Traffic Trace Info
DumpFile: 201108191400.dump
FileSize: 2799.52MB
Id: 201108191400
StartTime: Fri Aug 19 14:00:00 2011
EndTime: Fri Aug 19 14:15:00 2011
TotalTime: 899.94 seconds
TotalCapSize: -1896.80MB CapLen: 96 bytes
# of packets: 39342252 (27414.82MB)
AvgRate: 255.50Mbps stddev:50.38M
IP flow (unique src/dst pair) Information
# of flows: 987404 (avg. 39.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.3% 1.9% 1.7% 1.5% 1.3% 1.2% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 536429
Top 10 bandwidth usage (bytes/total in %):
14.2% 7.0% 6.4% 5.2% 5.0% 4.8% 4.4% 4.2% 3.5% 2.8%
# of IPv6 addresses: 3937
Top 10 bandwidth usage (bytes/total in %):
38.5% 29.0% 13.6% 6.5% 6.5% 3.1% 3.1% 3.0% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108191400.pktlen.png)
detailed numbers
[ 32- 63]: 9358194
[ 64- 127]: 9028764
[ 128- 255]: 1348957
[ 256- 511]: 862870
[ 512- 1023]: 825655
[ 1024- 2047]: 17917812
Protocol Breakdown
![[protocol breakdown chart]](201108191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39342252 (100.00%) 28746517782 (100.00%) 730.68
ip 39178000 ( 99.58%) 28688439150 ( 99.80%) 732.26
tcp 32966482 ( 83.79%) 26201798879 ( 91.15%) 794.80
http(s) 16159804 ( 41.07%) 21466441558 ( 74.67%) 1328.39
http(c) 8085419 ( 20.55%) 1213074728 ( 4.22%) 150.03
squid 82625 ( 0.21%) 56037922 ( 0.19%) 678.22
smtp 146309 ( 0.37%) 106206208 ( 0.37%) 725.90
ftp 51410 ( 0.13%) 7007846 ( 0.02%) 136.31
pop3 9471 ( 0.02%) 905687 ( 0.00%) 95.63
imap 5053 ( 0.01%) 2409245 ( 0.01%) 476.79
telnet 569 ( 0.00%) 71998 ( 0.00%) 126.53
ssh 56820 ( 0.14%) 13385754 ( 0.05%) 235.58
dns 11065 ( 0.03%) 940481 ( 0.00%) 85.00
bgp 569 ( 0.00%) 101868 ( 0.00%) 179.03
napster 166 ( 0.00%) 11597 ( 0.00%) 69.86
realaud 60 ( 0.00%) 4096 ( 0.00%) 68.27
rtsp 8742 ( 0.02%) 10418041 ( 0.04%) 1191.72
icecast 1470 ( 0.00%) 497698 ( 0.00%) 338.57
hotline 138 ( 0.00%) 8996 ( 0.00%) 65.19
other 8346788 ( 21.22%) 3324274916 ( 11.56%) 398.27
udp 3991302 ( 10.15%) 1576352693 ( 5.48%) 394.95
dns 541233 ( 1.38%) 136709530 ( 0.48%) 252.59
realaud 12 ( 0.00%) 1458 ( 0.00%) 121.50
halflif 41 ( 0.00%) 4319 ( 0.00%) 105.34
starcra 26 ( 0.00%) 2791 ( 0.00%) 107.35
everque 317 ( 0.00%) 65308 ( 0.00%) 206.02
unreal 20 ( 0.00%) 2031 ( 0.00%) 101.55
quake 157 ( 0.00%) 42467 ( 0.00%) 270.49
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 3449167 ( 8.77%) 1439363736 ( 5.01%) 417.31
icmp 461271 ( 1.17%) 92156086 ( 0.32%) 199.79
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4075 ( 0.01%) 1230546 ( 0.00%) 301.97
ip6 1735101 ( 4.41%) 812846801 ( 2.83%) 468.47
other 19584 ( 0.05%) 4034875 ( 0.01%) 206.03
frag 2337 ( 0.01%) 2314523 ( 0.01%) 990.38
ip6 164252 ( 0.42%) 58078632 ( 0.20%) 353.59
tcp6 79546 ( 0.20%) 35133787 ( 0.12%) 441.68
http(s) 10545 ( 0.03%) 12667625 ( 0.04%) 1201.29
http(c) 46323 ( 0.12%) 4356544 ( 0.02%) 94.05
smtp 131 ( 0.00%) 37491 ( 0.00%) 286.19
ftp 178 ( 0.00%) 72493 ( 0.00%) 407.26
dns 349 ( 0.00%) 73750 ( 0.00%) 211.32
bgp 90 ( 0.00%) 22346 ( 0.00%) 248.29
other 21930 ( 0.06%) 17903538 ( 0.06%) 816.39
udp6 62077 ( 0.16%) 19002549 ( 0.07%) 306.11
dns 59027 ( 0.15%) 17918958 ( 0.06%) 303.57
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 7 ( 0.00%) 708 ( 0.00%) 101.14
quake 2 ( 0.00%) 200 ( 0.00%) 100.00
other 3040 ( 0.01%) 1082574 ( 0.00%) 356.11
icmp6 22188 ( 0.06%) 3548332 ( 0.01%) 159.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 411 ( 0.00%) 389884 ( 0.00%) 948.62
tcpdump file: 201108191400.dump.gz (963.75 MB)