Traffic Trace Info
DumpFile: 201108231400.dump
FileSize: 2853.39MB
Id: 201108231400
StartTime: Tue Aug 23 14:00:00 2011
EndTime: Tue Aug 23 14:15:01 2011
TotalTime: 900.35 seconds
TotalCapSize: -1850.46MB CapLen: 96 bytes
# of packets: 39835412 (27849.77MB)
AvgRate: 259.47Mbps stddev:46.89M
IP flow (unique src/dst pair) Information
# of flows: 871769 (avg. 45.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.9% 1.8% 1.6% 1.5% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 480520
Top 10 bandwidth usage (bytes/total in %):
11.8% 9.7% 7.5% 7.0% 6.4% 6.0% 4.0% 3.6% 3.1% 3.1%
# of IPv6 addresses: 3641
Top 10 bandwidth usage (bytes/total in %):
48.5% 45.2% 25.4% 4.9% 4.5% 4.3% 3.6% 2.1% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108231400.pktlen.png)
detailed numbers
[ 32- 63]: 9376676
[ 64- 127]: 9180754
[ 128- 255]: 1474857
[ 256- 511]: 754010
[ 512- 1023]: 639003
[ 1024- 2047]: 18410112
Protocol Breakdown
![[protocol breakdown chart]](201108231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39835412 (100.00%) 29202599153 (100.00%) 733.08
ip 39615154 ( 99.45%) 29052676395 ( 99.49%) 733.37
tcp 33883013 ( 85.06%) 26919128155 ( 92.18%) 794.47
http(s) 15623413 ( 39.22%) 21098985808 ( 72.25%) 1350.47
http(c) 8628852 ( 21.66%) 1442007858 ( 4.94%) 167.11
squid 122537 ( 0.31%) 99564348 ( 0.34%) 812.52
smtp 130757 ( 0.33%) 62619283 ( 0.21%) 478.90
ftp 248723 ( 0.62%) 24125836 ( 0.08%) 97.00
pop3 31869 ( 0.08%) 6053781 ( 0.02%) 189.96
imap 7802 ( 0.02%) 4921892 ( 0.02%) 630.85
telnet 501 ( 0.00%) 80727 ( 0.00%) 161.13
ssh 127113 ( 0.32%) 24304361 ( 0.08%) 191.20
dns 15267 ( 0.04%) 1282224 ( 0.00%) 83.99
bgp 571 ( 0.00%) 94659 ( 0.00%) 165.78
napster 5237 ( 0.01%) 2266441 ( 0.01%) 432.77
realaud 91 ( 0.00%) 15419 ( 0.00%) 169.44
rtsp 96851 ( 0.24%) 143059183 ( 0.49%) 1477.11
icecast 40938 ( 0.10%) 24206597 ( 0.08%) 591.30
hotline 43 ( 0.00%) 3391 ( 0.00%) 78.86
other 8802448 ( 22.10%) 3985536347 ( 13.65%) 452.78
udp 3669296 ( 9.21%) 1370819343 ( 4.69%) 373.59
dns 595889 ( 1.50%) 150494687 ( 0.52%) 252.55
realaud 38 ( 0.00%) 3525 ( 0.00%) 92.76
halflif 1250 ( 0.00%) 76086 ( 0.00%) 60.87
starcra 34 ( 0.00%) 4734 ( 0.00%) 139.24
everque 230 ( 0.00%) 50563 ( 0.00%) 219.84
unreal 78 ( 0.00%) 14136 ( 0.00%) 181.23
quake 575 ( 0.00%) 68309 ( 0.00%) 118.80
cuseeme 8 ( 0.00%) 884 ( 0.00%) 110.50
other 3070975 ( 7.71%) 1219961343 ( 4.18%) 397.26
icmp 391171 ( 0.98%) 77771117 ( 0.27%) 198.82
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4846 ( 0.01%) 717092 ( 0.00%) 147.98
ip6 1644343 ( 4.13%) 679296388 ( 2.33%) 413.11
other 22300 ( 0.06%) 4925030 ( 0.02%) 220.85
frag 1457 ( 0.00%) 1596485 ( 0.01%) 1095.73
ip6 220258 ( 0.55%) 149922758 ( 0.51%) 680.67
tcp6 111800 ( 0.28%) 103528565 ( 0.35%) 926.02
http(s) 10701 ( 0.03%) 12119302 ( 0.04%) 1132.54
http(c) 33355 ( 0.08%) 3133563 ( 0.01%) 93.95
smtp 169 ( 0.00%) 64683 ( 0.00%) 382.74
ftp 43 ( 0.00%) 3918 ( 0.00%) 91.12
imap 1 ( 0.00%) 127 ( 0.00%) 127.00
dns 251 ( 0.00%) 54600 ( 0.00%) 217.53
bgp 84 ( 0.00%) 11505 ( 0.00%) 136.96
realaud 6 ( 0.00%) 1182 ( 0.00%) 197.00
other 67190 ( 0.17%) 88139685 ( 0.30%) 1311.80
udp6 75237 ( 0.19%) 32758166 ( 0.11%) 435.40
dns 55613 ( 0.14%) 17692837 ( 0.06%) 318.14
realaud 1 ( 0.00%) 115 ( 0.00%) 115.00
halflif 2 ( 0.00%) 207 ( 0.00%) 103.50
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 44 ( 0.00%) 18000 ( 0.00%) 409.09
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 19574 ( 0.05%) 15046685 ( 0.05%) 768.71
icmp6 17447 ( 0.04%) 2445919 ( 0.01%) 140.19
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 15743 ( 0.04%) 11185892 ( 0.04%) 710.53
tcpdump file: 201108231400.dump.gz (942.40 MB)