Traffic Trace Info
DumpFile: 201109141400.dump
FileSize: 3680.21MB
Id: 201109141400
StartTime: Wed Sep 14 14:00:00 2011
EndTime: Wed Sep 14 14:15:01 2011
TotalTime: 900.33 seconds
TotalCapSize: -1194.56MB CapLen: 96 bytes
# of packets: 51037184 (34098.47MB)
AvgRate: 317.70Mbps stddev:50.40M
IP flow (unique src/dst pair) Information
# of flows: 1849752 (avg. 27.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 4.4% 2.8% 2.8% 2.4% 2.1% 1.6% 1.5% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1353497
Top 10 bandwidth usage (bytes/total in %):
14.2% 9.7% 7.6% 7.6% 5.3% 5.2% 5.0% 4.6% 4.3% 3.5%
# of IPv6 addresses: 3827
Top 10 bandwidth usage (bytes/total in %):
28.2% 21.3% 18.2% 11.2% 7.6% 6.2% 5.5% 5.4% 5.2% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109141400.pktlen.png)
detailed numbers
[ 32- 63]: 12193422
[ 64- 127]: 13050469
[ 128- 255]: 1879881
[ 256- 511]: 772453
[ 512- 1023]: 980397
[ 1024- 2047]: 22160562
Protocol Breakdown
![[protocol breakdown chart]](201109141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51037184 (100.00%) 35754840415 (100.00%) 700.56
ip 50896596 ( 99.72%) 35684821333 ( 99.80%) 701.12
tcp 41621912 ( 81.55%) 31306065329 ( 87.56%) 752.15
http(s) 17554041 ( 34.39%) 24451483458 ( 68.39%) 1392.93
http(c) 8589019 ( 16.83%) 1229031580 ( 3.44%) 143.09
squid 90473 ( 0.18%) 62879880 ( 0.18%) 695.01
smtp 251462 ( 0.49%) 193952736 ( 0.54%) 771.30
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 140804 ( 0.28%) 45881307 ( 0.13%) 325.85
pop3 13137 ( 0.03%) 2977902 ( 0.01%) 226.68
imap 5010 ( 0.01%) 2713175 ( 0.01%) 541.55
telnet 471 ( 0.00%) 66125 ( 0.00%) 140.39
ssh 1589715 ( 3.11%) 244404461 ( 0.68%) 153.74
dns 13680 ( 0.03%) 1235298 ( 0.00%) 90.30
bgp 614 ( 0.00%) 100258 ( 0.00%) 163.29
napster 1267 ( 0.00%) 82710 ( 0.00%) 65.28
realaud 144 ( 0.00%) 11038 ( 0.00%) 76.65
rtsp 8530 ( 0.02%) 10238792 ( 0.03%) 1200.33
icecast 14031 ( 0.03%) 1063098 ( 0.00%) 75.77
hotline 103 ( 0.00%) 8004 ( 0.00%) 77.71
other 13349402 ( 26.16%) 5059934953 ( 14.15%) 379.04
udp 5836614 ( 11.44%) 3372480602 ( 9.43%) 577.81
dns 743761 ( 1.46%) 208821560 ( 0.58%) 280.76
realaud 17 ( 0.00%) 1915 ( 0.00%) 112.65
halflif 59 ( 0.00%) 4397 ( 0.00%) 74.53
starcra 217 ( 0.00%) 18940 ( 0.00%) 87.28
everque 467 ( 0.00%) 103879 ( 0.00%) 222.44
unreal 108 ( 0.00%) 16948 ( 0.00%) 156.93
quake 1532 ( 0.00%) 125349 ( 0.00%) 81.82
cuseeme 14 ( 0.00%) 1489 ( 0.00%) 106.36
other 5090219 ( 9.97%) 3163265176 ( 8.85%) 621.44
icmp 1388581 ( 2.72%) 122703952 ( 0.34%) 88.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 130 ( 0.00%) 27404 ( 0.00%) 210.80
ip6 2030976 ( 3.98%) 876684925 ( 2.45%) 431.66
other 18198 ( 0.04%) 6839851 ( 0.02%) 375.86
frag 16983 ( 0.03%) 22179806 ( 0.06%) 1306.00
ip6 140588 ( 0.28%) 70019082 ( 0.20%) 498.04
tcp6 69928 ( 0.14%) 50052865 ( 0.14%) 715.78
http(s) 20095 ( 0.04%) 25813908 ( 0.07%) 1284.59
http(c) 30204 ( 0.06%) 2747445 ( 0.01%) 90.96
smtp 6669 ( 0.01%) 7451247 ( 0.02%) 1117.30
ftp 3 ( 0.00%) 314 ( 0.00%) 104.67
dns 463 ( 0.00%) 93619 ( 0.00%) 202.20
bgp 84 ( 0.00%) 11679 ( 0.00%) 139.04
other 12410 ( 0.02%) 13934653 ( 0.04%) 1122.86
udp6 51459 ( 0.10%) 14757115 ( 0.04%) 286.77
dns 50391 ( 0.10%) 14622699 ( 0.04%) 290.18
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 1063 ( 0.00%) 133855 ( 0.00%) 125.92
icmp6 15832 ( 0.03%) 2772906 ( 0.01%) 175.15
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3256 ( 0.01%) 2420804 ( 0.01%) 743.49
tcpdump file: 201109141400.dump.gz (1251.01 MB)