Traffic Trace Info
DumpFile: 201109031400.dump
FileSize: 1616.49MB
Id: 201109031400
StartTime: Sat Sep 3 14:00:00 2011
EndTime: Sat Sep 3 14:15:00 2011
TotalTime: 899.84 seconds
TotalCapSize: 1268.30MB CapLen: 96 bytes
# of packets: 22818533 (18542.91MB)
AvgRate: 172.89Mbps stddev:39.76M
IP flow (unique src/dst pair) Information
# of flows: 701693 (avg. 32.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 2.4% 2.1% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 367367
Top 10 bandwidth usage (bytes/total in %):
26.4% 10.2% 6.4% 5.7% 5.3% 2.7% 2.5% 2.5% 2.1% 1.9%
# of IPv6 addresses: 3338
Top 10 bandwidth usage (bytes/total in %):
54.2% 51.0% 19.3% 19.3% 8.5% 8.5% 2.6% 2.0% 2.0% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109031400.pktlen.png)
detailed numbers
[ 32- 63]: 4357125
[ 64- 127]: 4607091
[ 128- 255]: 681658
[ 256- 511]: 435008
[ 512- 1023]: 562342
[ 1024- 2047]: 12175309
Protocol Breakdown
![[protocol breakdown chart]](201109031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22818533 (100.00%) 19443650676 (100.00%) 852.10
ip 22629548 ( 99.17%) 19322342589 ( 99.38%) 853.85
tcp 20527393 ( 89.96%) 18835921988 ( 96.87%) 917.60
http(s) 11558021 ( 50.65%) 16031030820 ( 82.45%) 1387.00
http(c) 5378831 ( 23.57%) 1002625814 ( 5.16%) 186.40
squid 82685 ( 0.36%) 44763811 ( 0.23%) 541.38
smtp 81330 ( 0.36%) 22640280 ( 0.12%) 278.38
nntp 5 ( 0.00%) 368 ( 0.00%) 73.60
ftp 66802 ( 0.29%) 42145093 ( 0.22%) 630.90
pop3 4238 ( 0.02%) 379907 ( 0.00%) 89.64
imap 10199 ( 0.04%) 9684824 ( 0.05%) 949.59
telnet 496 ( 0.00%) 67310 ( 0.00%) 135.71
ssh 121708 ( 0.53%) 17587033 ( 0.09%) 144.50
dns 9030 ( 0.04%) 2388991 ( 0.01%) 264.56
bgp 675 ( 0.00%) 94320 ( 0.00%) 139.73
napster 117 ( 0.00%) 8249 ( 0.00%) 70.50
realaud 18 ( 0.00%) 1110 ( 0.00%) 61.67
rtsp 12726 ( 0.06%) 16148802 ( 0.08%) 1268.96
icecast 1333 ( 0.01%) 617244 ( 0.00%) 463.05
other 3199179 ( 14.02%) 1645738012 ( 8.46%) 514.43
udp 1732792 ( 7.59%) 393855972 ( 2.03%) 227.30
dns 426780 ( 1.87%) 102118356 ( 0.53%) 239.28
realaud 39 ( 0.00%) 5423 ( 0.00%) 139.05
halflif 37530 ( 0.16%) 9129290 ( 0.05%) 243.25
starcra 10 ( 0.00%) 1420 ( 0.00%) 142.00
everque 371 ( 0.00%) 87915 ( 0.00%) 236.97
unreal 21 ( 0.00%) 2558 ( 0.00%) 121.81
quake 93 ( 0.00%) 28152 ( 0.00%) 302.71
cuseeme 8 ( 0.00%) 761 ( 0.00%) 95.12
other 1267741 ( 5.56%) 282331042 ( 1.45%) 222.70
icmp 320045 ( 1.40%) 69892676 ( 0.36%) 218.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9185 ( 0.04%) 2105238 ( 0.01%) 229.20
ip6 19192 ( 0.08%) 14210880 ( 0.07%) 740.46
other 20756 ( 0.09%) 6336565 ( 0.03%) 305.29
frag 1176 ( 0.01%) 1254791 ( 0.01%) 1067.00
ip6 188985 ( 0.83%) 121308087 ( 0.62%) 641.89
tcp6 115204 ( 0.50%) 97858137 ( 0.50%) 849.43
http(s) 4708 ( 0.02%) 4857296 ( 0.02%) 1031.71
http(c) 37018 ( 0.16%) 3201796 ( 0.02%) 86.49
squid 16 ( 0.00%) 1504 ( 0.00%) 94.00
smtp 118 ( 0.00%) 31260 ( 0.00%) 264.92
dns 240 ( 0.00%) 54050 ( 0.00%) 225.21
bgp 88 ( 0.00%) 14817 ( 0.00%) 168.38
icecast 6 ( 0.00%) 564 ( 0.00%) 94.00
other 73010 ( 0.32%) 89696850 ( 0.46%) 1228.56
udp6 43521 ( 0.19%) 10338041 ( 0.05%) 237.54
dns 39218 ( 0.17%) 9831803 ( 0.05%) 250.70
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 4301 ( 0.02%) 506026 ( 0.00%) 117.65
icmp6 15580 ( 0.07%) 2777255 ( 0.01%) 178.26
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14565 ( 0.06%) 10318994 ( 0.05%) 708.48
tcpdump file: 201109031400.dump.gz (511.50 MB)