206699 ( 0.37%) 140962316 ( 0.39%) 681.97
ftp 71384 ( 0.13%) 36357299 ( 0.10%) 509.32
pop3 25642 ( 0.05%) 4122478 ( 0.01%) 160.77
imap 23564 ( 0.04%) 24837783 ( 0.07%) 1054.06
telnet 2598 ( 0.00%) 378242 ( 0.00%) 145.59
ssh 24890 ( 0.05%) 3778803 ( 0.01%) 151.82
dns 25658 ( 0.05%) 2109398 ( 0.01%) 82.21
bgp 553 ( 0.00%) 98643 ( 0.00%) 178.38
napster 2112 ( 0.00%) 136640 ( 0.00%) 64.70
realaud 188 ( 0.00%) 14647 ( 0.00%) 77.91
rtsp 8725 ( 0.02%) 10416050 ( 0.03%) 1193.82
icecast 4754 ( 0.01%) 673395 ( 0.00%) 141.65
hotline 131 ( 0.00%) 9306 ( 0.00%) 71.04
other 19430864 ( 35.22%) 5356080883 ( 14.75%) 275.65
udp 3983199 ( 7.22%) 1448316356 ( 3.99%) 363.61
dns 682040 ( 1.24%) 164446012 ( 0.45%) 241.11
realaud 21 ( 0.00%) 2876 ( 0.00%) 136.95
halflif 730 ( 0.00%) 47969 ( 0.00%) 65.71
starcra 49 ( 0.00%) 5476 ( 0.00%) 111.76
everque 645 ( 0.00%) 101248 ( 0.00%) 156.97
unreal 19 ( 0.00%) 2197 ( 0.00%) 115.63
quake 1684 ( 0.00%) 144106 ( 0.00%) 85.57
cuseeme 5 ( 0.00%) 801 ( 0.00%) 160.20
other 3297853 ( 5.98%) 1283458931 ( 3.53%) 389.18
icmp 460535 ( 0.83%) 81157206 ( 0.22%) 176.22
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ip6 805807 ( 1.46%) 626500048 ( 1.73%) 777.48
other 28095 ( 0.05%) 6959870 ( 0.02%) 247.73
frag 804 ( 0.00%) 849668 ( 0.00%) 1056.80
ip6 797803 ( 1.45%) 799671350 ( 2.20%) 1002.34
tcp6 718085 ( 1.30%) 778338158 ( 2.14%) 1083.91
http(s) 24483 ( 0.04%) 27489631 ( 0.08%) 1122.80
http(c) 15187 ( 0.03%) 1432853 ( 0.00%) 94.35
smtp 312 ( 0.00%) 61407 ( 0.00%) 196.82
ftp 54 ( 0.00%) 4953 ( 0.00%) 91.72
dns 370 ( 0.00%) 87005 ( 0.00%) 235.15
bgp 88 ( 0.00%) 16421 ( 0.00%) 186.60
other 677591 ( 1.23%) 749245888 ( 2.06%) 1105.75
udp6 48716 ( 0.09%) 13728159 ( 0.04%) 281.80
dns 43938 ( 0.08%) 12969959 ( 0.04%) 295.19
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 3 ( 0.00%) 338 ( 0.00%) 112.67
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 4773 ( 0.01%) 757649 ( 0.00%) 158.74
icmp6 25909 ( 0.05%) 3911939 ( 0.01%) 150.99
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5062 ( 0.01%) 3688878 ( 0.01%) 728.74
tcpdump file: 201108021400.dump.gz (1355.83 MB)