Traffic Trace Info
DumpFile: 201108311400.dump
FileSize: 1804.19MB
Id: 201108311400
StartTime: Wed Aug 31 14:00:01 2011
EndTime: Wed Aug 31 14:15:00 2011
TotalTime: 899.18 seconds
TotalCapSize: 1415.56MB CapLen: 96 bytes
# of packets: 25468766 (19413.06MB)
AvgRate: 181.14Mbps stddev:37.05M
IP flow (unique src/dst pair) Information
# of flows: 685952 (avg. 37.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.5% 1.7% 1.4% 1.4% 1.4% 1.4% 1.4% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 369325
Top 10 bandwidth usage (bytes/total in %):
16.0% 8.2% 7.2% 6.1% 5.7% 5.5% 4.7% 3.6% 2.5% 2.5%
# of IPv6 addresses: 3583
Top 10 bandwidth usage (bytes/total in %):
49.7% 19.4% 18.7% 18.0% 13.0% 10.2% 4.8% 4.7% 4.7% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108311400.pktlen.png)
detailed numbers
[ 32- 63]: 4491919
[ 64- 127]: 5810632
[ 128- 255]: 1101980
[ 256- 511]: 570827
[ 512- 1023]: 683041
[ 1024- 2047]: 12810367
Protocol Breakdown
![[protocol breakdown chart]](201108311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25468766 (100.00%) 20356068899 (100.00%) 799.26
ip 25261516 ( 99.19%) 20206412966 ( 99.26%) 799.89
tcp 21161194 ( 83.09%) 18382587775 ( 90.31%) 868.69
http(s) 9820588 ( 38.56%) 13252628915 ( 65.10%) 1349.47
http(c) 5461336 ( 21.44%) 1106945050 ( 5.44%) 202.69
squid 217943 ( 0.86%) 244702157 ( 1.20%) 1122.78
smtp 162707 ( 0.64%) 89691486 ( 0.44%) 551.25
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 107602 ( 0.42%) 47705391 ( 0.23%) 443.35
pop3 10843 ( 0.04%) 976864 ( 0.00%) 90.09
imap 5241 ( 0.02%) 1978630 ( 0.01%) 377.53
telnet 511 ( 0.00%) 85473 ( 0.00%) 167.27
ssh 198805 ( 0.78%) 24502197 ( 0.12%) 123.25
dns 10782 ( 0.04%) 978493 ( 0.00%) 90.75
bgp 576 ( 0.00%) 118113 ( 0.00%) 205.06
napster 89 ( 0.00%) 13594 ( 0.00%) 152.74
realaud 19 ( 0.00%) 2870 ( 0.00%) 151.05
rtsp 16202 ( 0.06%) 20136847 ( 0.10%) 1242.86
icecast 4063 ( 0.02%) 980987 ( 0.00%) 241.44
hotline 92 ( 0.00%) 21798 ( 0.00%) 236.93
other 5143793 ( 20.20%) 3591118776 ( 17.64%) 698.15
udp 3433505 ( 13.48%) 1578145636 ( 7.75%) 459.63
dns 590190 ( 2.32%) 148907349 ( 0.73%) 252.30
realaud 12 ( 0.00%) 1064 ( 0.00%) 88.67
halflif 19 ( 0.00%) 1865 ( 0.00%) 98.16
starcra 28 ( 0.00%) 2694 ( 0.00%) 96.21
everque 337 ( 0.00%) 61117 ( 0.00%) 181.36
unreal 18 ( 0.00%) 2645 ( 0.00%) 146.94
quake 171 ( 0.00%) 48995 ( 0.00%) 286.52
cuseeme 5 ( 0.00%) 452 ( 0.00%) 90.40
other 2842560 ( 11.16%) 1429018425 ( 7.02%) 502.72
icmp 275710 ( 1.08%) 37887264 ( 0.19%) 137.42
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9959 ( 0.04%) 2357162 ( 0.01%) 236.69
ip6 362279 ( 1.42%) 201336217 ( 0.99%) 555.75
other 18685 ( 0.07%) 4079752 ( 0.02%) 218.34
frag 731 ( 0.00%) 712310 ( 0.00%) 974.43
ip6 207250 ( 0.81%) 149655933 ( 0.74%) 722.10
tcp6 144986 ( 0.57%) 133200475 ( 0.65%) 918.71
http(s) 21140 ( 0.08%) 27097832 ( 0.13%) 1281.83
http(c) 48458 ( 0.19%) 3892087 ( 0.02%) 80.32
smtp 5345 ( 0.02%) 7367355 ( 0.04%) 1378.36
ftp 21 ( 0.00%) 1913 ( 0.00%) 91.10
dns 353 ( 0.00%) 70374 ( 0.00%) 199.36
bgp 91 ( 0.00%) 18427 ( 0.00%) 202.49
other 69578 ( 0.27%) 94752487 ( 0.47%) 1361.82
udp6 43578 ( 0.17%) 13066908 ( 0.06%) 299.85
dns 41838 ( 0.16%) 12874961 ( 0.06%) 307.73
quake 2 ( 0.00%) 206 ( 0.00%) 103.00
other 1738 ( 0.01%) 191741 ( 0.00%) 110.32
icmp6 17179 ( 0.07%) 2267543 ( 0.01%) 132.00
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1393 ( 0.01%) 1105515 ( 0.01%) 793.62
tcpdump file: 201108311400.dump.gz (587.57 MB)