Traffic Trace Info
DumpFile: 201108081400.dump
FileSize: 3008.99MB
Id: 201108081400
StartTime: Mon Aug 8 14:00:00 2011
EndTime: Mon Aug 8 14:15:00 2011
TotalTime: 899.96 seconds
TotalCapSize: -1734.87MB CapLen: 96 bytes
# of packets: 42457792 (26777.96MB)
AvgRate: 249.53Mbps stddev:43.93M
IP flow (unique src/dst pair) Information
# of flows: 1038076 (avg. 40.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 3.8% 1.7% 1.4% 1.3% 1.3% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 489591
Top 10 bandwidth usage (bytes/total in %):
16.2% 14.1% 8.4% 7.8% 6.7% 3.9% 3.3% 3.2% 2.7% 2.4%
# of IPv6 addresses: 3861
Top 10 bandwidth usage (bytes/total in %):
84.5% 77.2% 4.6% 4.4% 3.6% 3.6% 2.3% 2.3% 1.3% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108081400.pktlen.png)
detailed numbers
[ 32- 63]: 12758468
[ 64- 127]: 9561367
[ 128- 255]: 1295630
[ 256- 511]: 818949
[ 512- 1023]: 851674
[ 1024- 2047]: 17171704
Protocol Breakdown
![[protocol breakdown chart]](201108081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42457792 (100.00%) 28078721459 (100.00%) 661.33
ip 41884130 ( 98.65%) 27574147600 ( 98.20%) 658.34
tcp 36479256 ( 85.92%) 24997758158 ( 89.03%) 685.26
http(s) 15674901 ( 36.92%) 21172739246 ( 75.40%) 1350.74
http(c) 9075420 ( 21.38%) 1668719797 ( 5.94%) 183.87
squid 87790 ( 0.21%) 51058940 ( 0.18%) 581.60
smtp 167528 ( 0.39%) 75920810 ( 0.27%) 453.18
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 56488 ( 0.13%) 46309550 ( 0.16%) 819.81
pop3 21625 ( 0.05%) 12154318 ( 0.04%) 562.05
imap 8468 ( 0.02%) 7838520 ( 0.03%) 925.66
telnet 530 ( 0.00%) 194995 ( 0.00%) 367.92
ssh 35718 ( 0.08%) 14724846 ( 0.05%) 412.25
dns 24317 ( 0.06%) 2026102 ( 0.01%) 83.32
bgp 581 ( 0.00%) 109108 ( 0.00%) 187.79
napster 1061 ( 0.00%) 70413 ( 0.00%) 66.36
realaud 1808 ( 0.00%) 116205 ( 0.00%) 64.27
rtsp 14632 ( 0.03%) 15023855 ( 0.05%) 1026.78
icecast 3619 ( 0.01%) 379299 ( 0.00%) 104.81
hotline 79 ( 0.00%) 5104 ( 0.00%) 64.61
other 11304684 ( 26.63%) 1930366616 ( 6.87%) 170.76
udp 4079174 ( 9.61%) 1734145147 ( 6.18%) 425.12
dns 646011 ( 1.52%) 154445602 ( 0.55%) 239.08
realaud 21 ( 0.00%) 2164 ( 0.00%) 103.05
halflif 4522 ( 0.01%) 275499 ( 0.00%) 60.92
starcra 96 ( 0.00%) 9661 ( 0.00%) 100.64
everque 639 ( 0.00%) 134464 ( 0.00%) 210.43
unreal 95 ( 0.00%) 11075 ( 0.00%) 116.58
quake 1611 ( 0.00%) 136068 ( 0.00%) 84.46
cuseeme 9 ( 0.00%) 1407 ( 0.00%) 156.33
other 3420777 ( 8.06%) 1578728116 ( 5.62%) 461.51
icmp 453010 ( 1.07%) 97291450 ( 0.35%) 214.77
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5793 ( 0.01%) 1989155 ( 0.01%) 343.37
ip6 848046 ( 2.00%) 736626060 ( 2.62%) 868.62
other 18667 ( 0.04%) 6318470 ( 0.02%) 338.48
frag 11910 ( 0.03%) 9428031 ( 0.03%) 791.61
ip6 573662 ( 1.35%) 504573859 ( 1.80%) 879.57
tcp6 500754 ( 1.18%) 485068453 ( 1.73%) 968.68
http(s) 18121 ( 0.04%) 22904642 ( 0.08%) 1263.98
http(c) 34308 ( 0.08%) 3263302 ( 0.01%) 95.12
smtp 760 ( 0.00%) 632416 ( 0.00%) 832.13
ftp 45 ( 0.00%) 4188 ( 0.00%) 93.07
dns 402 ( 0.00%) 83503 ( 0.00%) 207.72
bgp 85 ( 0.00%) 12847 ( 0.00%) 151.14
other 447033 ( 1.05%) 458167555 ( 1.63%) 1024.91
udp6 47057 ( 0.11%) 13992179 ( 0.05%) 297.35
dns 42438 ( 0.10%) 12774376 ( 0.05%) 301.01
halflif 2 ( 0.00%) 216 ( 0.00%) 108.00
everque 9 ( 0.00%) 797 ( 0.00%) 88.56
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
other 4607 ( 0.01%) 1216688 ( 0.00%) 264.10
icmp6 23595 ( 0.06%) 3854467 ( 0.01%) 163.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2226 ( 0.01%) 1654680 ( 0.01%) 743.34
tcpdump file: 201108081400.dump.gz (1037.40 MB)