Traffic Trace Info
DumpFile: 201109061400.dump
FileSize: 2553.33MB
Id: 201109061400
StartTime: Tue Sep 6 14:00:00 2011
EndTime: Tue Sep 6 14:15:01 2011
TotalTime: 900.31 seconds
TotalCapSize: 2002.31MB CapLen: 96 bytes
# of packets: 36111603 (26371.27MB)
AvgRate: 245.70Mbps stddev:55.85M
IP flow (unique src/dst pair) Information
# of flows: 835648 (avg. 43.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 5.2% 4.6% 2.6% 2.2% 2.0% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 396299
Top 10 bandwidth usage (bytes/total in %):
21.4% 9.2% 7.7% 7.6% 6.9% 5.9% 5.4% 5.3% 4.6% 3.3%
# of IPv6 addresses: 3924
Top 10 bandwidth usage (bytes/total in %):
42.5% 42.4% 30.0% 28.7% 9.2% 4.9% 4.7% 3.7% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109061400.pktlen.png)
detailed numbers
[ 32- 63]: 8587204
[ 64- 127]: 7883703
[ 128- 255]: 979305
[ 256- 511]: 594578
[ 512- 1023]: 689214
[ 1024- 2047]: 17377599
Protocol Breakdown
![[protocol breakdown chart]](201109061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36111603 (100.00%) 27652280156 (100.00%) 765.75
ip 35845562 ( 99.26%) 27410203577 ( 99.12%) 764.67
tcp 31677129 ( 87.72%) 25568358699 ( 92.46%) 807.16
http(s) 15570413 ( 43.12%) 21542993046 ( 77.91%) 1383.59
http(c) 7833908 ( 21.69%) 1307060653 ( 4.73%) 166.85
squid 86991 ( 0.24%) 57280261 ( 0.21%) 658.46
smtp 229434 ( 0.64%) 74495252 ( 0.27%) 324.69
nntp 4 ( 0.00%) 254 ( 0.00%) 63.50
ftp 81862 ( 0.23%) 43925164 ( 0.16%) 536.58
pop3 18858 ( 0.05%) 2797638 ( 0.01%) 148.35
imap 5528 ( 0.02%) 3183169 ( 0.01%) 575.83
telnet 399 ( 0.00%) 61124 ( 0.00%) 153.19
ssh 40493 ( 0.11%) 7683623 ( 0.03%) 189.75
dns 11712 ( 0.03%) 2643897 ( 0.01%) 225.74
bgp 732 ( 0.00%) 125176 ( 0.00%) 171.01
napster 214 ( 0.00%) 23668 ( 0.00%) 110.60
realaud 91 ( 0.00%) 8357 ( 0.00%) 91.84
rtsp 8858 ( 0.02%) 10458855 ( 0.04%) 1180.72
icecast 3747 ( 0.01%) 416265 ( 0.00%) 111.09
hotline 44 ( 0.00%) 3050 ( 0.00%) 69.32
other 7783841 ( 21.55%) 2515199247 ( 9.10%) 323.13
udp 3187503 ( 8.83%) 1365258581 ( 4.94%) 428.32
dns 594433 ( 1.65%) 155657620 ( 0.56%) 261.86
realaud 17 ( 0.00%) 2941 ( 0.00%) 173.00
halflif 30 ( 0.00%) 2724 ( 0.00%) 90.80
starcra 52 ( 0.00%) 4843 ( 0.00%) 93.13
everque 767 ( 0.00%) 289237 ( 0.00%) 377.10
unreal 54 ( 0.00%) 8698 ( 0.00%) 161.07
quake 128 ( 0.00%) 36752 ( 0.00%) 287.12
cuseeme 2 ( 0.00%) 203 ( 0.00%) 101.50
other 2577279 ( 7.14%) 1208263736 ( 4.37%) 468.81
icmp 364215 ( 1.01%) 76142063 ( 0.28%) 209.06
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9183 ( 0.03%) 2105466 ( 0.01%) 229.28
ip6 529398 ( 1.47%) 379201530 ( 1.37%) 716.29
other 77949 ( 0.22%) 19117968 ( 0.07%) 245.26
frag 75162 ( 0.21%) 56770658 ( 0.21%) 755.31
ip6 266041 ( 0.74%) 242076579 ( 0.88%) 909.92
tcp6 183507 ( 0.51%) 221186868 ( 0.80%) 1205.33
http(s) 9680 ( 0.03%) 9819504 ( 0.04%) 1014.41
http(c) 16540 ( 0.05%) 1578457 ( 0.01%) 95.43
squid 61 ( 0.00%) 35302 ( 0.00%) 578.72
smtp 215 ( 0.00%) 41528 ( 0.00%) 193.15
dns 346 ( 0.00%) 75730 ( 0.00%) 218.87
bgp 97 ( 0.00%) 19327 ( 0.00%) 199.25
other 156568 ( 0.43%) 209617020 ( 0.76%) 1338.82
udp6 61759 ( 0.17%) 15928261 ( 0.06%) 257.91
dns 54867 ( 0.15%) 15034027 ( 0.05%) 274.01
realaud 2 ( 0.00%) 239 ( 0.00%) 119.50
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 5 ( 0.00%) 560 ( 0.00%) 112.00
other 6883 ( 0.02%) 893212 ( 0.00%) 129.77
icmp6 18066 ( 0.05%) 3005262 ( 0.01%) 166.35
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2596 ( 0.01%) 1940814 ( 0.01%) 747.62
tcpdump file: 201109061400.dump.gz (830.93 MB)