Traffic Trace Info
DumpFile: 201108071400.dump
FileSize: 2672.93MB
Id: 201108071400
StartTime: Sun Aug 7 14:00:00 2011
EndTime: Sun Aug 7 14:15:01 2011
TotalTime: 900.33 seconds
TotalCapSize: -1997.76MB CapLen: 96 bytes
# of packets: 37662591 (25562.78MB)
AvgRate: 238.16Mbps stddev:40.22M
IP flow (unique src/dst pair) Information
# of flows: 1039651 (avg. 36.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.8% 2.5% 2.2% 1.8% 1.8% 1.4% 1.4% 1.3% 0.8%
IP address Information
# of IPv4 addresses: 555696
Top 10 bandwidth usage (bytes/total in %):
16.8% 9.4% 7.1% 4.4% 4.2% 3.7% 3.6% 3.2% 3.1% 2.8%
# of IPv6 addresses: 3227
Top 10 bandwidth usage (bytes/total in %):
44.6% 37.3% 14.4% 13.3% 10.9% 9.3% 7.2% 6.3% 5.9% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108071400.pktlen.png)
detailed numbers
[ 32- 63]: 9827365
[ 64- 127]: 8778164
[ 128- 255]: 938754
[ 256- 511]: 631435
[ 512- 1023]: 875002
[ 1024- 2047]: 16611871
Protocol Breakdown
![[protocol breakdown chart]](201108071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37662591 (100.00%) 26804513887 (100.00%) 711.70
ip 37513198 ( 99.60%) 26705904683 ( 99.63%) 711.91
tcp 31368995 ( 83.29%) 23218474414 ( 86.62%) 740.17
http(s) 13428312 ( 35.65%) 18396405465 ( 68.63%) 1369.97
http(c) 4948437 ( 13.14%) 614628130 ( 2.29%) 124.21
squid 125513 ( 0.33%) 101115121 ( 0.38%) 805.61
smtp 138431 ( 0.37%) 77724136 ( 0.29%) 561.46
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 53489 ( 0.14%) 37478314 ( 0.14%) 700.67
pop3 11515 ( 0.03%) 2083412 ( 0.01%) 180.93
imap 4193 ( 0.01%) 2721792 ( 0.01%) 649.13
telnet 775 ( 0.00%) 87621 ( 0.00%) 113.06
ssh 149666 ( 0.40%) 11015344 ( 0.04%) 73.60
dns 15043 ( 0.04%) 1074050 ( 0.00%) 71.40
bgp 547 ( 0.00%) 99371 ( 0.00%) 181.67
napster 456 ( 0.00%) 31021 ( 0.00%) 68.03
realaud 101 ( 0.00%) 6850 ( 0.00%) 67.82
rtsp 6309 ( 0.02%) 7706856 ( 0.03%) 1221.57
icecast 2313 ( 0.01%) 317715 ( 0.00%) 137.36
hotline 65 ( 0.00%) 4862 ( 0.00%) 74.80
other 12483824 ( 33.15%) 3965973988 ( 14.80%) 317.69
udp 5018382 ( 13.32%) 2869867838 ( 10.71%) 571.87
dns 400725 ( 1.06%) 88327431 ( 0.33%) 220.42
realaud 919 ( 0.00%) 57892 ( 0.00%) 62.99
halflif 3025 ( 0.01%) 536782 ( 0.00%) 177.45
starcra 66 ( 0.00%) 7769 ( 0.00%) 117.71
everque 1113 ( 0.00%) 120201 ( 0.00%) 108.00
unreal 56 ( 0.00%) 7713 ( 0.00%) 137.73
quake 1606 ( 0.00%) 142971 ( 0.00%) 89.02
cuseeme 9 ( 0.00%) 891 ( 0.00%) 99.00
other 4593912 ( 12.20%) 2778028871 ( 10.36%) 604.72
icmp 421864 ( 1.12%) 90008265 ( 0.34%) 213.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 54 ( 0.00%) 10292 ( 0.00%) 190.59
ip6 686934 ( 1.82%) 522244559 ( 1.95%) 760.25
other 16784 ( 0.04%) 5280045 ( 0.02%) 314.59
frag 56245 ( 0.15%) 42987160 ( 0.16%) 764.28
ip6 149393 ( 0.40%) 98609204 ( 0.37%) 660.07
tcp6 85847 ( 0.23%) 79681564 ( 0.30%) 928.18
http(s) 14019 ( 0.04%) 17680146 ( 0.07%) 1261.16
http(c) 21670 ( 0.06%) 2136428 ( 0.01%) 98.59
smtp 192 ( 0.00%) 31520 ( 0.00%) 164.17
ftp 70 ( 0.00%) 6485 ( 0.00%) 92.64
dns 327 ( 0.00%) 73942 ( 0.00%) 226.12
bgp 92 ( 0.00%) 15797 ( 0.00%) 171.71
other 49477 ( 0.13%) 59737246 ( 0.22%) 1207.37
udp6 33137 ( 0.09%) 8553988 ( 0.03%) 258.14
dns 30260 ( 0.08%) 8081459 ( 0.03%) 267.07
everque 4 ( 0.00%) 750 ( 0.00%) 187.50
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 2 ( 0.00%) 211 ( 0.00%) 105.50
other 2870 ( 0.01%) 471461 ( 0.00%) 164.27
icmp6 20428 ( 0.05%) 3299294 ( 0.01%) 161.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9951 ( 0.03%) 7070278 ( 0.03%) 710.51
tcpdump file: 201108071400.dump.gz (911.78 MB)