Traffic Trace Info
DumpFile: 201109121400.dump
FileSize: 2284.79MB
Id: 201109121400
StartTime: Mon Sep 12 14:00:00 2011
EndTime: Mon Sep 12 14:15:00 2011
TotalTime: 900.40 seconds
TotalCapSize: 1787.68MB CapLen: 96 bytes
# of packets: 32577990 (24826.99MB)
AvgRate: 231.28Mbps stddev:43.74M
IP flow (unique src/dst pair) Information
# of flows: 641276 (avg. 50.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 2.1% 1.7% 1.6% 1.6% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 339516
Top 10 bandwidth usage (bytes/total in %):
21.0% 11.6% 9.6% 6.6% 4.4% 3.5% 3.4% 3.4% 3.0% 2.9%
# of IPv6 addresses: 3724
Top 10 bandwidth usage (bytes/total in %):
31.8% 31.8% 22.4% 18.2% 14.6% 14.6% 11.5% 11.5% 3.1% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109121400.pktlen.png)
detailed numbers
[ 32- 63]: 6732331
[ 64- 127]: 6717775
[ 128- 255]: 1295787
[ 256- 511]: 713915
[ 512- 1023]: 676391
[ 1024- 2047]: 16441791
Protocol Breakdown
![[protocol breakdown chart]](201109121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32577990 (100.00%) 26032986614 (100.00%) 799.10
ip 32374680 ( 99.38%) 25883054300 ( 99.42%) 799.48
tcp 26392268 ( 81.01%) 22644524913 ( 86.98%) 858.00
http(s) 13418119 ( 41.19%) 18429148752 ( 70.79%) 1373.45
http(c) 7114350 ( 21.84%) 1083922042 ( 4.16%) 152.36
squid 81235 ( 0.25%) 53559544 ( 0.21%) 659.32
smtp 149619 ( 0.46%) 83430623 ( 0.32%) 557.62
ftp 59045 ( 0.18%) 39085760 ( 0.15%) 661.97
pop3 14032 ( 0.04%) 4094922 ( 0.02%) 291.83
imap 5073 ( 0.02%) 3108133 ( 0.01%) 612.68
telnet 573 ( 0.00%) 72684 ( 0.00%) 126.85
ssh 58876 ( 0.18%) 7006426 ( 0.03%) 119.00
dns 13725 ( 0.04%) 2769679 ( 0.01%) 201.80
bgp 639 ( 0.00%) 129769 ( 0.00%) 203.08
napster 175 ( 0.00%) 15126 ( 0.00%) 86.43
realaud 17 ( 0.00%) 1439 ( 0.00%) 84.65
rtsp 34912 ( 0.11%) 37079527 ( 0.14%) 1062.09
icecast 3265 ( 0.01%) 593847 ( 0.00%) 181.88
hotline 30 ( 0.00%) 5198 ( 0.00%) 173.27
other 5438580 ( 16.69%) 2900501262 ( 11.14%) 533.32
udp 4632743 ( 14.22%) 2396706281 ( 9.21%) 517.34
dns 491513 ( 1.51%) 107531759 ( 0.41%) 218.78
realaud 8 ( 0.00%) 1082 ( 0.00%) 135.25
halflif 512 ( 0.00%) 30905 ( 0.00%) 60.36
starcra 44 ( 0.00%) 6219 ( 0.00%) 141.34
everque 393 ( 0.00%) 82109 ( 0.00%) 208.93
unreal 98 ( 0.00%) 15686 ( 0.00%) 160.06
quake 145 ( 0.00%) 38866 ( 0.00%) 268.04
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 4139555 ( 12.71%) 2288613080 ( 8.79%) 552.86
icmp 280486 ( 0.86%) 52365810 ( 0.20%) 186.70
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 627 ( 0.00%) 83426 ( 0.00%) 133.06
ip6 1051715 ( 3.23%) 783783860 ( 3.01%) 745.24
other 16656 ( 0.05%) 5570740 ( 0.02%) 334.46
frag 2252 ( 0.01%) 2499058 ( 0.01%) 1109.71
ip6 203310 ( 0.62%) 149932314 ( 0.58%) 737.46
tcp6 85345 ( 0.26%) 99133703 ( 0.38%) 1161.56
http(s) 51294 ( 0.16%) 73450582 ( 0.28%) 1431.95
http(c) 15529 ( 0.05%) 1462207 ( 0.01%) 94.16
smtp 331 ( 0.00%) 126402 ( 0.00%) 381.88
dns 294 ( 0.00%) 66262 ( 0.00%) 225.38
bgp 90 ( 0.00%) 16099 ( 0.00%) 178.88
other 17807 ( 0.05%) 24012151 ( 0.09%) 1348.47
udp6 55157 ( 0.17%) 15234026 ( 0.06%) 276.19
dns 53345 ( 0.16%) 15026688 ( 0.06%) 281.69
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1811 ( 0.01%) 207233 ( 0.00%) 114.43
icmp6 16205 ( 0.05%) 2760052 ( 0.01%) 170.32
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 46489 ( 0.14%) 32789041 ( 0.13%) 705.31
tcpdump file: 201109121400.dump.gz (741.25 MB)