Traffic Trace Info
DumpFile: 201108171400.dump
FileSize: 3405.28MB
Id: 201108171400
StartTime: Wed Aug 17 14:00:01 2011
EndTime: Wed Aug 17 14:15:01 2011
TotalTime: 900.05 seconds
TotalCapSize: -1426.46MB CapLen: 96 bytes
# of packets: 48216991 (34725.75MB)
AvgRate: 323.60Mbps stddev:52.50M
IP flow (unique src/dst pair) Information
# of flows: 1202604 (avg. 40.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 2.8% 2.7% 2.3% 1.7% 1.5% 1.3% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 579274
Top 10 bandwidth usage (bytes/total in %):
17.0% 10.5% 5.6% 5.3% 5.2% 2.9% 2.8% 2.8% 2.6% 2.5%
# of IPv6 addresses: 4550
Top 10 bandwidth usage (bytes/total in %):
77.3% 69.4% 12.5% 12.4% 5.0% 4.8% 4.8% 1.5% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108171400.pktlen.png)
detailed numbers
[ 32- 63]: 12025721
[ 64- 127]: 10307491
[ 128- 255]: 1087039
[ 256- 511]: 671855
[ 512- 1023]: 1827451
[ 1024- 2047]: 22297434
Protocol Breakdown
![[protocol breakdown chart]](201108171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48216991 (100.00%) 36412589446 (100.00%) 755.18
ip 46722337 ( 96.90%) 35580168540 ( 97.71%) 761.52
tcp 40146373 ( 83.26%) 32333971887 ( 88.80%) 805.40
http(s) 20361232 ( 42.23%) 27753434315 ( 76.22%) 1363.05
http(c) 7825634 ( 16.23%) 721923568 ( 1.98%) 92.25
squid 131571 ( 0.27%) 107186542 ( 0.29%) 814.67
smtp 219912 ( 0.46%) 104380176 ( 0.29%) 474.65
ftp 34383 ( 0.07%) 5692236 ( 0.02%) 165.55
pop3 33017 ( 0.07%) 13388948 ( 0.04%) 405.52
imap 12723 ( 0.03%) 5301028 ( 0.01%) 416.65
telnet 609 ( 0.00%) 93223 ( 0.00%) 153.08
ssh 140316 ( 0.29%) 79446761 ( 0.22%) 566.20
dns 19195 ( 0.04%) 1541459 ( 0.00%) 80.31
bgp 565 ( 0.00%) 100450 ( 0.00%) 177.79
napster 1894 ( 0.00%) 119433 ( 0.00%) 63.06
realaud 76 ( 0.00%) 5274 ( 0.00%) 69.39
rtsp 8674 ( 0.02%) 10404851 ( 0.03%) 1199.54
icecast 1409 ( 0.00%) 157217 ( 0.00%) 111.58
hotline 130 ( 0.00%) 8609 ( 0.00%) 66.22
other 11355033 ( 23.55%) 3530787797 ( 9.70%) 310.94
udp 5488353 ( 11.38%) 2676184546 ( 7.35%) 487.61
dns 654865 ( 1.36%) 157470038 ( 0.43%) 240.46
realaud 65 ( 0.00%) 7278 ( 0.00%) 111.97
halflif 146 ( 0.00%) 17245 ( 0.00%) 118.12
starcra 27 ( 0.00%) 4061 ( 0.00%) 150.41
everque 364 ( 0.00%) 70997 ( 0.00%) 195.05
unreal 49 ( 0.00%) 7265 ( 0.00%) 148.27
quake 2846 ( 0.01%) 522748 ( 0.00%) 183.68
cuseeme 15 ( 0.00%) 1416 ( 0.00%) 94.40
other 4829596 ( 10.02%) 2517822691 ( 6.91%) 521.33
icmp 380185 ( 0.79%) 35638553 ( 0.10%) 93.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2555 ( 0.01%) 590866 ( 0.00%) 231.26
ip6 679029 ( 1.41%) 524383838 ( 1.44%) 772.26
other 25657 ( 0.05%) 9379580 ( 0.03%) 365.58
frag 1894 ( 0.00%) 2120009 ( 0.01%) 1119.33
ip6 1494654 ( 3.10%) 832420906 ( 2.29%) 556.93
tcp6 1373492 ( 2.85%) 775741202 ( 2.13%) 564.79
http(s) 14586 ( 0.03%) 19268198 ( 0.05%) 1321.01
http(c) 130737 ( 0.27%) 11275043 ( 0.03%) 86.24
smtp 625 ( 0.00%) 249095 ( 0.00%) 398.55
ftp 95 ( 0.00%) 8825 ( 0.00%) 92.89
dns 268 ( 0.00%) 56302 ( 0.00%) 210.08
bgp 88 ( 0.00%) 14827 ( 0.00%) 168.49
other 1227093 ( 2.54%) 744868912 ( 2.05%) 607.02
udp6 43767 ( 0.09%) 12216264 ( 0.03%) 279.12
dns 39858 ( 0.08%) 11582817 ( 0.03%) 290.60
everque 7 ( 0.00%) 594 ( 0.00%) 84.86
other 3902 ( 0.01%) 632853 ( 0.00%) 162.19
icmp6 19091 ( 0.04%) 3456462 ( 0.01%) 181.05
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 58273 ( 0.12%) 41002762 ( 0.11%) 703.63
tcpdump file: 201108171400.dump.gz (1126.01 MB)