Traffic Trace Info
DumpFile: 201109111400.dump
FileSize: 1866.92MB
Id: 201109111400
StartTime: Sun Sep 11 14:00:00 2011
EndTime: Sun Sep 11 14:15:00 2011
TotalTime: 900.48 seconds
TotalCapSize: 1461.08MB CapLen: 96 bytes
# of packets: 26596353 (20828.53MB)
AvgRate: 194.01Mbps stddev:43.76M
IP flow (unique src/dst pair) Information
# of flows: 522365 (avg. 50.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 3.5% 3.4% 2.7% 2.5% 2.1% 1.6% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 304022
Top 10 bandwidth usage (bytes/total in %):
25.2% 13.7% 7.0% 5.9% 3.6% 3.5% 3.5% 3.2% 3.0% 2.8%
# of IPv6 addresses: 2971
Top 10 bandwidth usage (bytes/total in %):
75.3% 75.3% 13.8% 8.9% 2.9% 1.7% 0.9% 0.8% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109111400.pktlen.png)
detailed numbers
[ 32- 63]: 5751401
[ 64- 127]: 4790962
[ 128- 255]: 755145
[ 256- 511]: 387218
[ 512- 1023]: 1366789
[ 1024- 2047]: 13544838
Protocol Breakdown
![[protocol breakdown chart]](201109111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26596353 (100.00%) 21840294300 (100.00%) 821.18
ip 26444398 ( 99.43%) 21697634734 ( 99.35%) 820.50
tcp 22507386 ( 84.63%) 20085100144 ( 91.96%) 892.38
http(s) 12085078 ( 45.44%) 15146836856 ( 69.35%) 1253.35
http(c) 6077105 ( 22.85%) 2391444726 ( 10.95%) 393.52
squid 57391 ( 0.22%) 37663404 ( 0.17%) 656.26
smtp 61888 ( 0.23%) 29070880 ( 0.13%) 469.73
ftp 15200 ( 0.06%) 1338254 ( 0.01%) 88.04
pop3 1960 ( 0.01%) 552910 ( 0.00%) 282.10
imap 2834 ( 0.01%) 1493734 ( 0.01%) 527.08
telnet 570 ( 0.00%) 72331 ( 0.00%) 126.90
ssh 30689 ( 0.12%) 7428963 ( 0.03%) 242.07
dns 10097 ( 0.04%) 896891 ( 0.00%) 88.83
bgp 712 ( 0.00%) 186247 ( 0.00%) 261.58
napster 154 ( 0.00%) 10795 ( 0.00%) 70.10
realaud 41 ( 0.00%) 3886 ( 0.00%) 94.78
rtsp 2439 ( 0.01%) 2727651 ( 0.01%) 1118.35
icecast 1352 ( 0.01%) 550262 ( 0.00%) 407.00
hotline 27 ( 0.00%) 2201 ( 0.00%) 81.52
other 4159849 ( 15.64%) 2464820153 ( 11.29%) 592.53
udp 2631249 ( 9.89%) 1006231672 ( 4.61%) 382.42
dns 337978 ( 1.27%) 77953029 ( 0.36%) 230.65
halflif 21 ( 0.00%) 1662 ( 0.00%) 79.14
starcra 31 ( 0.00%) 5331 ( 0.00%) 171.97
everque 657 ( 0.00%) 273287 ( 0.00%) 415.96
unreal 75 ( 0.00%) 11542 ( 0.00%) 153.89
quake 169 ( 0.00%) 41159 ( 0.00%) 243.54
cuseeme 1 ( 0.00%) 200 ( 0.00%) 200.00
other 2292208 ( 8.62%) 927874885 ( 4.25%) 404.80
icmp 337946 ( 1.27%) 71119660 ( 0.33%) 210.45
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 187 ( 0.00%) 29826 ( 0.00%) 159.50
ip6 950190 ( 3.57%) 528893617 ( 2.42%) 556.62
other 17255 ( 0.06%) 6240545 ( 0.03%) 361.67
frag 557 ( 0.00%) 570925 ( 0.00%) 1025.00
ip6 151955 ( 0.57%) 142659566 ( 0.65%) 938.83
tcp6 103486 ( 0.39%) 132167516 ( 0.61%) 1277.15
http(s) 6283 ( 0.02%) 6641501 ( 0.03%) 1057.06
http(c) 12528 ( 0.05%) 1097632 ( 0.01%) 87.61
smtp 157 ( 0.00%) 56743 ( 0.00%) 361.42
dns 272 ( 0.00%) 57212 ( 0.00%) 210.34
bgp 93 ( 0.00%) 17597 ( 0.00%) 189.22
other 84153 ( 0.32%) 124296831 ( 0.57%) 1477.03
udp6 31200 ( 0.12%) 7408785 ( 0.03%) 237.46
dns 30200 ( 0.11%) 7296522 ( 0.03%) 241.61
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 120 ( 0.00%) 120.00
other 997 ( 0.00%) 111929 ( 0.00%) 112.27
icmp6 16946 ( 0.06%) 2853986 ( 0.01%) 168.42
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 206 ( 0.00%) 213365 ( 0.00%) 1035.75
tcpdump file: 201109111400.dump.gz (582.48 MB)