Traffic Trace Info
DumpFile: 201108251400.dump
FileSize: 2290.31MB
Id: 201108251400
StartTime: Thu Aug 25 14:00:00 2011
EndTime: Thu Aug 25 14:15:00 2011
TotalTime: 900.39 seconds
TotalCapSize: 1805.09MB CapLen: 96 bytes
# of packets: 31799055 (24946.56MB)
AvgRate: 232.44Mbps stddev:79.63M
IP flow (unique src/dst pair) Information
# of flows: 729879 (avg. 43.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 7.6% 6.6% 4.9% 2.3% 2.1% 0.9% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 405358
Top 10 bandwidth usage (bytes/total in %):
15.5% 11.7% 8.5% 8.1% 7.9% 6.6% 6.6% 5.0% 4.4% 4.1%
# of IPv6 addresses: 3563
Top 10 bandwidth usage (bytes/total in %):
44.8% 42.3% 10.2% 7.8% 6.8% 4.7% 4.7% 3.5% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108251400.pktlen.png)
detailed numbers
[ 32- 63]: 5100624
[ 64- 127]: 7559159
[ 128- 255]: 1288400
[ 256- 511]: 674769
[ 512- 1023]: 572617
[ 1024- 2047]: 16603486
Protocol Breakdown
![[protocol breakdown chart]](201108251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31799055 (100.00%) 26158362389 (100.00%) 822.61
ip 31628793 ( 99.46%) 26052556982 ( 99.60%) 823.70
tcp 25880674 ( 81.39%) 23810835207 ( 91.03%) 920.02
http(s) 15021777 ( 47.24%) 20860771342 ( 79.75%) 1388.70
http(c) 7075938 ( 22.25%) 1131965238 ( 4.33%) 159.97
squid 77049 ( 0.24%) 53047513 ( 0.20%) 688.49
smtp 162836 ( 0.51%) 111906893 ( 0.43%) 687.24
ftp 62077 ( 0.20%) 14304717 ( 0.05%) 230.44
pop3 28436 ( 0.09%) 3722134 ( 0.01%) 130.90
imap 4594 ( 0.01%) 2912432 ( 0.01%) 633.96
telnet 400 ( 0.00%) 61212 ( 0.00%) 153.03
ssh 142530 ( 0.45%) 21563281 ( 0.08%) 151.29
dns 15679 ( 0.05%) 2817491 ( 0.01%) 179.70
bgp 574 ( 0.00%) 109100 ( 0.00%) 190.07
napster 151 ( 0.00%) 11111 ( 0.00%) 73.58
realaud 37 ( 0.00%) 4858 ( 0.00%) 131.30
rtsp 6226 ( 0.02%) 7677684 ( 0.03%) 1233.16
icecast 2528 ( 0.01%) 642892 ( 0.00%) 254.31
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 3279835 ( 10.31%) 1599316883 ( 6.11%) 487.62
udp 3640044 ( 11.45%) 1435639827 ( 5.49%) 394.40
dns 585453 ( 1.84%) 148264287 ( 0.57%) 253.25
realaud 17 ( 0.00%) 2126 ( 0.00%) 125.06
halflif 2960 ( 0.01%) 178791 ( 0.00%) 60.40
starcra 21 ( 0.00%) 3323 ( 0.00%) 158.24
everque 526 ( 0.00%) 91865 ( 0.00%) 174.65
unreal 26 ( 0.00%) 4823 ( 0.00%) 185.50
quake 93 ( 0.00%) 27606 ( 0.00%) 296.84
cuseeme 11 ( 0.00%) 917 ( 0.00%) 83.36
other 3050509 ( 9.59%) 1286879962 ( 4.92%) 421.86
icmp 400633 ( 1.26%) 80470814 ( 0.31%) 200.86
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 778 ( 0.00%) 278620 ( 0.00%) 358.12
ip6 1682374 ( 5.29%) 720573451 ( 2.75%) 428.31
other 24106 ( 0.08%) 4739903 ( 0.02%) 196.63
frag 1168 ( 0.00%) 1022800 ( 0.00%) 875.68
ip6 170262 ( 0.54%) 105805407 ( 0.40%) 621.43
tcp6 90263 ( 0.28%) 82313341 ( 0.31%) 911.93
http(s) 17081 ( 0.05%) 13624250 ( 0.05%) 797.63
http(c) 16991 ( 0.05%) 3814226 ( 0.01%) 224.49
smtp 558 ( 0.00%) 230909 ( 0.00%) 413.82
ftp 84 ( 0.00%) 7566 ( 0.00%) 90.07
dns 294 ( 0.00%) 62835 ( 0.00%) 213.72
bgp 88 ( 0.00%) 15595 ( 0.00%) 177.22
other 55167 ( 0.17%) 64557960 ( 0.25%) 1170.23
udp6 59682 ( 0.19%) 19739363 ( 0.08%) 330.74
dns 56439 ( 0.18%) 17903495 ( 0.07%) 317.22
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 3239 ( 0.01%) 1835437 ( 0.01%) 566.67
icmp6 19755 ( 0.06%) 3310269 ( 0.01%) 167.57
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 448 ( 0.00%) 426942 ( 0.00%) 953.00
tcpdump file: 201108251400.dump.gz (725.92 MB)