Traffic Trace Info
DumpFile: 201108131400.dump
FileSize: 2741.39MB
Id: 201108131400
StartTime: Sat Aug 13 14:00:01 2011
EndTime: Sat Aug 13 14:15:00 2011
TotalTime: 899.75 seconds
TotalCapSize: -1932.27MB CapLen: 96 bytes
# of packets: 37856845 (24267.63MB)
AvgRate: 226.25Mbps stddev:81.61M
IP flow (unique src/dst pair) Information
# of flows: 1103093 (avg. 34.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 3.2% 2.4% 1.9% 1.3% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 532382
Top 10 bandwidth usage (bytes/total in %):
19.8% 11.6% 8.5% 8.5% 4.5% 3.4% 2.8% 2.8% 2.6% 2.1%
# of IPv6 addresses: 3342
Top 10 bandwidth usage (bytes/total in %):
94.9% 59.6% 35.0% 3.0% 3.0% 0.9% 0.8% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108131400.pktlen.png)
detailed numbers
[ 32- 63]: 10598685
[ 64- 127]: 9463821
[ 128- 255]: 801518
[ 256- 511]: 570206
[ 512- 1023]: 664466
[ 1024- 2047]: 15758149
Protocol Breakdown
![[protocol breakdown chart]](201108131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37856845 (100.00%) 25446454869 (100.00%) 672.18
ip 36453581 ( 96.29%) 24053808621 ( 94.53%) 659.85
tcp 32221770 ( 85.11%) 22291627243 ( 87.60%) 691.82
http(s) 12106382 ( 31.98%) 16202307885 ( 63.67%) 1338.33
http(c) 5395382 ( 14.25%) 654389231 ( 2.57%) 121.29
squid 60258 ( 0.16%) 33115662 ( 0.13%) 549.56
smtp 181718 ( 0.48%) 71981581 ( 0.28%) 396.12
nntp 4 ( 0.00%) 258 ( 0.00%) 64.50
ftp 181563 ( 0.48%) 52623448 ( 0.21%) 289.84
pop3 48548 ( 0.13%) 40458742 ( 0.16%) 833.38
imap 9157 ( 0.02%) 6562503 ( 0.03%) 716.67
telnet 22138 ( 0.06%) 1680054 ( 0.01%) 75.89
ssh 288460 ( 0.76%) 35385780 ( 0.14%) 122.67
dns 21268 ( 0.06%) 1461542 ( 0.01%) 68.72
bgp 558 ( 0.00%) 95871 ( 0.00%) 171.81
napster 762 ( 0.00%) 48747 ( 0.00%) 63.97
realaud 198 ( 0.00%) 13887 ( 0.00%) 70.14
rtsp 10206 ( 0.03%) 10540938 ( 0.04%) 1032.82
icecast 3758 ( 0.01%) 758246 ( 0.00%) 201.77
hotline 135 ( 0.00%) 9667 ( 0.00%) 71.61
other 13891275 ( 36.69%) 5180193201 ( 20.36%) 372.91
udp 3122092 ( 8.25%) 1162843011 ( 4.57%) 372.46
dns 458644 ( 1.21%) 101482631 ( 0.40%) 221.27
realaud 25 ( 0.00%) 2936 ( 0.00%) 117.44
halflif 291 ( 0.00%) 23392 ( 0.00%) 80.38
starcra 33 ( 0.00%) 4056 ( 0.00%) 122.91
everque 3659 ( 0.01%) 2342747 ( 0.01%) 640.27
unreal 39 ( 0.00%) 5133 ( 0.00%) 131.62
quake 1874 ( 0.00%) 349213 ( 0.00%) 186.35
cuseeme 8 ( 0.00%) 1173 ( 0.00%) 146.62
other 2657339 ( 7.02%) 1058495426 ( 4.16%) 398.33
icmp 413591 ( 1.09%) 82425311 ( 0.32%) 199.29
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 14685 ( 0.04%) 3203134 ( 0.01%) 218.12
ip6 664592 ( 1.76%) 508242415 ( 2.00%) 764.74
other 16667 ( 0.04%) 5448347 ( 0.02%) 326.89
frag 1269 ( 0.00%) 1450573 ( 0.01%) 1143.08
ip6 1403264 ( 3.71%) 1392646248 ( 5.47%) 992.43
tcp6 1351418 ( 3.57%) 1381415427 ( 5.43%) 1022.20
http(s) 5046 ( 0.01%) 4528667 ( 0.02%) 897.48
http(c) 13458 ( 0.04%) 1223419 ( 0.00%) 90.91
smtp 488 ( 0.00%) 128165 ( 0.00%) 262.63
ftp 44 ( 0.00%) 4065 ( 0.00%) 92.39
dns 231 ( 0.00%) 51346 ( 0.00%) 222.28
bgp 91 ( 0.00%) 17548 ( 0.00%) 192.84
other 1332060 ( 3.52%) 1375462217 ( 5.41%) 1032.58
udp6 30909 ( 0.08%) 7749248 ( 0.03%) 250.71
dns 28399 ( 0.08%) 7406215 ( 0.03%) 260.79
realaud 3 ( 0.00%) 315 ( 0.00%) 105.00
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 4 ( 0.00%) 588 ( 0.00%) 147.00
cuseeme 1 ( 0.00%) 97 ( 0.00%) 97.00
other 2501 ( 0.01%) 341932 ( 0.00%) 136.72
icmp6 20730 ( 0.05%) 3312330 ( 0.01%) 159.78
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 176 ( 0.00%) 165027 ( 0.00%) 937.65
tcpdump file: 201108131400.dump.gz (919.16 MB)