Traffic Trace Info
DumpFile: 201109011400.dump
FileSize: 2313.57MB
Id: 201109011400
StartTime: Thu Sep 1 14:00:01 2011
EndTime: Thu Sep 1 14:15:00 2011
TotalTime: 899.60 seconds
TotalCapSize: 1831.48MB CapLen: 96 bytes
# of packets: 31593835 (23181.51MB)
AvgRate: 216.20Mbps stddev:34.80M
IP flow (unique src/dst pair) Information
# of flows: 1065052 (avg. 29.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 7.9% 2.6% 2.2% 1.9% 1.9% 1.9% 1.5% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 510358
Top 10 bandwidth usage (bytes/total in %):
20.0% 16.2% 9.8% 8.2% 6.1% 5.3% 5.2% 3.0% 2.7% 2.7%
# of IPv6 addresses: 3882
Top 10 bandwidth usage (bytes/total in %):
61.7% 55.3% 13.7% 13.7% 2.6% 2.5% 2.4% 1.5% 1.5% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109011400.pktlen.png)
detailed numbers
[ 32- 63]: 4871210
[ 64- 127]: 9106064
[ 128- 255]: 882129
[ 256- 511]: 591962
[ 512- 1023]: 659382
[ 1024- 2047]: 15483088
Protocol Breakdown
![[protocol breakdown chart]](201109011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31593835 (100.00%) 24307574876 (100.00%) 769.38
ip 30633144 ( 96.96%) 24182921933 ( 99.49%) 789.44
tcp 26567889 ( 84.09%) 22548087152 ( 92.76%) 848.70
http(s) 12711874 ( 40.24%) 16886637462 ( 69.47%) 1328.41
http(c) 6513284 ( 20.62%) 1144380954 ( 4.71%) 175.70
squid 108303 ( 0.34%) 100889609 ( 0.42%) 931.55
smtp 154803 ( 0.49%) 104754645 ( 0.43%) 676.70
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 86667 ( 0.27%) 49358836 ( 0.20%) 569.52
pop3 10707 ( 0.03%) 2149390 ( 0.01%) 200.75
imap 9257 ( 0.03%) 9344696 ( 0.04%) 1009.47
telnet 400 ( 0.00%) 61206 ( 0.00%) 153.01
ssh 71892 ( 0.23%) 11996827 ( 0.05%) 166.87
dns 7649 ( 0.02%) 744522 ( 0.00%) 97.34
bgp 604 ( 0.00%) 137755 ( 0.00%) 228.07
napster 177 ( 0.00%) 13648 ( 0.00%) 77.11
realaud 36 ( 0.00%) 9231 ( 0.00%) 256.42
rtsp 10951 ( 0.03%) 11609035 ( 0.05%) 1060.09
icecast 1369 ( 0.00%) 478396 ( 0.00%) 349.45
hotline 40 ( 0.00%) 2876 ( 0.00%) 71.90
other 6879874 ( 21.78%) 4225517930 ( 17.38%) 614.19
udp 3362487 ( 10.64%) 1341518475 ( 5.52%) 398.97
dns 581780 ( 1.84%) 145896573 ( 0.60%) 250.78
realaud 26 ( 0.00%) 2659 ( 0.00%) 102.27
halflif 28 ( 0.00%) 2532 ( 0.00%) 90.43
starcra 22 ( 0.00%) 3681 ( 0.00%) 167.32
everque 447 ( 0.00%) 112178 ( 0.00%) 250.96
unreal 121 ( 0.00%) 18862 ( 0.00%) 155.88
quake 163 ( 0.00%) 48205 ( 0.00%) 295.74
cuseeme 7 ( 0.00%) 656 ( 0.00%) 93.71
other 2779603 ( 8.80%) 1195259404 ( 4.92%) 430.01
icmp 279608 ( 0.89%) 41035913 ( 0.17%) 146.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10598 ( 0.03%) 2969684 ( 0.01%) 280.21
ip6 395598 ( 1.25%) 244147819 ( 1.00%) 617.16
other 16779 ( 0.05%) 5143620 ( 0.02%) 306.55
frag 1574 ( 0.00%) 1645678 ( 0.01%) 1045.54
ip6 960691 ( 3.04%) 124652943 ( 0.51%) 129.75
tcp6 891180 ( 2.82%) 105979877 ( 0.44%) 118.92
http(s) 8884 ( 0.03%) 8699756 ( 0.04%) 979.26
http(c) 62162 ( 0.20%) 5359007 ( 0.02%) 86.21
smtp 642 ( 0.00%) 204387 ( 0.00%) 318.36
ftp 118 ( 0.00%) 13549 ( 0.00%) 114.82
dns 313 ( 0.00%) 58127 ( 0.00%) 185.71
bgp 96 ( 0.00%) 22603 ( 0.00%) 235.45
other 818965 ( 2.59%) 91622448 ( 0.38%) 111.88
udp6 50301 ( 0.16%) 14936735 ( 0.06%) 296.95
dns 49064 ( 0.16%) 14706076 ( 0.06%) 299.73
everque 2 ( 0.00%) 207 ( 0.00%) 103.50
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1233 ( 0.00%) 230229 ( 0.00%) 186.72
icmp6 18591 ( 0.06%) 3227932 ( 0.01%) 173.63
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 504 ( 0.00%) 492771 ( 0.00%) 977.72
tcpdump file: 201109011400.dump.gz (706.92 MB)