Traffic Trace Info
DumpFile: 201109131400.dump
FileSize: 2829.10MB
Id: 201109131400
StartTime: Tue Sep 13 14:00:00 2011
EndTime: Tue Sep 13 14:15:00 2011
TotalTime: 899.99 seconds
TotalCapSize: -1872.82MB CapLen: 96 bytes
# of packets: 39708876 (22799.30MB)
AvgRate: 230.31Mbps stddev:40.89M
IP flow (unique src/dst pair) Information
# of flows: 932405 (avg. 42.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 3.4% 1.9% 1.6% 1.4% 1.4% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 473511
Top 10 bandwidth usage (bytes/total in %):
16.3% 14.2% 7.2% 6.4% 4.8% 3.9% 3.5% 3.1% 3.0% 2.9%
# of IPv6 addresses: 3778
Top 10 bandwidth usage (bytes/total in %):
50.5% 26.0% 25.9% 17.4% 16.8% 16.8% 4.3% 2.1% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109131400.pktlen.png)
detailed numbers
[ 32- 63]: 11352982
[ 64- 127]: 10205489
[ 128- 255]: 1586024
[ 256- 511]: 646037
[ 512- 1023]: 1865155
[ 1024- 2047]: 14053189
Protocol Breakdown
![[protocol breakdown chart]](201109131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39708876 (100.00%) 23906803481 (100.00%) 602.05
ip 39530329 ( 99.55%) 23771979048 ( 99.44%) 601.36
tcp 32717277 ( 82.39%) 20802550983 ( 87.02%) 635.83
http(s) 11823518 ( 29.78%) 14104528998 ( 59.00%) 1192.92
http(c) 9047560 ( 22.78%) 3635238164 ( 15.21%) 401.79
squid 77870 ( 0.20%) 51573784 ( 0.22%) 662.31
smtp 191047 ( 0.48%) 96706774 ( 0.40%) 506.19
ftp 124263 ( 0.31%) 44792419 ( 0.19%) 360.46
pop3 17433 ( 0.04%) 6906289 ( 0.03%) 396.16
imap 7998 ( 0.02%) 3059266 ( 0.01%) 382.50
telnet 418 ( 0.00%) 57964 ( 0.00%) 138.67
ssh 146083 ( 0.37%) 23433911 ( 0.10%) 160.42
dns 10943 ( 0.03%) 2505076 ( 0.01%) 228.92
bgp 608 ( 0.00%) 130254 ( 0.00%) 214.23
napster 5247 ( 0.01%) 332134 ( 0.00%) 63.30
realaud 156 ( 0.00%) 13853 ( 0.00%) 88.80
rtsp 5782 ( 0.01%) 7119305 ( 0.03%) 1231.29
icecast 43923 ( 0.11%) 29088850 ( 0.12%) 662.27
hotline 53 ( 0.00%) 3296 ( 0.00%) 62.19
other 11214373 ( 28.24%) 2797060526 ( 11.70%) 249.42
udp 4635412 ( 11.67%) 2166455988 ( 9.06%) 467.37
dns 611982 ( 1.54%) 143472235 ( 0.60%) 234.44
realaud 15 ( 0.00%) 1699 ( 0.00%) 113.27
halflif 116 ( 0.00%) 8251 ( 0.00%) 71.13
starcra 32 ( 0.00%) 4173 ( 0.00%) 130.41
everque 1677 ( 0.00%) 1065578 ( 0.00%) 635.41
unreal 54 ( 0.00%) 7227 ( 0.00%) 133.83
quake 1282 ( 0.00%) 104526 ( 0.00%) 81.53
cuseeme 4 ( 0.00%) 369 ( 0.00%) 92.25
other 4019990 ( 10.12%) 2021672992 ( 8.46%) 502.90
icmp 314346 ( 0.79%) 53183408 ( 0.22%) 169.19
ipip 171 ( 0.00%) 17802 ( 0.00%) 104.11
ipsec 228 ( 0.00%) 42920 ( 0.00%) 188.25
ip6 1845331 ( 4.65%) 743599105 ( 3.11%) 402.96
other 17564 ( 0.04%) 6128842 ( 0.03%) 348.94
frag 1031 ( 0.00%) 1001050 ( 0.00%) 970.95
ip6 178547 ( 0.45%) 134824433 ( 0.56%) 755.12
tcp6 109915 ( 0.28%) 116937782 ( 0.49%) 1063.89
http(s) 53570 ( 0.13%) 77464496 ( 0.32%) 1446.04
http(c) 29736 ( 0.07%) 2581699 ( 0.01%) 86.82
smtp 306 ( 0.00%) 118895 ( 0.00%) 388.55
ftp 57 ( 0.00%) 5676 ( 0.00%) 99.58
dns 258 ( 0.00%) 61371 ( 0.00%) 237.87
bgp 73 ( 0.00%) 10648 ( 0.00%) 145.86
other 25915 ( 0.07%) 36694997 ( 0.15%) 1415.98
udp6 50733 ( 0.13%) 13705804 ( 0.06%) 270.16
dns 46529 ( 0.12%) 13228228 ( 0.06%) 284.30
quake 2 ( 0.00%) 223 ( 0.00%) 111.50
other 4202 ( 0.01%) 477353 ( 0.00%) 113.60
icmp6 15749 ( 0.04%) 2642522 ( 0.01%) 167.79
ip6 79 ( 0.00%) 10772 ( 0.00%) 136.35
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 2044 ( 0.01%) 1523881 ( 0.01%) 745.54
tcpdump file: 201109131400.dump.gz (988.62 MB)