Traffic Trace Info
DumpFile: 201109071400.dump
FileSize: 2114.07MB
Id: 201109071400
StartTime: Wed Sep 7 14:00:00 2011
EndTime: Wed Sep 7 14:15:01 2011
TotalTime: 900.36 seconds
TotalCapSize: 1661.43MB CapLen: 96 bytes
# of packets: 29664016 (21644.31MB)
AvgRate: 201.66Mbps stddev:32.51M
IP flow (unique src/dst pair) Information
# of flows: 721164 (avg. 41.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 5.6% 2.7% 2.7% 2.2% 2.2% 2.0% 1.9% 1.8% 1.8%
IP address Information
# of IPv4 addresses: 379478
Top 10 bandwidth usage (bytes/total in %):
20.8% 8.5% 6.3% 6.0% 5.7% 5.6% 3.2% 2.8% 2.8% 2.3%
# of IPv6 addresses: 3827
Top 10 bandwidth usage (bytes/total in %):
73.7% 73.7% 10.2% 6.0% 2.0% 1.5% 1.5% 1.3% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109071400.pktlen.png)
detailed numbers
[ 32- 63]: 6062424
[ 64- 127]: 7024231
[ 128- 255]: 1137314
[ 256- 511]: 624838
[ 512- 1023]: 568636
[ 1024- 2047]: 14246573
Protocol Breakdown
![[protocol breakdown chart]](201109071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29664016 (100.00%) 22695699901 (100.00%) 765.09
ip 29393198 ( 99.09%) 22462149421 ( 98.97%) 764.20
tcp 24871400 ( 83.84%) 20373554872 ( 89.77%) 819.16
http(s) 12731898 ( 42.92%) 17317573382 ( 76.30%) 1360.17
http(c) 7175888 ( 24.19%) 1193860980 ( 5.26%) 166.37
squid 115509 ( 0.39%) 76776159 ( 0.34%) 664.68
smtp 155639 ( 0.52%) 70063305 ( 0.31%) 450.17
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 78613 ( 0.27%) 36584327 ( 0.16%) 465.37
pop3 14985 ( 0.05%) 3760251 ( 0.02%) 250.93
imap 6316 ( 0.02%) 3967895 ( 0.02%) 628.23
telnet 716 ( 0.00%) 81392 ( 0.00%) 113.68
ssh 40949 ( 0.14%) 12769328 ( 0.06%) 311.83
dns 10525 ( 0.04%) 1050522 ( 0.00%) 99.81
bgp 651 ( 0.00%) 108119 ( 0.00%) 166.08
napster 229 ( 0.00%) 14747 ( 0.00%) 64.40
realaud 51 ( 0.00%) 6557 ( 0.00%) 128.57
rtsp 179439 ( 0.60%) 157076776 ( 0.69%) 875.38
icecast 6919 ( 0.02%) 543306 ( 0.00%) 78.52
hotline 26 ( 0.00%) 1982 ( 0.00%) 76.23
other 4353043 ( 14.67%) 1499315604 ( 6.61%) 344.43
udp 3534844 ( 11.92%) 1538610935 ( 6.78%) 435.27
dns 600858 ( 2.03%) 148734779 ( 0.66%) 247.54
realaud 31 ( 0.00%) 5018 ( 0.00%) 161.87
halflif 28 ( 0.00%) 2153 ( 0.00%) 76.89
starcra 36 ( 0.00%) 4360 ( 0.00%) 121.11
everque 373 ( 0.00%) 79417 ( 0.00%) 212.91
unreal 75 ( 0.00%) 12037 ( 0.00%) 160.49
quake 217 ( 0.00%) 121611 ( 0.00%) 560.42
cuseeme 3 ( 0.00%) 269 ( 0.00%) 89.67
other 2932976 ( 9.89%) 1389484494 ( 6.12%) 473.75
icmp 299241 ( 1.01%) 40889034 ( 0.18%) 136.64
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 9185 ( 0.03%) 2151974 ( 0.01%) 234.29
ip6 605416 ( 2.04%) 490065225 ( 2.16%) 809.47
other 72926 ( 0.25%) 16858001 ( 0.07%) 231.17
frag 1318 ( 0.00%) 1323208 ( 0.01%) 1003.95
ip6 270818 ( 0.91%) 233550480 ( 1.03%) 862.39
tcp6 193646 ( 0.65%) 211383539 ( 0.93%) 1091.60
http(s) 16965 ( 0.06%) 19343238 ( 0.09%) 1140.18
http(c) 45129 ( 0.15%) 3908188 ( 0.02%) 86.60
smtp 268 ( 0.00%) 70153 ( 0.00%) 261.76
imap 9 ( 0.00%) 1251 ( 0.00%) 139.00
ssh 6602 ( 0.02%) 1325432 ( 0.01%) 200.76
dns 349 ( 0.00%) 75361 ( 0.00%) 215.93
bgp 88 ( 0.00%) 12280 ( 0.00%) 139.55
other 124236 ( 0.42%) 186647636 ( 0.82%) 1502.36
udp6 55001 ( 0.19%) 15643412 ( 0.07%) 284.42
dns 51966 ( 0.18%) 14890969 ( 0.07%) 286.55
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
starcra 2 ( 0.00%) 222 ( 0.00%) 111.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 3031 ( 0.01%) 752000 ( 0.00%) 248.10
icmp6 16883 ( 0.06%) 2768811 ( 0.01%) 164.00
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5175 ( 0.02%) 3739326 ( 0.02%) 722.58
tcpdump file: 201109071400.dump.gz (684.11 MB)