Traffic Trace Info
DumpFile: 201109021400.dump
FileSize: 1760.70MB
Id: 201109021400
StartTime: Fri Sep 2 14:00:00 2011
EndTime: Fri Sep 2 14:15:00 2011
TotalTime: 900.10 seconds
TotalCapSize: 1390.16MB CapLen: 96 bytes
# of packets: 24282839 (18358.60MB)
AvgRate: 171.08Mbps stddev:29.21M
IP flow (unique src/dst pair) Information
# of flows: 1073853 (avg. 22.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 3.1% 2.5% 2.3% 2.1% 2.0% 2.0% 1.8% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 507783
Top 10 bandwidth usage (bytes/total in %):
14.1% 10.6% 9.8% 9.6% 8.5% 6.2% 3.2% 2.8% 2.6% 2.3%
# of IPv6 addresses: 3707
Top 10 bandwidth usage (bytes/total in %):
41.6% 36.8% 19.4% 19.3% 10.0% 6.2% 4.2% 2.0% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109021400.pktlen.png)
detailed numbers
[ 32- 63]: 4777154
[ 64- 127]: 5594076
[ 128- 255]: 750485
[ 256- 511]: 512947
[ 512- 1023]: 684175
[ 1024- 2047]: 11964002
Protocol Breakdown
![[protocol breakdown chart]](201109021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24282839 (100.00%) 19250388964 (100.00%) 792.76
ip 24130211 ( 99.37%) 19165971135 ( 99.56%) 794.27
tcp 21876383 ( 90.09%) 18513986476 ( 96.17%) 846.30
http(s) 11967441 ( 49.28%) 15702556519 ( 81.57%) 1312.11
http(c) 5027680 ( 20.70%) 899177332 ( 4.67%) 178.85
squid 48940 ( 0.20%) 23598544 ( 0.12%) 482.19
smtp 151502 ( 0.62%) 77600877 ( 0.40%) 512.21
ftp 86860 ( 0.36%) 79846224 ( 0.41%) 919.25
pop3 6951 ( 0.03%) 755834 ( 0.00%) 108.74
imap 4459 ( 0.02%) 2470427 ( 0.01%) 554.03
telnet 553 ( 0.00%) 70982 ( 0.00%) 128.36
ssh 70113 ( 0.29%) 11687685 ( 0.06%) 166.70
dns 10488 ( 0.04%) 2558100 ( 0.01%) 243.91
bgp 1996 ( 0.01%) 189351 ( 0.00%) 94.87
napster 113 ( 0.00%) 7238 ( 0.00%) 64.05
realaud 28 ( 0.00%) 2710 ( 0.00%) 96.79
rtsp 39085 ( 0.16%) 41511838 ( 0.22%) 1062.09
icecast 3979 ( 0.02%) 1105736 ( 0.01%) 277.89
hotline 14 ( 0.00%) 874 ( 0.00%) 62.43
other 4456181 ( 18.35%) 1670846205 ( 8.68%) 374.95
udp 1922530 ( 7.92%) 595506437 ( 3.09%) 309.75
dns 575621 ( 2.37%) 155431158 ( 0.81%) 270.02
realaud 71 ( 0.00%) 9906 ( 0.00%) 139.52
halflif 185 ( 0.00%) 36262 ( 0.00%) 196.01
starcra 36 ( 0.00%) 3058 ( 0.00%) 84.94
everque 332 ( 0.00%) 77793 ( 0.00%) 234.32
unreal 88 ( 0.00%) 12850 ( 0.00%) 146.02
quake 157 ( 0.00%) 44254 ( 0.00%) 281.87
cuseeme 12 ( 0.00%) 1331 ( 0.00%) 110.92
other 1345734 ( 5.54%) 439712567 ( 2.28%) 326.75
icmp 276308 ( 1.14%) 26159322 ( 0.14%) 94.67
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9975 ( 0.04%) 2359642 ( 0.01%) 236.56
ip6 27647 ( 0.11%) 22276577 ( 0.12%) 805.75
other 17183 ( 0.07%) 5663411 ( 0.03%) 329.59
frag 1644 ( 0.01%) 1728011 ( 0.01%) 1051.10
ip6 152628 ( 0.63%) 84417829 ( 0.44%) 553.10
tcp6 82606 ( 0.34%) 66710436 ( 0.35%) 807.57
http(s) 16581 ( 0.07%) 16868936 ( 0.09%) 1017.37
http(c) 22891 ( 0.09%) 2017983 ( 0.01%) 88.16
smtp 522 ( 0.00%) 292269 ( 0.00%) 559.90
ftp 44 ( 0.00%) 3873 ( 0.00%) 88.02
imap 10 ( 0.00%) 1486 ( 0.00%) 148.60
ssh 30 ( 0.00%) 3540 ( 0.00%) 118.00
dns 218 ( 0.00%) 59943 ( 0.00%) 274.97
bgp 90 ( 0.00%) 14312 ( 0.00%) 159.02
other 42220 ( 0.17%) 47448094 ( 0.25%) 1123.83
udp6 53543 ( 0.22%) 14378693 ( 0.07%) 268.54
dns 52369 ( 0.22%) 14211356 ( 0.07%) 271.37
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1171 ( 0.00%) 167018 ( 0.00%) 142.63
icmp6 15943 ( 0.07%) 2909883 ( 0.02%) 182.52
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 420 ( 0.00%) 403089 ( 0.00%) 959.74
tcpdump file: 201109021400.dump.gz (564.07 MB)