Traffic Trace Info
DumpFile: 201108041400.dump
FileSize: 2695.11MB
Id: 201108041400
StartTime: Thu Aug 4 14:00:00 2011
EndTime: Thu Aug 4 14:15:00 2011
TotalTime: 899.83 seconds
TotalCapSize: -1971.32MB CapLen: 96 bytes
# of packets: 37383460 (25615.34MB)
AvgRate: 238.78Mbps stddev:44.81M
IP flow (unique src/dst pair) Information
# of flows: 851679 (avg. 43.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 2.8% 1.9% 1.5% 1.3% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 438011
Top 10 bandwidth usage (bytes/total in %):
19.7% 15.4% 7.3% 5.3% 3.5% 3.1% 2.9% 2.6% 2.2% 2.0%
# of IPv6 addresses: 3939
Top 10 bandwidth usage (bytes/total in %):
65.2% 61.7% 32.3% 13.5% 7.7% 6.4% 0.8% 0.8% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108041400.pktlen.png)
detailed numbers
[ 32- 63]: 7935271
[ 64- 127]: 9672707
[ 128- 255]: 1386539
[ 256- 511]: 810969
[ 512- 1023]: 965388
[ 1024- 2047]: 16612586
Protocol Breakdown
![[protocol breakdown chart]](201108041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37383460 (100.00%) 26859630707 (100.00%) 718.49
ip 36792162 ( 98.42%) 26299436016 ( 97.91%) 714.81
tcp 31998822 ( 85.60%) 24175465706 ( 90.01%) 755.51
http(s) 12972883 ( 34.70%) 17531491653 ( 65.27%) 1351.40
http(c) 8788723 ( 23.51%) 1386604848 ( 5.16%) 157.77
squid 112806 ( 0.30%) 71628978 ( 0.27%) 634.97
smtp 228046 ( 0.61%) 135389706 ( 0.50%) 593.69
ftp 68807 ( 0.18%) 24520919 ( 0.09%) 356.37
pop3 13452 ( 0.04%) 5806300 ( 0.02%) 431.63
imap 5076 ( 0.01%) 2200240 ( 0.01%) 433.46
telnet 437 ( 0.00%) 69652 ( 0.00%) 159.39
ssh 27807 ( 0.07%) 4426926 ( 0.02%) 159.20
dns 22266 ( 0.06%) 1746695 ( 0.01%) 78.45
bgp 592 ( 0.00%) 122608 ( 0.00%) 207.11
napster 172 ( 0.00%) 18508 ( 0.00%) 107.60
realaud 107 ( 0.00%) 26771 ( 0.00%) 250.20
rtsp 8807 ( 0.02%) 10442626 ( 0.04%) 1185.72
icecast 1531 ( 0.00%) 526366 ( 0.00%) 343.81
hotline 16 ( 0.00%) 996 ( 0.00%) 62.25
other 9747294 ( 26.07%) 5000441914 ( 18.62%) 513.01
udp 3702918 ( 9.91%) 1576381408 ( 5.87%) 425.71
dns 675454 ( 1.81%) 160332437 ( 0.60%) 237.37
realaud 33 ( 0.00%) 5256 ( 0.00%) 159.27
halflif 959 ( 0.00%) 190772 ( 0.00%) 198.93
starcra 56 ( 0.00%) 5677 ( 0.00%) 101.38
everque 459 ( 0.00%) 92970 ( 0.00%) 202.55
unreal 87 ( 0.00%) 17359 ( 0.00%) 199.53
quake 1067 ( 0.00%) 90779 ( 0.00%) 85.08
cuseeme 3 ( 0.00%) 545 ( 0.00%) 181.67
other 3024665 ( 8.09%) 1415555334 ( 5.27%) 468.00
icmp 489999 ( 1.31%) 96744395 ( 0.36%) 197.44
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ip6 582749 ( 1.56%) 444601482 ( 1.66%) 762.94
other 17490 ( 0.05%) 6223865 ( 0.02%) 355.85
frag 711 ( 0.00%) 753140 ( 0.00%) 1059.27
ip6 591298 ( 1.58%) 560194691 ( 2.09%) 947.40
tcp6 516210 ( 1.38%) 539280015 ( 2.01%) 1044.69
http(s) 14799 ( 0.04%) 17016834 ( 0.06%) 1149.86
http(c) 13884 ( 0.04%) 1333208 ( 0.00%) 96.02
smtp 815 ( 0.00%) 228774 ( 0.00%) 280.70
ftp 43 ( 0.00%) 3918 ( 0.00%) 91.12
dns 357 ( 0.00%) 82688 ( 0.00%) 231.62
bgp 93 ( 0.00%) 18981 ( 0.00%) 204.10
other 486219 ( 1.30%) 520595612 ( 1.94%) 1070.70
udp6 49894 ( 0.13%) 16029387 ( 0.06%) 321.27
dns 44300 ( 0.12%) 12871226 ( 0.05%) 290.55
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 7 ( 0.00%) 680 ( 0.00%) 97.14
unreal 1 ( 0.00%) 444 ( 0.00%) 444.00
quake 2 ( 0.00%) 202 ( 0.00%) 101.00
other 5583 ( 0.01%) 3156726 ( 0.01%) 565.42
icmp6 23739 ( 0.06%) 3750432 ( 0.01%) 157.99
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1424 ( 0.00%) 1130641 ( 0.00%) 793.99
tcpdump file: 201108041400.dump.gz (884.61 MB)