Traffic Trace Info
DumpFile: 201108101400.dump
FileSize: 3581.02MB
Id: 201108101400
StartTime: Wed Aug 10 14:00:01 2011
EndTime: Wed Aug 10 14:15:00 2011
TotalTime: 899.34 seconds
TotalCapSize: -1288.58MB CapLen: 96 bytes
# of packets: 50697986 (36807.22MB)
AvgRate: 343.43Mbps stddev:68.66M
IP flow (unique src/dst pair) Information
# of flows: 1623717 (avg. 31.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.2% 3.7% 2.1% 1.7% 1.4% 1.4% 1.3% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 776846
Top 10 bandwidth usage (bytes/total in %):
18.9% 12.4% 10.8% 4.0% 3.8% 3.8% 3.7% 3.3% 2.3% 2.2%
# of IPv6 addresses: 3876
Top 10 bandwidth usage (bytes/total in %):
52.9% 32.2% 26.1% 22.7% 21.3% 5.1% 4.1% 3.9% 3.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108101400.pktlen.png)
detailed numbers
[ 32- 63]: 12615917
[ 64- 127]: 10247050
[ 128- 255]: 1551708
[ 256- 511]: 903858
[ 512- 1023]: 1621938
[ 1024- 2047]: 23757515
Protocol Breakdown
![[protocol breakdown chart]](201108101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50697986 (100.00%) 38595166862 (100.00%) 761.28
ip 50411680 ( 99.44%) 38356056318 ( 99.38%) 760.86
tcp 44253972 ( 87.29%) 35841797883 ( 92.87%) 809.91
http(s) 23067459 ( 45.50%) 30577934605 ( 79.23%) 1325.59
http(c) 10200533 ( 20.12%) 2071719811 ( 5.37%) 203.10
squid 96930 ( 0.19%) 67453636 ( 0.17%) 695.90
smtp 292304 ( 0.58%) 151465036 ( 0.39%) 518.18
nntp 10 ( 0.00%) 620 ( 0.00%) 62.00
ftp 20741 ( 0.04%) 10802350 ( 0.03%) 520.82
pop3 50715 ( 0.10%) 32960889 ( 0.09%) 649.92
imap 13988 ( 0.03%) 7965419 ( 0.02%) 569.45
telnet 884 ( 0.00%) 122577 ( 0.00%) 138.66
ssh 122053 ( 0.24%) 17582195 ( 0.05%) 144.05
dns 33266 ( 0.07%) 2511062 ( 0.01%) 75.48
bgp 562 ( 0.00%) 109569 ( 0.00%) 194.96
napster 1627 ( 0.00%) 111741 ( 0.00%) 68.68
realaud 1764 ( 0.00%) 114546 ( 0.00%) 64.94
rtsp 8711 ( 0.02%) 10402453 ( 0.03%) 1194.17
icecast 1058 ( 0.00%) 98905 ( 0.00%) 93.48
hotline 82 ( 0.00%) 5569 ( 0.00%) 67.91
other 10341285 ( 20.40%) 2890436900 ( 7.49%) 279.50
udp 5138913 ( 10.14%) 2005489333 ( 5.20%) 390.26
dns 721866 ( 1.42%) 169933088 ( 0.44%) 235.41
realaud 68 ( 0.00%) 7536 ( 0.00%) 110.82
halflif 447 ( 0.00%) 85974 ( 0.00%) 192.34
starcra 82 ( 0.00%) 12679 ( 0.00%) 154.62
everque 650 ( 0.00%) 122333 ( 0.00%) 188.20
unreal 106 ( 0.00%) 16460 ( 0.00%) 155.28
quake 1945 ( 0.00%) 358383 ( 0.00%) 184.26
cuseeme 6 ( 0.00%) 809 ( 0.00%) 134.83
other 4411403 ( 8.70%) 1834638389 ( 4.75%) 415.89
icmp 341946 ( 0.67%) 58651582 ( 0.15%) 171.52
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3474 ( 0.01%) 570364 ( 0.00%) 164.18
ip6 653263 ( 1.29%) 442692269 ( 1.15%) 677.66
other 19928 ( 0.04%) 6835727 ( 0.02%) 343.02
frag 9849 ( 0.02%) 7976181 ( 0.02%) 809.85
ip6 286304 ( 0.56%) 239110424 ( 0.62%) 835.16
tcp6 210116 ( 0.41%) 213467963 ( 0.55%) 1015.95
http(s) 11855 ( 0.02%) 14744980 ( 0.04%) 1243.78
http(c) 8615 ( 0.02%) 844715 ( 0.00%) 98.05
smtp 396 ( 0.00%) 95226 ( 0.00%) 240.47
ftp 95 ( 0.00%) 8814 ( 0.00%) 92.78
dns 272 ( 0.00%) 53803 ( 0.00%) 197.81
bgp 88 ( 0.00%) 14303 ( 0.00%) 162.53
other 188795 ( 0.37%) 197706122 ( 0.51%) 1047.20
udp6 43910 ( 0.09%) 12732421 ( 0.03%) 289.97
dns 40071 ( 0.08%) 12177292 ( 0.03%) 303.89
everque 3 ( 0.00%) 331 ( 0.00%) 110.33
other 3836 ( 0.01%) 554798 ( 0.00%) 144.63
icmp6 18413 ( 0.04%) 3089955 ( 0.01%) 167.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13835 ( 0.03%) 9816005 ( 0.03%) 709.51
tcpdump file: 201108101400.dump.gz (1193.89 MB)