Traffic Trace Info
DumpFile: 201109091400.dump
FileSize: 1966.20MB
Id: 201109091400
StartTime: Fri Sep 9 14:00:00 2011
EndTime: Fri Sep 9 14:15:00 2011
TotalTime: 900.22 seconds
TotalCapSize: 1547.78MB CapLen: 96 bytes
# of packets: 27420839 (19660.10MB)
AvgRate: 183.21Mbps stddev:35.27M
IP flow (unique src/dst pair) Information
# of flows: 686322 (avg. 39.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 2.2% 2.0% 1.4% 1.1% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 362468
Top 10 bandwidth usage (bytes/total in %):
15.9% 8.3% 5.3% 4.5% 4.5% 3.8% 3.4% 3.3% 3.1% 2.3%
# of IPv6 addresses: 3867
Top 10 bandwidth usage (bytes/total in %):
67.2% 43.4% 23.8% 10.1% 6.6% 6.0% 4.4% 3.7% 2.6% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109091400.pktlen.png)
detailed numbers
[ 32- 63]: 5339774
[ 64- 127]: 6891894
[ 128- 255]: 994713
[ 256- 511]: 591699
[ 512- 1023]: 648025
[ 1024- 2047]: 12954734
Protocol Breakdown
![[protocol breakdown chart]](201109091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27420839 (100.00%) 20615112268 (100.00%) 751.80
ip 27081654 ( 98.76%) 20283189945 ( 98.39%) 748.96
tcp 21894732 ( 79.85%) 17733844057 ( 86.02%) 809.96
http(s) 11120387 ( 40.55%) 15091944626 ( 73.21%) 1357.14
http(c) 5286981 ( 19.28%) 975848267 ( 4.73%) 184.58
squid 66289 ( 0.24%) 42465222 ( 0.21%) 640.61
smtp 132186 ( 0.48%) 76923104 ( 0.37%) 581.93
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 81432 ( 0.30%) 40772795 ( 0.20%) 500.70
pop3 15686 ( 0.06%) 1601784 ( 0.01%) 102.12
imap 5587 ( 0.02%) 3303847 ( 0.02%) 591.35
telnet 606 ( 0.00%) 103259 ( 0.00%) 170.39
ssh 32276 ( 0.12%) 5301664 ( 0.03%) 164.26
dns 21306 ( 0.08%) 3895841 ( 0.02%) 182.85
bgp 617 ( 0.00%) 101319 ( 0.00%) 164.21
napster 102 ( 0.00%) 10095 ( 0.00%) 98.97
realaud 47 ( 0.00%) 4470 ( 0.00%) 95.11
rtsp 41246 ( 0.15%) 44229570 ( 0.21%) 1072.34
icecast 25160 ( 0.09%) 23734276 ( 0.12%) 943.33
hotline 23 ( 0.00%) 1488 ( 0.00%) 64.70
other 5064799 ( 18.47%) 1423602296 ( 6.91%) 281.08
udp 3848464 ( 14.03%) 1781908997 ( 8.64%) 463.02
dns 581964 ( 2.12%) 150224037 ( 0.73%) 258.13
realaud 18 ( 0.00%) 3055 ( 0.00%) 169.72
halflif 54 ( 0.00%) 10316 ( 0.00%) 191.04
starcra 31 ( 0.00%) 3314 ( 0.00%) 106.90
everque 243 ( 0.00%) 54543 ( 0.00%) 224.46
unreal 35 ( 0.00%) 5685 ( 0.00%) 162.43
quake 5 ( 0.00%) 476 ( 0.00%) 95.20
cuseeme 2 ( 0.00%) 167 ( 0.00%) 83.50
other 3265034 ( 11.91%) 1631420820 ( 7.91%) 499.66
icmp 338346 ( 1.23%) 63007779 ( 0.31%) 186.22
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9641 ( 0.04%) 2256166 ( 0.01%) 234.02
ip6 915371 ( 3.34%) 684368091 ( 3.32%) 747.64
other 74915 ( 0.27%) 17785585 ( 0.09%) 237.41
frag 2805 ( 0.01%) 2359935 ( 0.01%) 841.33
ip6 339185 ( 1.24%) 331922323 ( 1.61%) 978.59
tcp6 252456 ( 0.92%) 303330512 ( 1.47%) 1201.52
http(s) 13479 ( 0.05%) 16435164 ( 0.08%) 1219.32
http(c) 26958 ( 0.10%) 2357329 ( 0.01%) 87.44
smtp 1499 ( 0.01%) 565264 ( 0.00%) 377.09
ssh 30 ( 0.00%) 4260 ( 0.00%) 142.00
dns 293 ( 0.00%) 70946 ( 0.00%) 242.14
bgp 97 ( 0.00%) 24124 ( 0.00%) 248.70
other 210100 ( 0.77%) 283873425 ( 1.38%) 1351.13
udp6 55275 ( 0.20%) 15575685 ( 0.08%) 281.79
dns 50299 ( 0.18%) 13576015 ( 0.07%) 269.91
realaud 2 ( 0.00%) 221 ( 0.00%) 110.50
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 2 ( 0.00%) 214 ( 0.00%) 107.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
other 4970 ( 0.02%) 1999015 ( 0.01%) 402.22
icmp6 16904 ( 0.06%) 2806527 ( 0.01%) 166.03
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14437 ( 0.05%) 10194175 ( 0.05%) 706.11
tcpdump file: 201109091400.dump.gz (654.65 MB)