Traffic Trace Info
DumpFile: 201108301400.dump
FileSize: 2063.74MB
Id: 201108301400
StartTime: Tue Aug 30 14:00:00 2011
EndTime: Tue Aug 30 14:15:00 2011
TotalTime: 899.99 seconds
TotalCapSize: 1618.77MB CapLen: 96 bytes
# of packets: 29160908 (21496.99MB)
AvgRate: 200.37Mbps stddev:37.23M
IP flow (unique src/dst pair) Information
# of flows: 703735 (avg. 41.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 3.9% 2.9% 2.8% 2.1% 1.7% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 363881
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.8% 8.3% 6.9% 4.0% 4.0% 3.9% 3.8% 3.7% 3.3%
# of IPv6 addresses: 3512
Top 10 bandwidth usage (bytes/total in %):
49.0% 27.6% 22.9% 13.7% 12.3% 9.2% 7.4% 4.8% 4.1% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108301400.pktlen.png)
detailed numbers
[ 32- 63]: 6189461
[ 64- 127]: 6365497
[ 128- 255]: 1095102
[ 256- 511]: 654874
[ 512- 1023]: 979360
[ 1024- 2047]: 13876614
Protocol Breakdown
![[protocol breakdown chart]](201108301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29160908 (100.00%) 22541222878 (100.00%) 772.99
ip 28982986 ( 99.39%) 22417813188 ( 99.45%) 773.48
tcp 24272625 ( 83.24%) 20011227040 ( 88.78%) 824.44
http(s) 9800546 ( 33.61%) 13260015532 ( 58.83%) 1352.99
http(c) 5732951 ( 19.66%) 1061152394 ( 4.71%) 185.10
squid 62881 ( 0.22%) 39426360 ( 0.17%) 627.00
smtp 131242 ( 0.45%) 64532530 ( 0.29%) 491.71
ftp 107041 ( 0.37%) 48268888 ( 0.21%) 450.94
pop3 7398 ( 0.03%) 1185692 ( 0.01%) 160.27
imap 4123 ( 0.01%) 2207434 ( 0.01%) 535.40
telnet 773 ( 0.00%) 84660 ( 0.00%) 109.52
ssh 39490 ( 0.14%) 6149067 ( 0.03%) 155.71
dns 6995 ( 0.02%) 691106 ( 0.00%) 98.80
bgp 545 ( 0.00%) 93609 ( 0.00%) 171.76
napster 233 ( 0.00%) 16375 ( 0.00%) 70.28
realaud 197 ( 0.00%) 12431 ( 0.00%) 63.10
rtsp 41309 ( 0.14%) 43734384 ( 0.19%) 1058.71
icecast 2056 ( 0.01%) 264727 ( 0.00%) 128.76
hotline 23 ( 0.00%) 1605 ( 0.00%) 69.78
other 8334822 ( 28.58%) 5483390246 ( 24.33%) 657.89
udp 3579335 ( 12.27%) 1606441235 ( 7.13%) 448.81
dns 564350 ( 1.94%) 143488622 ( 0.64%) 254.25
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 22 ( 0.00%) 2282 ( 0.00%) 103.73
halflif 37 ( 0.00%) 6376 ( 0.00%) 172.32
starcra 44 ( 0.00%) 4390 ( 0.00%) 99.77
everque 292 ( 0.00%) 72500 ( 0.00%) 248.29
unreal 120 ( 0.00%) 21328 ( 0.00%) 177.73
quake 115 ( 0.00%) 32921 ( 0.00%) 286.27
cuseeme 5 ( 0.00%) 508 ( 0.00%) 101.60
other 3014017 ( 10.34%) 1462580578 ( 6.49%) 485.26
icmp 304568 ( 1.04%) 56413662 ( 0.25%) 185.23
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9034 ( 0.03%) 2084524 ( 0.01%) 230.74
ip6 796140 ( 2.73%) 734612764 ( 3.26%) 922.72
other 21099 ( 0.07%) 7014693 ( 0.03%) 332.47
frag 2002 ( 0.01%) 2240712 ( 0.01%) 1119.24
ip6 177922 ( 0.61%) 123409690 ( 0.55%) 693.62
tcp6 117211 ( 0.40%) 107664021 ( 0.48%) 918.55
http(s) 17704 ( 0.06%) 22472921 ( 0.10%) 1269.37
http(c) 27015 ( 0.09%) 2201671 ( 0.01%) 81.50
smtp 563 ( 0.00%) 675617 ( 0.00%) 1200.03
ftp 42 ( 0.00%) 3864 ( 0.00%) 92.00
ssh 7 ( 0.00%) 1213 ( 0.00%) 173.29
dns 342 ( 0.00%) 68296 ( 0.00%) 199.70
bgp 90 ( 0.00%) 15525 ( 0.00%) 172.50
other 71448 ( 0.25%) 82224914 ( 0.36%) 1150.84
udp6 43664 ( 0.15%) 12511608 ( 0.06%) 286.54
dns 40428 ( 0.14%) 12200477 ( 0.05%) 301.78
realaud 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 3 ( 0.00%) 337 ( 0.00%) 112.33
other 3232 ( 0.01%) 310694 ( 0.00%) 96.13
icmp6 15479 ( 0.05%) 2084416 ( 0.01%) 134.66
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1454 ( 0.00%) 1134153 ( 0.01%) 780.02
tcpdump file: 201108301400.dump.gz (670.34 MB)