Traffic Trace Info
DumpFile: 201108121400.dump
FileSize: 2931.87MB
Id: 201108121400
StartTime: Fri Aug 12 14:00:00 2011
EndTime: Fri Aug 12 14:15:00 2011
TotalTime: 899.47 seconds
TotalCapSize: -1786.04MB CapLen: 96 bytes
# of packets: 40756936 (27422.53MB)
AvgRate: 255.74Mbps stddev:39.32M
IP flow (unique src/dst pair) Information
# of flows: 1365431 (avg. 29.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.8% 2.8% 1.8% 1.8% 1.8% 1.7% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 644156
Top 10 bandwidth usage (bytes/total in %):
11.4% 5.9% 5.9% 4.5% 4.4% 4.0% 3.9% 3.9% 3.8% 2.9%
# of IPv6 addresses: 3684
Top 10 bandwidth usage (bytes/total in %):
66.8% 35.7% 31.2% 13.0% 12.0% 5.7% 4.5% 3.8% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108121400.pktlen.png)
detailed numbers
[ 32- 63]: 10613484
[ 64- 127]: 9465173
[ 128- 255]: 1130573
[ 256- 511]: 639123
[ 512- 1023]: 1156005
[ 1024- 2047]: 17752578
Protocol Breakdown
![[protocol breakdown chart]](201108121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40756936 (100.00%) 28754611100 (100.00%) 705.51
ip 40334637 ( 98.96%) 28418208924 ( 98.83%) 704.56
tcp 36108706 ( 88.60%) 26720551770 ( 92.93%) 740.00
http(s) 15461955 ( 37.94%) 20725827336 ( 72.08%) 1340.44
http(c) 6542903 ( 16.05%) 1008700074 ( 3.51%) 154.17
squid 88004 ( 0.22%) 53773326 ( 0.19%) 611.03
smtp 216720 ( 0.53%) 88413155 ( 0.31%) 407.96
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 32255 ( 0.08%) 4945045 ( 0.02%) 153.31
pop3 19736 ( 0.05%) 8453758 ( 0.03%) 428.34
imap 7005 ( 0.02%) 3867139 ( 0.01%) 552.05
telnet 895 ( 0.00%) 98191 ( 0.00%) 109.71
ssh 1931444 ( 4.74%) 1182479122 ( 4.11%) 612.23
dns 28446 ( 0.07%) 3695217 ( 0.01%) 129.90
bgp 560 ( 0.00%) 100978 ( 0.00%) 180.32
napster 634 ( 0.00%) 41173 ( 0.00%) 64.94
realaud 135 ( 0.00%) 9809 ( 0.00%) 72.66
rtsp 140 ( 0.00%) 25401 ( 0.00%) 181.44
icecast 1760 ( 0.00%) 452388 ( 0.00%) 257.04
hotline 65 ( 0.00%) 4473 ( 0.00%) 68.82
other 11776046 ( 28.89%) 3639665005 ( 12.66%) 309.07
udp 2945527 ( 7.23%) 995475776 ( 3.46%) 337.96
dns 636032 ( 1.56%) 149027610 ( 0.52%) 234.31
rip 2 ( 0.00%) 177 ( 0.00%) 88.50
realaud 40 ( 0.00%) 5145 ( 0.00%) 128.62
halflif 474 ( 0.00%) 35408 ( 0.00%) 74.70
starcra 52 ( 0.00%) 5911 ( 0.00%) 113.67
everque 385 ( 0.00%) 79778 ( 0.00%) 207.22
unreal 30 ( 0.00%) 3660 ( 0.00%) 122.00
quake 2840 ( 0.01%) 531062 ( 0.00%) 186.99
cuseeme 4 ( 0.00%) 345 ( 0.00%) 86.25
other 2305523 ( 5.66%) 845692593 ( 2.94%) 366.81
icmp 426533 ( 1.05%) 83341291 ( 0.29%) 195.39
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 26438 ( 0.06%) 9059972 ( 0.03%) 342.69
ip6 810155 ( 1.99%) 604460634 ( 2.10%) 746.10
other 17095 ( 0.04%) 5300419 ( 0.02%) 310.06
frag 1248 ( 0.00%) 1404870 ( 0.00%) 1125.70
ip6 422297 ( 1.04%) 336402056 ( 1.17%) 796.60
tcp6 358223 ( 0.88%) 320912013 ( 1.12%) 895.84
http(s) 6362 ( 0.02%) 5422414 ( 0.02%) 852.31
http(c) 46628 ( 0.11%) 4317812 ( 0.02%) 92.60
squid 44 ( 0.00%) 45855 ( 0.00%) 1042.16
smtp 174 ( 0.00%) 61755 ( 0.00%) 354.91
ftp 41 ( 0.00%) 3746 ( 0.00%) 91.37
dns 344 ( 0.00%) 76890 ( 0.00%) 223.52
bgp 92 ( 0.00%) 16743 ( 0.00%) 181.99
other 304538 ( 0.75%) 310966798 ( 1.08%) 1021.11
udp6 42643 ( 0.10%) 11597055 ( 0.04%) 271.96
dns 38612 ( 0.09%) 10652197 ( 0.04%) 275.88
starcra 6 ( 0.00%) 552 ( 0.00%) 92.00
everque 16 ( 0.00%) 2073 ( 0.00%) 129.56
unreal 2 ( 0.00%) 212 ( 0.00%) 106.00
other 4007 ( 0.01%) 942021 ( 0.00%) 235.09
icmp6 20797 ( 0.05%) 3409236 ( 0.01%) 163.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 604 ( 0.00%) 479672 ( 0.00%) 794.16
tcpdump file: 201108121400.dump.gz (989.06 MB)