Traffic Trace Info
DumpFile: 201108221400.dump
FileSize: 3710.14MB
Id: 201108221400
StartTime: Mon Aug 22 14:00:01 2011
EndTime: Mon Aug 22 14:15:00 2011
TotalTime: 899.65 seconds
TotalCapSize: -1122.36MB CapLen: 96 bytes
# of packets: 48266857 (26195.89MB)
AvgRate: 244.24Mbps stddev:77.38M
IP flow (unique src/dst pair) Information
# of flows: 860417 (avg. 56.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 7.4% 2.9% 2.7% 2.1% 1.7% 1.7% 1.7% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 464173
Top 10 bandwidth usage (bytes/total in %):
19.3% 19.0% 9.2% 5.8% 4.6% 4.5% 3.2% 3.0% 3.0% 2.7%
# of IPv6 addresses: 3735
Top 10 bandwidth usage (bytes/total in %):
86.3% 78.9% 6.6% 5.8% 5.8% 1.9% 1.8% 1.8% 0.9% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108221400.pktlen.png)
detailed numbers
[ 32- 63]: 8289456
[ 64- 127]: 12310181
[ 128- 255]: 2310127
[ 256- 511]: 4789628
[ 512- 1023]: 6908951
[ 1024- 2047]: 13658514
Protocol Breakdown
![[protocol breakdown chart]](201108221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48266857 (100.00%) 27468384035 (100.00%) 569.09
ip 47243398 ( 97.88%) 26495788388 ( 96.46%) 560.84
tcp 35870770 ( 74.32%) 22015975600 ( 80.15%) 613.76
http(s) 20026189 ( 41.49%) 18971475238 ( 69.07%) 947.33
http(c) 6310562 ( 13.07%) 959709244 ( 3.49%) 152.08
squid 80480 ( 0.17%) 50469585 ( 0.18%) 627.11
smtp 119031 ( 0.25%) 57899374 ( 0.21%) 486.42
ftp 115064 ( 0.24%) 11855401 ( 0.04%) 103.03
pop3 13833 ( 0.03%) 2326919 ( 0.01%) 168.22
imap 5375 ( 0.01%) 3515315 ( 0.01%) 654.01
telnet 794 ( 0.00%) 86776 ( 0.00%) 109.29
ssh 877163 ( 1.82%) 142359380 ( 0.52%) 162.30
dns 11628 ( 0.02%) 1037576 ( 0.00%) 89.23
bgp 577 ( 0.00%) 102868 ( 0.00%) 178.28
napster 357 ( 0.00%) 38055 ( 0.00%) 106.60
realaud 61 ( 0.00%) 4252 ( 0.00%) 69.70
rtsp 47921 ( 0.10%) 69556686 ( 0.25%) 1451.49
icecast 4678 ( 0.01%) 1125286 ( 0.00%) 240.55
hotline 42 ( 0.00%) 3428 ( 0.00%) 81.62
other 8257015 ( 17.11%) 1744410217 ( 6.35%) 211.26
udp 4336269 ( 8.98%) 1870173051 ( 6.81%) 431.29
dns 558458 ( 1.16%) 137646677 ( 0.50%) 246.48
realaud 28 ( 0.00%) 5305 ( 0.00%) 189.46
halflif 47 ( 0.00%) 6242 ( 0.00%) 132.81
starcra 65 ( 0.00%) 13436 ( 0.00%) 206.71
everque 235 ( 0.00%) 64929 ( 0.00%) 276.29
unreal 66 ( 0.00%) 13595 ( 0.00%) 205.98
quake 169 ( 0.00%) 46882 ( 0.00%) 277.41
cuseeme 7 ( 0.00%) 922 ( 0.00%) 131.71
other 3774997 ( 7.82%) 1729217181 ( 6.30%) 458.07
icmp 5462662 ( 11.32%) 2090220444 ( 7.61%) 382.64
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4807 ( 0.01%) 728714 ( 0.00%) 151.59
ip6 1550877 ( 3.21%) 513477769 ( 1.87%) 331.09
other 17828 ( 0.04%) 5193540 ( 0.02%) 291.31
frag 5026 ( 0.01%) 6090736 ( 0.02%) 1211.85
ip6 1023459 ( 2.12%) 972595647 ( 3.54%) 950.30
tcp6 944748 ( 1.96%) 948544252 ( 3.45%) 1004.02
http(s) 508968 ( 1.05%) 761103583 ( 2.77%) 1495.39
http(c) 290156 ( 0.60%) 26191926 ( 0.10%) 90.27
smtp 425 ( 0.00%) 200220 ( 0.00%) 471.11
ftp 95 ( 0.00%) 9528 ( 0.00%) 100.29
ssh 79 ( 0.00%) 15602 ( 0.00%) 197.49
dns 322 ( 0.00%) 59612 ( 0.00%) 185.13
bgp 91 ( 0.00%) 14247 ( 0.00%) 156.56
other 144612 ( 0.30%) 160949534 ( 0.59%) 1112.97
udp6 61205 ( 0.13%) 21356579 ( 0.08%) 348.94
dns 54989 ( 0.11%) 17956154 ( 0.07%) 326.54
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 3 ( 0.00%) 308 ( 0.00%) 102.67
other 6211 ( 0.01%) 3399909 ( 0.01%) 547.40
icmp6 17165 ( 0.04%) 2393969 ( 0.01%) 139.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 311 ( 0.00%) 296767 ( 0.00%) 954.23
tcpdump file: 201108221400.dump.gz (1062.80 MB)