Traffic Trace Info
DumpFile: 201109041400.dump
FileSize: 2372.31MB
Id: 201109041400
StartTime: Sun Sep 4 14:00:00 2011
EndTime: Sun Sep 4 14:15:00 2011
TotalTime: 899.91 seconds
TotalCapSize: 1856.16MB CapLen: 96 bytes
# of packets: 33825748 (24535.95MB)
AvgRate: 228.71Mbps stddev:47.88M
IP flow (unique src/dst pair) Information
# of flows: 658995 (avg. 51.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.2% 1.8% 1.7% 1.6% 1.6% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 313298
Top 10 bandwidth usage (bytes/total in %):
25.1% 7.2% 4.3% 3.9% 3.5% 3.4% 3.4% 3.4% 2.9% 2.8%
# of IPv6 addresses: 3050
Top 10 bandwidth usage (bytes/total in %):
41.5% 39.5% 28.1% 25.0% 16.5% 9.1% 6.4% 6.3% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109041400.pktlen.png)
detailed numbers
[ 32- 63]: 8604399
[ 64- 127]: 7063980
[ 128- 255]: 881453
[ 256- 511]: 558935
[ 512- 1023]: 589292
[ 1024- 2047]: 16127689
Protocol Breakdown
![[protocol breakdown chart]](201109041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33825748 (100.00%) 25727813273 (100.00%) 760.60
ip 33642737 ( 99.46%) 25561630933 ( 99.35%) 759.80
tcp 28973424 ( 85.65%) 23635077934 ( 91.87%) 815.75
http(s) 14113516 ( 41.72%) 19758078828 ( 76.80%) 1399.94
http(c) 5933631 ( 17.54%) 915888204 ( 3.56%) 154.36
squid 55030 ( 0.16%) 27917613 ( 0.11%) 507.32
smtp 98819 ( 0.29%) 40667731 ( 0.16%) 411.54
nntp 8 ( 0.00%) 536 ( 0.00%) 67.00
ftp 18336 ( 0.05%) 1617554 ( 0.01%) 88.22
pop3 13646 ( 0.04%) 1701977 ( 0.01%) 124.72
imap 2517 ( 0.01%) 1232475 ( 0.00%) 489.66
telnet 939 ( 0.00%) 101113 ( 0.00%) 107.68
ssh 71116 ( 0.21%) 9430396 ( 0.04%) 132.61
dns 9334 ( 0.03%) 2383598 ( 0.01%) 255.37
bgp 612 ( 0.00%) 89088 ( 0.00%) 145.57
napster 203 ( 0.00%) 12881 ( 0.00%) 63.45
realaud 184 ( 0.00%) 11790 ( 0.00%) 64.08
rtsp 6314 ( 0.02%) 7707307 ( 0.03%) 1220.67
icecast 1685 ( 0.00%) 669393 ( 0.00%) 397.27
hotline 115 ( 0.00%) 7457 ( 0.00%) 64.84
other 8647419 ( 25.56%) 2867559993 ( 11.15%) 331.61
udp 3560348 ( 10.53%) 1569081815 ( 6.10%) 440.71
dns 423919 ( 1.25%) 91869911 ( 0.36%) 216.72
realaud 4 ( 0.00%) 353 ( 0.00%) 88.25
halflif 80234 ( 0.24%) 21887643 ( 0.09%) 272.80
starcra 212 ( 0.00%) 18359 ( 0.00%) 86.60
everque 183 ( 0.00%) 45825 ( 0.00%) 250.41
unreal 67 ( 0.00%) 12487 ( 0.00%) 186.37
quake 173 ( 0.00%) 48833 ( 0.00%) 282.27
cuseeme 4 ( 0.00%) 412 ( 0.00%) 103.00
other 3055351 ( 9.03%) 1455088907 ( 5.66%) 476.24
icmp 307165 ( 0.91%) 42940491 ( 0.17%) 139.80
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9192 ( 0.03%) 2106272 ( 0.01%) 229.14
ip6 601130 ( 1.78%) 288103033 ( 1.12%) 479.27
other 191293 ( 0.57%) 24302118 ( 0.09%) 127.04
frag 1069 ( 0.00%) 988730 ( 0.00%) 924.91
ip6 183011 ( 0.54%) 166182340 ( 0.65%) 908.05
tcp6 109728 ( 0.32%) 139578610 ( 0.54%) 1272.04
http(s) 15289 ( 0.05%) 20701726 ( 0.08%) 1354.03
http(c) 11652 ( 0.03%) 1028700 ( 0.00%) 88.29
smtp 122 ( 0.00%) 30734 ( 0.00%) 251.92
dns 295 ( 0.00%) 60692 ( 0.00%) 205.74
bgp 89 ( 0.00%) 16630 ( 0.00%) 186.85
other 82281 ( 0.24%) 117740128 ( 0.46%) 1430.95
udp6 41413 ( 0.12%) 13191910 ( 0.05%) 318.55
dns 32734 ( 0.10%) 8062928 ( 0.03%) 246.32
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 8678 ( 0.03%) 5128875 ( 0.02%) 591.02
icmp6 17019 ( 0.05%) 2896292 ( 0.01%) 170.18
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14737 ( 0.04%) 10500036 ( 0.04%) 712.49
tcpdump file: 201109041400.dump.gz (784.60 MB)