Traffic Trace Info
DumpFile: 201108141400.dump
FileSize: 2636.72MB
Id: 201108141400
StartTime: Sun Aug 14 14:00:00 2011
EndTime: Sun Aug 14 14:15:00 2011
TotalTime: 900.36 seconds
TotalCapSize: -2021.89MB CapLen: 96 bytes
# of packets: 36871012 (23170.33MB)
AvgRate: 215.92Mbps stddev:46.71M
IP flow (unique src/dst pair) Information
# of flows: 1280847 (avg. 28.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.1% 1.5% 1.4% 1.1% 1.1% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 579830
Top 10 bandwidth usage (bytes/total in %):
23.7% 10.1% 5.7% 4.0% 3.8% 3.7% 3.3% 2.5% 2.4% 2.3%
# of IPv6 addresses: 3164
Top 10 bandwidth usage (bytes/total in %):
81.7% 76.4% 21.8% 8.5% 6.0% 1.9% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108141400.pktlen.png)
detailed numbers
[ 32- 63]: 11145809
[ 64- 127]: 8614050
[ 128- 255]: 829970
[ 256- 511]: 593330
[ 512- 1023]: 653889
[ 1024- 2047]: 15033964
Protocol Breakdown
![[protocol breakdown chart]](201108141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36871012 (100.00%) 24295847069 (100.00%) 658.94
ip 35973425 ( 97.57%) 23396477013 ( 96.30%) 650.38
tcp 31647445 ( 85.83%) 21501264644 ( 88.50%) 679.40
http(s) 12485672 ( 33.86%) 16772623102 ( 69.03%) 1343.35
http(c) 5380859 ( 14.59%) 527941902 ( 2.17%) 98.11
squid 74382 ( 0.20%) 46767130 ( 0.19%) 628.74
smtp 186291 ( 0.51%) 34750535 ( 0.14%) 186.54
ftp 115397 ( 0.31%) 44488629 ( 0.18%) 385.53
pop3 7569 ( 0.02%) 1591630 ( 0.01%) 210.28
imap 7924 ( 0.02%) 3985158 ( 0.02%) 502.92
telnet 27791 ( 0.08%) 2083404 ( 0.01%) 74.97
ssh 78383 ( 0.21%) 20554707 ( 0.08%) 262.23
dns 21663 ( 0.06%) 1471366 ( 0.01%) 67.92
bgp 548 ( 0.00%) 92394 ( 0.00%) 168.60
napster 1478 ( 0.00%) 94612 ( 0.00%) 64.01
realaud 100 ( 0.00%) 6370 ( 0.00%) 63.70
rtsp 30272 ( 0.08%) 33761590 ( 0.14%) 1115.27
icecast 3454 ( 0.01%) 852541 ( 0.00%) 246.83
hotline 92 ( 0.00%) 5792 ( 0.00%) 62.96
other 13225570 ( 35.87%) 4010193782 ( 16.51%) 303.22
udp 3213091 ( 8.71%) 1330698304 ( 5.48%) 414.15
dns 448103 ( 1.22%) 99785847 ( 0.41%) 222.69
realaud 6 ( 0.00%) 558 ( 0.00%) 93.00
halflif 269 ( 0.00%) 28831 ( 0.00%) 107.18
starcra 82 ( 0.00%) 7327 ( 0.00%) 89.35
everque 215 ( 0.00%) 37653 ( 0.00%) 175.13
unreal 36 ( 0.00%) 4806 ( 0.00%) 133.50
quake 1917 ( 0.01%) 357192 ( 0.00%) 186.33
cuseeme 12 ( 0.00%) 897 ( 0.00%) 74.75
other 2762354 ( 7.49%) 1230425528 ( 5.06%) 445.43
icmp 346292 ( 0.94%) 31618766 ( 0.13%) 91.31
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 3018 ( 0.01%) 407260 ( 0.00%) 134.94
ip6 746324 ( 2.02%) 526587115 ( 2.17%) 705.57
other 17069 ( 0.05%) 5881544 ( 0.02%) 344.57
frag 579 ( 0.00%) 587023 ( 0.00%) 1013.86
ip6 897587 ( 2.43%) 899370056 ( 3.70%) 1001.99
tcp6 843023 ( 2.29%) 887105844 ( 3.65%) 1052.29
http(s) 1475 ( 0.00%) 1327803 ( 0.01%) 900.21
http(c) 6924 ( 0.02%) 718135 ( 0.00%) 103.72
smtp 102 ( 0.00%) 33696 ( 0.00%) 330.35
ftp 69 ( 0.00%) 6425 ( 0.00%) 93.12
pop3 3 ( 0.00%) 254 ( 0.00%) 84.67
dns 233 ( 0.00%) 53099 ( 0.00%) 227.89
bgp 89 ( 0.00%) 14274 ( 0.00%) 160.38
other 834128 ( 2.26%) 884952158 ( 3.64%) 1060.93
udp6 33368 ( 0.09%) 8266598 ( 0.03%) 247.74
dns 30216 ( 0.08%) 7670816 ( 0.03%) 253.87
everque 4 ( 0.00%) 588 ( 0.00%) 147.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 3147 ( 0.01%) 595084 ( 0.00%) 189.10
icmp6 20050 ( 0.05%) 3152341 ( 0.01%) 157.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1116 ( 0.00%) 841193 ( 0.00%) 753.76
tcpdump file: 201108141400.dump.gz (898.17 MB)