Traffic Trace Info
DumpFile: 201108051400.dump
FileSize: 3465.22MB
Id: 201108051400
StartTime: Fri Aug 5 14:00:00 2011
EndTime: Fri Aug 5 14:15:00 2011
TotalTime: 900.59 seconds
TotalCapSize: -1370.60MB CapLen: 96 bytes
# of packets: 48484315 (32810.78MB)
AvgRate: 305.55Mbps stddev:58.88M
IP flow (unique src/dst pair) Information
# of flows: 1355919 (avg. 35.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.9% 2.3% 1.6% 1.3% 1.2% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 689317
Top 10 bandwidth usage (bytes/total in %):
28.6% 8.1% 5.0% 4.7% 4.1% 4.0% 3.9% 3.6% 3.4% 2.4%
# of IPv6 addresses: 3962
Top 10 bandwidth usage (bytes/total in %):
54.4% 33.5% 20.4% 13.0% 10.8% 10.8% 6.2% 5.1% 4.9% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108051400.pktlen.png)
detailed numbers
[ 32- 63]: 13660574
[ 64- 127]: 10509075
[ 128- 255]: 1189136
[ 256- 511]: 895140
[ 512- 1023]: 931605
[ 1024- 2047]: 21298785
Protocol Breakdown
![[protocol breakdown chart]](201108051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48484315 (100.00%) 34404594341 (100.00%) 709.60
ip 48216609 ( 99.45%) 34187303482 ( 99.37%) 709.04
tcp 43152415 ( 89.00%) 32112161454 ( 93.34%) 744.16
http(s) 17138146 ( 35.35%) 23575151255 ( 68.52%) 1375.60
http(c) 8531902 ( 17.60%) 1141363268 ( 3.32%) 133.78
squid 127610 ( 0.26%) 78560838 ( 0.23%) 615.63
smtp 201665 ( 0.42%) 136952498 ( 0.40%) 679.11
ftp 81383 ( 0.17%) 57452330 ( 0.17%) 705.95
pop3 14270 ( 0.03%) 6339871 ( 0.02%) 444.28
imap 926746 ( 1.91%) 1352725359 ( 3.93%) 1459.65
telnet 465 ( 0.00%) 66131 ( 0.00%) 142.22
ssh 114914 ( 0.24%) 11029994 ( 0.03%) 95.98
dns 24597 ( 0.05%) 1980570 ( 0.01%) 80.52
bgp 605 ( 0.00%) 125061 ( 0.00%) 206.71
napster 220 ( 0.00%) 14999 ( 0.00%) 68.18
realaud 109 ( 0.00%) 10729 ( 0.00%) 98.43
rtsp 8720 ( 0.02%) 10419117 ( 0.03%) 1194.85
icecast 2345 ( 0.00%) 332295 ( 0.00%) 141.70
hotline 88 ( 0.00%) 5674 ( 0.00%) 64.48
other 15978629 ( 32.96%) 5739631405 ( 16.68%) 359.21
udp 3704367 ( 7.64%) 1361804026 ( 3.96%) 367.62
dns 662385 ( 1.37%) 153410660 ( 0.45%) 231.60
realaud 22 ( 0.00%) 3085 ( 0.00%) 140.23
halflif 270 ( 0.00%) 26217 ( 0.00%) 97.10
starcra 35 ( 0.00%) 4003 ( 0.00%) 114.37
everque 672 ( 0.00%) 114260 ( 0.00%) 170.03
unreal 51 ( 0.00%) 7773 ( 0.00%) 152.41
quake 1133 ( 0.00%) 97138 ( 0.00%) 85.74
cuseeme 6 ( 0.00%) 508 ( 0.00%) 84.67
other 3039631 ( 6.27%) 1208028901 ( 3.51%) 397.43
icmp 509880 ( 1.05%) 88523545 ( 0.26%) 173.62
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 71 ( 0.00%) 18762 ( 0.00%) 264.25
ip6 821487 ( 1.69%) 607949247 ( 1.77%) 740.06
other 28204 ( 0.06%) 16827178 ( 0.05%) 596.62
frag 1763 ( 0.00%) 2011855 ( 0.01%) 1141.15
ip6 267706 ( 0.55%) 217290859 ( 0.63%) 811.68
tcp6 195477 ( 0.40%) 197722539 ( 0.57%) 1011.49
http(s) 33779 ( 0.07%) 45312191 ( 0.13%) 1341.43
http(c) 48744 ( 0.10%) 4434970 ( 0.01%) 90.98
smtp 481 ( 0.00%) 117833 ( 0.00%) 244.98
ftp 43 ( 0.00%) 3918 ( 0.00%) 91.12
dns 387 ( 0.00%) 90508 ( 0.00%) 233.87
bgp 89 ( 0.00%) 14054 ( 0.00%) 157.91
other 111954 ( 0.23%) 147749065 ( 0.43%) 1319.73
udp6 47270 ( 0.10%) 13381111 ( 0.04%) 283.08
dns 42233 ( 0.09%) 12428771 ( 0.04%) 294.29
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 2 ( 0.00%) 231 ( 0.00%) 115.50
other 5034 ( 0.01%) 952002 ( 0.00%) 189.11
icmp6 21172 ( 0.04%) 3491078 ( 0.01%) 164.89
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3756 ( 0.01%) 2691915 ( 0.01%) 716.70
tcpdump file: 201108051400.dump.gz (1182.97 MB)