Traffic Trace Info
DumpFile: 201108091400.dump
FileSize: 3479.64MB
Id: 201108091400
StartTime: Tue Aug 9 14:00:01 2011
EndTime: Tue Aug 9 14:15:00 2011
TotalTime: 899.77 seconds
TotalCapSize: -1357.71MB CapLen: 96 bytes
# of packets: 48584357 (36277.68MB)
AvgRate: 338.25Mbps stddev:50.78M
IP flow (unique src/dst pair) Information
# of flows: 1607537 (avg. 30.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.7% 1.6% 1.4% 1.3% 1.3% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 812964
Top 10 bandwidth usage (bytes/total in %):
16.2% 6.6% 4.9% 4.6% 3.1% 3.0% 2.8% 2.3% 2.1% 1.9%
# of IPv6 addresses: 3839
Top 10 bandwidth usage (bytes/total in %):
36.7% 36.5% 25.8% 25.8% 10.6% 10.6% 9.4% 5.7% 5.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108091400.pktlen.png)
detailed numbers
[ 32- 63]: 10299688
[ 64- 127]: 10710159
[ 128- 255]: 1694508
[ 256- 511]: 999554
[ 512- 1023]: 1136395
[ 1024- 2047]: 23744053
Protocol Breakdown
![[protocol breakdown chart]](201108091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48584357 (100.00%) 38039900305 (100.00%) 782.97
ip 48226609 ( 99.26%) 37752916493 ( 99.25%) 782.82
tcp 42676065 ( 87.84%) 35321444196 ( 92.85%) 827.66
http(s) 22644022 ( 46.61%) 30546387301 ( 80.30%) 1348.98
http(c) 9708350 ( 19.98%) 1106490951 ( 2.91%) 113.97
squid 88265 ( 0.18%) 57519633 ( 0.15%) 651.67
smtp 257324 ( 0.53%) 90882680 ( 0.24%) 353.18
ftp 59485 ( 0.12%) 46617733 ( 0.12%) 783.69
pop3 28252 ( 0.06%) 19800406 ( 0.05%) 700.85
imap 18930 ( 0.04%) 15253790 ( 0.04%) 805.80
telnet 663 ( 0.00%) 78028 ( 0.00%) 117.69
ssh 1884747 ( 3.88%) 696137710 ( 1.83%) 369.35
dns 32369 ( 0.07%) 3965345 ( 0.01%) 122.50
bgp 577 ( 0.00%) 122537 ( 0.00%) 212.37
napster 119 ( 0.00%) 10287 ( 0.00%) 86.45
realaud 66 ( 0.00%) 8900 ( 0.00%) 134.85
rtsp 6236 ( 0.01%) 7669953 ( 0.02%) 1229.95
icecast 909 ( 0.00%) 159455 ( 0.00%) 175.42
hotline 167 ( 0.00%) 14487 ( 0.00%) 86.75
other 7945583 ( 16.35%) 2730324940 ( 7.18%) 343.63
udp 4045624 ( 8.33%) 1520246512 ( 4.00%) 375.78
dns 742403 ( 1.53%) 171178130 ( 0.45%) 230.57
realaud 36 ( 0.00%) 4657 ( 0.00%) 129.36
halflif 384 ( 0.00%) 34586 ( 0.00%) 90.07
starcra 386 ( 0.00%) 39498 ( 0.00%) 102.33
everque 443 ( 0.00%) 84637 ( 0.00%) 191.05
unreal 33 ( 0.00%) 3805 ( 0.00%) 115.30
quake 2878 ( 0.01%) 528326 ( 0.00%) 183.57
cuseeme 13 ( 0.00%) 4026 ( 0.00%) 309.69
other 3298636 ( 6.79%) 1348231341 ( 3.54%) 408.72
icmp 325237 ( 0.67%) 43614518 ( 0.11%) 134.10
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7101 ( 0.01%) 956840 ( 0.00%) 134.75
ip6 1152858 ( 2.37%) 861145047 ( 2.26%) 746.97
other 19539 ( 0.04%) 5490110 ( 0.01%) 280.98
frag 1862 ( 0.00%) 1777374 ( 0.00%) 954.55
ip6 357748 ( 0.74%) 286983812 ( 0.75%) 802.20
tcp6 293622 ( 0.60%) 268895492 ( 0.71%) 915.79
http(s) 80580 ( 0.17%) 118073099 ( 0.31%) 1465.29
http(c) 64836 ( 0.13%) 5871762 ( 0.02%) 90.56
smtp 280 ( 0.00%) 53829 ( 0.00%) 192.25
ftp 43 ( 0.00%) 3918 ( 0.00%) 91.12
pop3 63 ( 0.00%) 6822 ( 0.00%) 108.29
dns 253 ( 0.00%) 55561 ( 0.00%) 219.61
bgp 95 ( 0.00%) 16625 ( 0.00%) 175.00
other 147472 ( 0.30%) 144813876 ( 0.38%) 981.98
udp6 43757 ( 0.09%) 12506110 ( 0.03%) 285.81
dns 40733 ( 0.08%) 12068106 ( 0.03%) 296.27
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 3023 ( 0.01%) 437893 ( 0.00%) 144.85
icmp6 16811 ( 0.03%) 2963706 ( 0.01%) 176.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3528 ( 0.01%) 2614424 ( 0.01%) 741.05
tcpdump file: 201108091400.dump.gz (1138.96 MB)