Traffic Trace Info
DumpFile: 201109161400.dump
FileSize: 2948.84MB
Id: 201109161400
StartTime: Fri Sep 16 14:00:00 2011
EndTime: Fri Sep 16 14:15:01 2011
TotalTime: 900.34 seconds
TotalCapSize: -1778.46MB CapLen: 96 bytes
# of packets: 41371979 (26451.78MB)
AvgRate: 246.46Mbps stddev:35.32M
IP flow (unique src/dst pair) Information
# of flows: 1971803 (avg. 20.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.4% 2.2% 2.0% 1.6% 1.3% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1428292
Top 10 bandwidth usage (bytes/total in %):
14.2% 13.2% 11.4% 4.4% 3.3% 2.4% 2.2% 2.2% 2.2% 2.2%
# of IPv6 addresses: 4068
Top 10 bandwidth usage (bytes/total in %):
67.3% 56.4% 32.5% 18.9% 4.0% 2.7% 1.9% 1.4% 1.3% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109161400.pktlen.png)
detailed numbers
[ 32- 63]: 11654444
[ 64- 127]: 9952352
[ 128- 255]: 1065198
[ 256- 511]: 609758
[ 512- 1023]: 869522
[ 1024- 2047]: 17220705
Protocol Breakdown
![[protocol breakdown chart]](201109161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41371979 (100.00%) 27736702302 (100.00%) 670.42
ip 40691075 ( 98.35%) 27072104810 ( 97.60%) 665.31
tcp 33880203 ( 81.89%) 24474040574 ( 88.24%) 722.37
http(s) 12126352 ( 29.31%) 16316570894 ( 58.83%) 1345.55
http(c) 7159716 ( 17.31%) 1023380721 ( 3.69%) 142.94
squid 75370 ( 0.18%) 54901148 ( 0.20%) 728.42
smtp 181524 ( 0.44%) 119643751 ( 0.43%) 659.11
ftp 46364 ( 0.11%) 35580618 ( 0.13%) 767.42
pop3 27585 ( 0.07%) 3170520 ( 0.01%) 114.94
imap 150010 ( 0.36%) 216600227 ( 0.78%) 1443.91
telnet 513 ( 0.00%) 72114 ( 0.00%) 140.57
ssh 57428 ( 0.14%) 25826433 ( 0.09%) 449.72
dns 13384 ( 0.03%) 1151542 ( 0.00%) 86.04
bgp 638 ( 0.00%) 117699 ( 0.00%) 184.48
napster 223 ( 0.00%) 14970 ( 0.00%) 67.13
realaud 56 ( 0.00%) 3682 ( 0.00%) 65.75
rtsp 25121 ( 0.06%) 11420987 ( 0.04%) 454.64
icecast 15544 ( 0.04%) 1412410 ( 0.01%) 90.87
hotline 783 ( 0.00%) 53012 ( 0.00%) 67.70
other 13999580 ( 33.84%) 6664118972 ( 24.03%) 476.02
udp 4159349 ( 10.05%) 2132086463 ( 7.69%) 512.60
dns 827061 ( 2.00%) 174390782 ( 0.63%) 210.86
realaud 14 ( 0.00%) 1537 ( 0.00%) 109.79
halflif 67 ( 0.00%) 5709 ( 0.00%) 85.21
starcra 61 ( 0.00%) 9328 ( 0.00%) 152.92
everque 569 ( 0.00%) 123892 ( 0.00%) 217.74
unreal 51 ( 0.00%) 7472 ( 0.00%) 146.51
quake 1518 ( 0.00%) 117586 ( 0.00%) 77.46
cuseeme 5 ( 0.00%) 450 ( 0.00%) 90.00
other 3329904 ( 8.05%) 1957348853 ( 7.06%) 587.81
icmp 1444584 ( 3.49%) 128758165 ( 0.46%) 89.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ip6 1186018 ( 2.87%) 330492197 ( 1.19%) 278.66
other 20736 ( 0.05%) 6708141 ( 0.02%) 323.50
frag 496 ( 0.00%) 538754 ( 0.00%) 1086.20
ip6 680904 ( 1.65%) 664597492 ( 2.40%) 976.05
tcp6 593805 ( 1.44%) 638326276 ( 2.30%) 1074.98
http(s) 18944 ( 0.05%) 23582394 ( 0.09%) 1244.85
http(c) 170468 ( 0.41%) 16086968 ( 0.06%) 94.37
smtp 2033 ( 0.00%) 2431890 ( 0.01%) 1196.21
dns 308 ( 0.00%) 79612 ( 0.00%) 258.48
bgp 101 ( 0.00%) 25433 ( 0.00%) 251.81
other 401951 ( 0.97%) 596119979 ( 2.15%) 1483.07
udp6 61616 ( 0.15%) 19487825 ( 0.07%) 316.28
dns 52126 ( 0.13%) 14181368 ( 0.05%) 272.06
starcra 55 ( 0.00%) 6527 ( 0.00%) 118.67
everque 701 ( 0.00%) 457478 ( 0.00%) 652.61
cuseeme 2 ( 0.00%) 203 ( 0.00%) 101.50
other 8732 ( 0.02%) 4842249 ( 0.02%) 554.54
icmp6 20701 ( 0.05%) 3382120 ( 0.01%) 163.38
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4668 ( 0.01%) 3385779 ( 0.01%) 725.32
tcpdump file: 201109161400.dump.gz (995.69 MB)