Traffic Trace Info
DumpFile: 201108201400.dump
FileSize: 2746.85MB
Id: 201108201400
StartTime: Sat Aug 20 14:00:00 2011
EndTime: Sat Aug 20 14:15:01 2011
TotalTime: 900.61 seconds
TotalCapSize: -1944.57MB CapLen: 96 bytes
# of packets: 39020893 (30209.23MB)
AvgRate: 281.33Mbps stddev:48.00M
IP flow (unique src/dst pair) Information
# of flows: 724886 (avg. 53.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 6.8% 6.0% 1.8% 1.7% 1.7% 1.6% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 425044
Top 10 bandwidth usage (bytes/total in %):
18.8% 14.1% 11.4% 9.5% 7.1% 7.1% 6.1% 5.3% 3.3% 2.8%
# of IPv6 addresses: 3381
Top 10 bandwidth usage (bytes/total in %):
84.4% 68.8% 11.3% 5.2% 5.2% 3.9% 2.0% 1.5% 1.5% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108201400.pktlen.png)
detailed numbers
[ 32- 63]: 8762264
[ 64- 127]: 7697243
[ 128- 255]: 1064080
[ 256- 511]: 665439
[ 512- 1023]: 700345
[ 1024- 2047]: 20131522
Protocol Breakdown
![[protocol breakdown chart]](201108201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39020893 (100.00%) 31676672719 (100.00%) 811.79
ip 38561470 ( 98.82%) 31276499117 ( 98.74%) 811.08
tcp 32602799 ( 83.55%) 29094677266 ( 91.85%) 892.40
http(s) 18398785 ( 47.15%) 25882102717 ( 81.71%) 1406.73
http(c) 7709009 ( 19.76%) 904000797 ( 2.85%) 117.27
squid 86750 ( 0.22%) 55446338 ( 0.18%) 639.15
smtp 94452 ( 0.24%) 34376832 ( 0.11%) 363.96
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 83697 ( 0.21%) 9471407 ( 0.03%) 113.16
pop3 2275 ( 0.01%) 296923 ( 0.00%) 130.52
imap 2881 ( 0.01%) 1578972 ( 0.00%) 548.06
telnet 716 ( 0.00%) 82214 ( 0.00%) 114.82
ssh 80071 ( 0.21%) 18783940 ( 0.06%) 234.59
dns 11873 ( 0.03%) 1075293 ( 0.00%) 90.57
bgp 552 ( 0.00%) 93954 ( 0.00%) 170.21
napster 4481 ( 0.01%) 282824 ( 0.00%) 63.12
realaud 45 ( 0.00%) 6740 ( 0.00%) 149.78
rtsp 6312 ( 0.02%) 7703188 ( 0.02%) 1220.40
icecast 16407 ( 0.04%) 15798836 ( 0.05%) 962.93
hotline 14 ( 0.00%) 862 ( 0.00%) 61.57
other 6104477 ( 15.64%) 2163575295 ( 6.83%) 354.42
udp 3832610 ( 9.82%) 1502128908 ( 4.74%) 391.93
dns 410329 ( 1.05%) 101079190 ( 0.32%) 246.34
realaud 2 ( 0.00%) 192 ( 0.00%) 96.00
halflif 1423 ( 0.00%) 277892 ( 0.00%) 195.29
starcra 96 ( 0.00%) 17942 ( 0.00%) 186.90
everque 151 ( 0.00%) 27056 ( 0.00%) 179.18
unreal 79 ( 0.00%) 16609 ( 0.00%) 210.24
quake 150 ( 0.00%) 45537 ( 0.00%) 303.58
cuseeme 2 ( 0.00%) 147 ( 0.00%) 73.50
other 3420173 ( 8.76%) 1400545617 ( 4.42%) 409.50
icmp 500675 ( 1.28%) 93170635 ( 0.29%) 186.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4121 ( 0.01%) 538166 ( 0.00%) 130.59
ip6 1603376 ( 4.11%) 581694458 ( 1.84%) 362.79
other 17704 ( 0.05%) 4270414 ( 0.01%) 241.21
frag 2000 ( 0.01%) 2417936 ( 0.01%) 1208.97
ip6 459423 ( 1.18%) 400173602 ( 1.26%) 871.04
tcp6 395864 ( 1.01%) 384115547 ( 1.21%) 970.32
http(s) 16269 ( 0.04%) 19539067 ( 0.06%) 1201.00
http(c) 14907 ( 0.04%) 1385690 ( 0.00%) 92.96
smtp 274 ( 0.00%) 134782 ( 0.00%) 491.91
ftp 52 ( 0.00%) 4628 ( 0.00%) 89.00
dns 233 ( 0.00%) 49729 ( 0.00%) 213.43
bgp 90 ( 0.00%) 14134 ( 0.00%) 157.04
other 364039 ( 0.93%) 362987517 ( 1.15%) 997.11
udp6 42395 ( 0.11%) 12497709 ( 0.04%) 294.79
dns 39855 ( 0.10%) 12167418 ( 0.04%) 305.29
everque 3 ( 0.00%) 330 ( 0.00%) 110.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
cuseeme 2 ( 0.00%) 219 ( 0.00%) 109.50
other 2534 ( 0.01%) 329641 ( 0.00%) 130.09
icmp6 20674 ( 0.05%) 3175453 ( 0.01%) 153.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 460 ( 0.00%) 380813 ( 0.00%) 827.85
tcpdump file: 201108201400.dump.gz (889.54 MB)