Traffic Trace Info
DumpFile: 201108181400.dump
FileSize: 3017.08MB
Id: 201108181400
StartTime: Thu Aug 18 14:00:00 2011
EndTime: Thu Aug 18 14:15:00 2011
TotalTime: 899.73 seconds
TotalCapSize: -1709.16MB CapLen: 96 bytes
# of packets: 41302467 (28474.04MB)
AvgRate: 265.47Mbps stddev:56.94M
IP flow (unique src/dst pair) Information
# of flows: 1108317 (avg. 37.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
25.1% 1.8% 1.4% 1.0% 0.8% 0.8% 0.7% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 590462
Top 10 bandwidth usage (bytes/total in %):
25.9% 25.6% 12.9% 4.7% 3.9% 3.3% 3.0% 2.8% 2.6% 2.4%
# of IPv6 addresses: 3791
Top 10 bandwidth usage (bytes/total in %):
74.4% 46.5% 12.2% 4.9% 3.6% 2.7% 2.6% 2.4% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108181400.pktlen.png)
detailed numbers
[ 32- 63]: 8841490
[ 64- 127]: 11215259
[ 128- 255]: 1200297
[ 256- 511]: 725281
[ 512- 1023]: 784898
[ 1024- 2047]: 18535242
Protocol Breakdown
![[protocol breakdown chart]](201108181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41302467 (100.00%) 29857190568 (100.00%) 722.89
ip 41080542 ( 99.46%) 29726797368 ( 99.56%) 723.62
tcp 35254360 ( 85.36%) 27610648074 ( 92.48%) 783.18
http(s) 12163342 ( 29.45%) 15737894266 ( 52.71%) 1293.88
http(c) 6813960 ( 16.50%) 1265674527 ( 4.24%) 185.75
squid 109988 ( 0.27%) 72819399 ( 0.24%) 662.07
smtp 150617 ( 0.36%) 81919198 ( 0.27%) 543.89
nntp 288 ( 0.00%) 19008 ( 0.00%) 66.00
ftp 49403 ( 0.12%) 19079071 ( 0.06%) 386.19
pop3 12024 ( 0.03%) 1230920 ( 0.00%) 102.37
imap 3197 ( 0.01%) 2024913 ( 0.01%) 633.38
telnet 697 ( 0.00%) 80768 ( 0.00%) 115.88
ssh 58643 ( 0.14%) 8105739 ( 0.03%) 138.22
dns 14406 ( 0.03%) 3004630 ( 0.01%) 208.57
bgp 693 ( 0.00%) 219243 ( 0.00%) 316.37
napster 231 ( 0.00%) 16204 ( 0.00%) 70.15
realaud 766 ( 0.00%) 48796 ( 0.00%) 63.70
rtsp 8665 ( 0.02%) 10397527 ( 0.03%) 1199.95
icecast 4597 ( 0.01%) 456534 ( 0.00%) 99.31
hotline 52 ( 0.00%) 3972 ( 0.00%) 76.38
other 15862791 ( 38.41%) 10407653359 ( 34.86%) 656.10
udp 3630992 ( 8.79%) 1323008162 ( 4.43%) 364.37
dns 554657 ( 1.34%) 136777147 ( 0.46%) 246.60
realaud 15 ( 0.00%) 1276 ( 0.00%) 85.07
halflif 51 ( 0.00%) 3748 ( 0.00%) 73.49
starcra 36 ( 0.00%) 5814 ( 0.00%) 161.50
everque 292 ( 0.00%) 68014 ( 0.00%) 232.92
unreal 20 ( 0.00%) 2708 ( 0.00%) 135.40
quake 168 ( 0.00%) 48347 ( 0.00%) 287.78
cuseeme 5 ( 0.00%) 704 ( 0.00%) 140.80
other 3075483 ( 7.45%) 1185965031 ( 3.97%) 385.62
icmp 487922 ( 1.18%) 71945518 ( 0.24%) 147.45
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4822 ( 0.01%) 727060 ( 0.00%) 150.78
ip6 1682181 ( 4.07%) 714752004 ( 2.39%) 424.90
other 20081 ( 0.05%) 5697390 ( 0.02%) 283.72
frag 1768 ( 0.00%) 1780870 ( 0.01%) 1007.28
ip6 221925 ( 0.54%) 130393200 ( 0.44%) 587.56
tcp6 151547 ( 0.37%) 111662280 ( 0.37%) 736.82
http(s) 27459 ( 0.07%) 37956016 ( 0.13%) 1382.28
http(c) 72815 ( 0.18%) 6463536 ( 0.02%) 88.77
smtp 298 ( 0.00%) 137074 ( 0.00%) 459.98
ftp 49 ( 0.00%) 4426 ( 0.00%) 90.33
dns 369 ( 0.00%) 78918 ( 0.00%) 213.87
bgp 94 ( 0.00%) 19781 ( 0.00%) 210.44
other 50463 ( 0.12%) 67002529 ( 0.22%) 1327.76
udp6 50648 ( 0.12%) 13438770 ( 0.05%) 265.34
dns 44403 ( 0.11%) 12816500 ( 0.04%) 288.64
halflif 2 ( 0.00%) 207 ( 0.00%) 103.50
quake 2 ( 0.00%) 214 ( 0.00%) 107.00
other 6241 ( 0.02%) 621849 ( 0.00%) 99.64
icmp6 16556 ( 0.04%) 2980372 ( 0.01%) 180.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3143 ( 0.01%) 2307562 ( 0.01%) 734.19
tcpdump file: 201108181400.dump.gz (983.72 MB)