Traffic Trace Info
DumpFile: 201108111400.dump
FileSize: 2748.95MB
Id: 201108111400
StartTime: Thu Aug 11 14:00:00 2011
EndTime: Thu Aug 11 14:15:01 2011
TotalTime: 900.61 seconds
TotalCapSize: -1938.78MB CapLen: 96 bytes
# of packets: 38778656 (25941.43MB)
AvgRate: 241.64Mbps stddev:39.30M
IP flow (unique src/dst pair) Information
# of flows: 1303537 (avg. 29.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.3% 2.1% 2.1% 1.7% 1.2% 1.2% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 632678
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.3% 6.4% 4.9% 3.9% 3.6% 3.0% 2.4% 2.4% 2.4%
# of IPv6 addresses: 4011
Top 10 bandwidth usage (bytes/total in %):
43.8% 25.9% 17.5% 17.5% 11.5% 8.3% 3.4% 2.9% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108111400.pktlen.png)
detailed numbers
[ 32- 63]: 9139386
[ 64- 127]: 9307877
[ 128- 255]: 1521739
[ 256- 511]: 853761
[ 512- 1023]: 1446185
[ 1024- 2047]: 16509708
Protocol Breakdown
![[protocol breakdown chart]](201108111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38778656 (100.00%) 27201560059 (100.00%) 701.46
ip 38584840 ( 99.50%) 27108582983 ( 99.66%) 702.57
tcp 31922450 ( 82.32%) 23820704108 ( 87.57%) 746.21
http(s) 14226341 ( 36.69%) 18259509935 ( 67.13%) 1283.50
http(c) 6607341 ( 17.04%) 1431814873 ( 5.26%) 216.70
squid 143545 ( 0.37%) 127168283 ( 0.47%) 885.91
smtp 194903 ( 0.50%) 76396155 ( 0.28%) 391.97
nntp 4 ( 0.00%) 268 ( 0.00%) 67.00
ftp 52978 ( 0.14%) 35326981 ( 0.13%) 666.82
pop3 28051 ( 0.07%) 17717286 ( 0.07%) 631.61
imap 10084 ( 0.03%) 3726956 ( 0.01%) 369.59
telnet 807 ( 0.00%) 87331 ( 0.00%) 108.22
ssh 194321 ( 0.50%) 101350321 ( 0.37%) 521.56
dns 27301 ( 0.07%) 2041567 ( 0.01%) 74.78
bgp 577 ( 0.00%) 110168 ( 0.00%) 190.93
napster 564 ( 0.00%) 36489 ( 0.00%) 64.70
realaud 72 ( 0.00%) 5066 ( 0.00%) 70.36
rtsp 5437 ( 0.01%) 3995768 ( 0.01%) 734.92
icecast 2131 ( 0.01%) 172292 ( 0.00%) 80.85
hotline 195 ( 0.00%) 16527 ( 0.00%) 84.75
other 10427797 ( 26.89%) 3761227782 ( 13.83%) 360.69
udp 5644480 ( 14.56%) 2891454297 ( 10.63%) 512.26
dns 687372 ( 1.77%) 162703939 ( 0.60%) 236.70
realaud 36 ( 0.00%) 4802 ( 0.00%) 133.39
halflif 353 ( 0.00%) 28687 ( 0.00%) 81.27
starcra 98 ( 0.00%) 17433 ( 0.00%) 177.89
everque 159 ( 0.00%) 27238 ( 0.00%) 171.31
unreal 66 ( 0.00%) 8830 ( 0.00%) 133.79
quake 2810 ( 0.01%) 520749 ( 0.00%) 185.32
cuseeme 12 ( 0.00%) 1128 ( 0.00%) 94.00
other 4953227 ( 12.77%) 2728015586 ( 10.03%) 550.76
icmp 362742 ( 0.94%) 33024741 ( 0.12%) 91.04
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4219 ( 0.01%) 863610 ( 0.00%) 204.70
ip6 523221 ( 1.35%) 331541544 ( 1.22%) 633.65
other 127543 ( 0.33%) 30975413 ( 0.11%) 242.86
frag 2421 ( 0.01%) 2462906 ( 0.01%) 1017.31
ip6 193814 ( 0.50%) 92976956 ( 0.34%) 479.72
tcp6 124398 ( 0.32%) 75263811 ( 0.28%) 605.02
http(s) 9136 ( 0.02%) 9615534 ( 0.04%) 1052.49
http(c) 61636 ( 0.16%) 5253994 ( 0.02%) 85.24
squid 52 ( 0.00%) 7025 ( 0.00%) 135.10
smtp 153 ( 0.00%) 58393 ( 0.00%) 381.65
ftp 57 ( 0.00%) 5083 ( 0.00%) 89.18
dns 246 ( 0.00%) 52442 ( 0.00%) 213.18
bgp 90 ( 0.00%) 18029 ( 0.00%) 200.32
other 53028 ( 0.14%) 60253311 ( 0.22%) 1136.25
udp6 45531 ( 0.12%) 11620938 ( 0.04%) 255.23
dns 38098 ( 0.10%) 10262841 ( 0.04%) 269.38
everque 1 ( 0.00%) 427 ( 0.00%) 427.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 7431 ( 0.02%) 1357569 ( 0.00%) 182.69
icmp6 20105 ( 0.05%) 3385144 ( 0.01%) 168.37
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3749 ( 0.01%) 2702847 ( 0.01%) 720.95
tcpdump file: 201108111400.dump.gz (938.43 MB)