Traffic Trace Info
DumpFile: 201109101400.dump
FileSize: 2387.09MB
Id: 201109101400
StartTime: Sat Sep 10 14:00:01 2011
EndTime: Sat Sep 10 14:15:00 2011
TotalTime: 899.29 seconds
TotalCapSize: 1884.71MB CapLen: 96 bytes
# of packets: 32923694 (24974.76MB)
AvgRate: 233.02Mbps stddev:41.72M
IP flow (unique src/dst pair) Information
# of flows: 595565 (avg. 55.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.7% 6.3% 1.8% 1.8% 1.8% 1.5% 1.4% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 357599
Top 10 bandwidth usage (bytes/total in %):
16.0% 13.4% 12.1% 11.8% 6.6% 3.8% 3.6% 3.1% 2.7% 2.6%
# of IPv6 addresses: 3476
Top 10 bandwidth usage (bytes/total in %):
51.8% 51.8% 17.8% 17.1% 16.5% 6.1% 3.9% 3.1% 2.8% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109101400.pktlen.png)
detailed numbers
[ 32- 63]: 6452052
[ 64- 127]: 7774205
[ 128- 255]: 941826
[ 256- 511]: 487115
[ 512- 1023]: 586975
[ 1024- 2047]: 16681521
Protocol Breakdown
![[protocol breakdown chart]](201109101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32923694 (100.00%) 26187937171 (100.00%) 795.41
ip 32650739 ( 99.17%) 25963643997 ( 99.14%) 795.19
tcp 27681958 ( 84.08%) 23562210792 ( 89.97%) 851.18
http(s) 11377529 ( 34.56%) 15781975577 ( 60.26%) 1387.12
http(c) 6624395 ( 20.12%) 657595195 ( 2.51%) 99.27
squid 75840 ( 0.23%) 61776347 ( 0.24%) 814.56
smtp 64103 ( 0.19%) 35086303 ( 0.13%) 547.34
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 136284 ( 0.41%) 42633302 ( 0.16%) 312.83
pop3 5845 ( 0.02%) 500969 ( 0.00%) 85.71
imap 2467 ( 0.01%) 1929853 ( 0.01%) 782.27
telnet 487 ( 0.00%) 66764 ( 0.00%) 137.09
ssh 26798 ( 0.08%) 4538530 ( 0.02%) 169.36
dns 10936 ( 0.03%) 909939 ( 0.00%) 83.21
bgp 761 ( 0.00%) 146141 ( 0.00%) 192.04
napster 64 ( 0.00%) 6442 ( 0.00%) 100.66
realaud 49 ( 0.00%) 8548 ( 0.00%) 174.45
rtsp 38833 ( 0.12%) 42749318 ( 0.16%) 1100.85
icecast 1112 ( 0.00%) 416750 ( 0.00%) 374.78
hotline 17 ( 0.00%) 1090 ( 0.00%) 64.12
other 9316436 ( 28.30%) 6931869590 ( 26.47%) 744.05
udp 3463925 ( 10.52%) 1636333801 ( 6.25%) 472.39
dns 382549 ( 1.16%) 91634078 ( 0.35%) 239.54
realaud 7 ( 0.00%) 739 ( 0.00%) 105.57
halflif 47 ( 0.00%) 3678 ( 0.00%) 78.26
starcra 21 ( 0.00%) 2635 ( 0.00%) 125.48
everque 1477 ( 0.00%) 312763 ( 0.00%) 211.76
unreal 4 ( 0.00%) 593 ( 0.00%) 148.25
quake 141 ( 0.00%) 39887 ( 0.00%) 282.89
cuseeme 3 ( 0.00%) 243 ( 0.00%) 81.00
other 3079468 ( 9.35%) 1544233153 ( 5.90%) 501.46
icmp 372503 ( 1.13%) 74434984 ( 0.28%) 199.82
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 161 ( 0.00%) 25286 ( 0.00%) 157.06
ip6 1115442 ( 3.39%) 686242687 ( 2.62%) 615.22
other 16566 ( 0.05%) 4377287 ( 0.02%) 264.23
frag 828 ( 0.00%) 776920 ( 0.00%) 938.31
ip6 272955 ( 0.83%) 224293174 ( 0.86%) 821.72
tcp6 193559 ( 0.59%) 203184240 ( 0.78%) 1049.73
http(s) 4754 ( 0.01%) 4549486 ( 0.02%) 956.98
http(c) 11100 ( 0.03%) 1100276 ( 0.00%) 99.12
smtp 571 ( 0.00%) 707851 ( 0.00%) 1239.67
dns 239 ( 0.00%) 58718 ( 0.00%) 245.68
bgp 92 ( 0.00%) 15951 ( 0.00%) 173.38
other 176803 ( 0.54%) 196751958 ( 0.75%) 1112.83
udp6 53434 ( 0.16%) 12704228 ( 0.05%) 237.76
dns 33586 ( 0.10%) 8708052 ( 0.03%) 259.28
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 9 ( 0.00%) 1900 ( 0.00%) 211.11
everque 2 ( 0.00%) 212 ( 0.00%) 106.00
quake 1 ( 0.00%) 100 ( 0.00%) 100.00
other 19835 ( 0.06%) 3993857 ( 0.02%) 201.35
icmp6 18094 ( 0.05%) 2851358 ( 0.01%) 157.59
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7754 ( 0.02%) 5537806 ( 0.02%) 714.19
tcpdump file: 201109101400.dump.gz (728.57 MB)