Traffic Trace Info
DumpFile: 201109051400.dump
FileSize: 2175.57MB
Id: 201109051400
StartTime: Mon Sep 5 14:00:00 2011
EndTime: Mon Sep 5 14:15:00 2011
TotalTime: 899.87 seconds
TotalCapSize: 1714.59MB CapLen: 96 bytes
# of packets: 30210210 (18383.46MB)
AvgRate: 171.37Mbps stddev:32.81M
IP flow (unique src/dst pair) Information
# of flows: 737234 (avg. 40.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 2.4% 1.6% 1.5% 1.4% 1.2% 1.2% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 361898
Top 10 bandwidth usage (bytes/total in %):
18.9% 7.0% 4.8% 4.4% 3.4% 3.3% 2.8% 2.7% 2.6% 2.2%
# of IPv6 addresses: 3758
Top 10 bandwidth usage (bytes/total in %):
87.0% 87.0% 8.7% 8.7% 1.8% 1.4% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109051400.pktlen.png)
detailed numbers
[ 32- 63]: 7487434
[ 64- 127]: 8217294
[ 128- 255]: 1400859
[ 256- 511]: 629534
[ 512- 1023]: 730000
[ 1024- 2047]: 11745089
Protocol Breakdown
![[protocol breakdown chart]](201109051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30210210 (100.00%) 19276455735 (100.00%) 638.08
ip 29231041 ( 96.76%) 17946235218 ( 93.10%) 613.94
tcp 23049870 ( 76.30%) 15225079982 ( 78.98%) 660.53
http(s) 8885292 ( 29.41%) 11743361408 ( 60.92%) 1321.66
http(c) 5523113 ( 18.28%) 1204369335 ( 6.25%) 218.06
squid 90829 ( 0.30%) 29443012 ( 0.15%) 324.16
smtp 129767 ( 0.43%) 61806981 ( 0.32%) 476.29
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 67317 ( 0.22%) 43289100 ( 0.22%) 643.06
pop3 13221 ( 0.04%) 1323132 ( 0.01%) 100.08
imap 28164 ( 0.09%) 3047713 ( 0.02%) 108.21
telnet 407 ( 0.00%) 61702 ( 0.00%) 151.60
ssh 89266 ( 0.30%) 13659079 ( 0.07%) 153.02
dns 10954 ( 0.04%) 2564480 ( 0.01%) 234.11
bgp 556 ( 0.00%) 88476 ( 0.00%) 159.13
napster 267 ( 0.00%) 39911 ( 0.00%) 149.48
realaud 75 ( 0.00%) 7101 ( 0.00%) 94.68
rtsp 19867 ( 0.07%) 22661024 ( 0.12%) 1140.64
icecast 1564 ( 0.01%) 171250 ( 0.00%) 109.49
hotline 57 ( 0.00%) 3934 ( 0.00%) 69.02
other 8189149 ( 27.11%) 2099182030 ( 10.89%) 256.34
udp 4322501 ( 14.31%) 2028184112 ( 10.52%) 469.22
dns 580773 ( 1.92%) 143687686 ( 0.75%) 247.41
realaud 19 ( 0.00%) 2547 ( 0.00%) 134.05
halflif 20 ( 0.00%) 2142 ( 0.00%) 107.10
starcra 64 ( 0.00%) 4815 ( 0.00%) 75.23
everque 324 ( 0.00%) 73928 ( 0.00%) 228.17
unreal 10 ( 0.00%) 1585 ( 0.00%) 158.50
quake 192 ( 0.00%) 48370 ( 0.00%) 251.93
cuseeme 4 ( 0.00%) 397 ( 0.00%) 99.25
other 3740785 ( 12.38%) 1884184687 ( 9.77%) 503.69
icmp 335650 ( 1.11%) 58938442 ( 0.31%) 175.59
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9186 ( 0.03%) 2104972 ( 0.01%) 229.15
ip6 1496487 ( 4.95%) 626551092 ( 3.25%) 418.68
other 17163 ( 0.06%) 5357458 ( 0.03%) 312.15
frag 1314 ( 0.00%) 1100152 ( 0.01%) 837.25
ip6 979169 ( 3.24%) 1330220517 ( 6.90%) 1358.52
tcp6 912849 ( 3.02%) 1313246059 ( 6.81%) 1438.62
http(s) 13624 ( 0.05%) 16435745 ( 0.09%) 1206.38
http(c) 34286 ( 0.11%) 3069168 ( 0.02%) 89.52
smtp 800 ( 0.00%) 441294 ( 0.00%) 551.62
ftp 258 ( 0.00%) 24204 ( 0.00%) 93.81
dns 382 ( 0.00%) 82522 ( 0.00%) 216.03
bgp 99 ( 0.00%) 28868 ( 0.00%) 291.60
other 863400 ( 2.86%) 1293164258 ( 6.71%) 1497.76
udp6 49514 ( 0.16%) 13615677 ( 0.07%) 274.99
dns 48442 ( 0.16%) 13464198 ( 0.07%) 277.94
realaud 1 ( 0.00%) 115 ( 0.00%) 115.00
other 1071 ( 0.00%) 151364 ( 0.00%) 141.33
icmp6 16226 ( 0.05%) 2897667 ( 0.02%) 178.58
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 464 ( 0.00%) 445318 ( 0.00%) 959.74
tcpdump file: 201109051400.dump.gz (734.58 MB)