Traffic Trace Info
DumpFile: 201108151400.dump
FileSize: 3257.15MB
Id: 201108151400
StartTime: Mon Aug 15 14:00:00 2011
EndTime: Mon Aug 15 14:15:01 2011
TotalTime: 900.63 seconds
TotalCapSize: -1529.45MB CapLen: 96 bytes
# of packets: 45258547 (30059.69MB)
AvgRate: 279.97Mbps stddev:52.28M
IP flow (unique src/dst pair) Information
# of flows: 1306498 (avg. 34.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.3% 1.8% 1.6% 1.6% 1.4% 1.2% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 573341
Top 10 bandwidth usage (bytes/total in %):
21.4% 9.6% 5.3% 4.0% 3.5% 3.3% 3.2% 2.8% 2.5% 2.2%
# of IPv6 addresses: 3714
Top 10 bandwidth usage (bytes/total in %):
79.8% 79.7% 12.6% 12.6% 2.9% 2.9% 1.8% 0.9% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108151400.pktlen.png)
detailed numbers
[ 32- 63]: 12250802
[ 64- 127]: 10713719
[ 128- 255]: 1171091
[ 256- 511]: 601865
[ 512- 1023]: 764462
[ 1024- 2047]: 19756608
Protocol Breakdown
![[protocol breakdown chart]](201108151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45258547 (100.00%) 31519873449 (100.00%) 696.44
ip 44263543 ( 97.80%) 30582329511 ( 97.03%) 690.91
tcp 38106969 ( 84.20%) 27077491819 ( 85.91%) 710.57
http(s) 17038340 ( 37.65%) 22913103810 ( 72.69%) 1344.80
http(c) 6756643 ( 14.93%) 865731980 ( 2.75%) 128.13
squid 121565 ( 0.27%) 87502916 ( 0.28%) 719.80
smtp 187323 ( 0.41%) 100519870 ( 0.32%) 536.61
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 188828 ( 0.42%) 47699597 ( 0.15%) 252.61
pop3 8438 ( 0.02%) 1838439 ( 0.01%) 217.88
imap 7862 ( 0.02%) 3495230 ( 0.01%) 444.57
telnet 443 ( 0.00%) 76238 ( 0.00%) 172.09
ssh 67358 ( 0.15%) 12257272 ( 0.04%) 181.97
dns 20089 ( 0.04%) 2975740 ( 0.01%) 148.13
bgp 564 ( 0.00%) 111482 ( 0.00%) 197.66
napster 3957 ( 0.01%) 249325 ( 0.00%) 63.01
realaud 136 ( 0.00%) 11691 ( 0.00%) 85.96
rtsp 7229 ( 0.02%) 9272221 ( 0.03%) 1282.64
icecast 3102 ( 0.01%) 902702 ( 0.00%) 291.01
hotline 99 ( 0.00%) 6184 ( 0.00%) 62.46
other 13694986 ( 30.26%) 3031736702 ( 9.62%) 221.38
udp 4392136 ( 9.70%) 2320789853 ( 7.36%) 528.40
dns 652987 ( 1.44%) 151618312 ( 0.48%) 232.19
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 12 ( 0.00%) 1369 ( 0.00%) 114.08
halflif 1019 ( 0.00%) 77027 ( 0.00%) 75.59
starcra 53 ( 0.00%) 5261 ( 0.00%) 99.26
everque 14355 ( 0.03%) 8266829 ( 0.03%) 575.88
unreal 24 ( 0.00%) 3614 ( 0.00%) 150.58
quake 4442 ( 0.01%) 838267 ( 0.00%) 188.71
other 3719041 ( 8.22%) 2159860546 ( 6.85%) 580.76
icmp 532978 ( 1.18%) 85241605 ( 0.27%) 159.93
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 409 ( 0.00%) 57462 ( 0.00%) 140.49
ip6 1214182 ( 2.68%) 1093619779 ( 3.47%) 900.70
other 16684 ( 0.04%) 5109723 ( 0.02%) 306.26
frag 1490 ( 0.00%) 1582946 ( 0.01%) 1062.38
ip6 995004 ( 2.20%) 937543938 ( 2.97%) 942.25
tcp6 930574 ( 2.06%) 919545741 ( 2.92%) 988.15
http(s) 7412 ( 0.02%) 8817814 ( 0.03%) 1189.67
http(c) 8030 ( 0.02%) 909307 ( 0.00%) 113.24
smtp 620 ( 0.00%) 792153 ( 0.00%) 1277.67
ftp 129 ( 0.00%) 12740 ( 0.00%) 98.76
dns 713 ( 0.00%) 156201 ( 0.00%) 219.08
bgp 92 ( 0.00%) 20933 ( 0.00%) 227.53
other 913578 ( 2.02%) 908836593 ( 2.88%) 994.81
udp6 43055 ( 0.10%) 12032680 ( 0.04%) 279.47
dns 39675 ( 0.09%) 11595590 ( 0.04%) 292.26
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 3 ( 0.00%) 642 ( 0.00%) 214.00
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3374 ( 0.01%) 436130 ( 0.00%) 129.26
icmp6 17258 ( 0.04%) 3004823 ( 0.01%) 174.11
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4087 ( 0.01%) 2956614 ( 0.01%) 723.42
tcpdump file: 201108151400.dump.gz (1098.59 MB)