Traffic Trace Info
DumpFile: 201109171400.dump
FileSize: 3168.58MB
Id: 201109171400
StartTime: Sat Sep 17 14:00:00 2011
EndTime: Sat Sep 17 14:15:00 2011
TotalTime: 900.10 seconds
TotalCapSize: -1601.66MB CapLen: 96 bytes
# of packets: 44186313 (29531.31MB)
AvgRate: 275.26Mbps stddev:52.95M
IP flow (unique src/dst pair) Information
# of flows: 1777050 (avg. 24.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.6% 1.6% 1.6% 1.4% 1.4% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1340707
Top 10 bandwidth usage (bytes/total in %):
21.7% 10.3% 7.3% 5.0% 4.9% 4.7% 4.4% 3.2% 3.0% 3.0%
# of IPv6 addresses: 3363
Top 10 bandwidth usage (bytes/total in %):
85.4% 52.1% 33.3% 4.5% 2.5% 2.5% 2.2% 1.9% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109171400.pktlen.png)
detailed numbers
[ 32- 63]: 11920595
[ 64- 127]: 10345734
[ 128- 255]: 1256991
[ 256- 511]: 529771
[ 512- 1023]: 684938
[ 1024- 2047]: 19448284
Protocol Breakdown
![[protocol breakdown chart]](201109171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44186313 (100.00%) 30965817836 (100.00%) 700.80
ip 43894650 ( 99.34%) 30708415927 ( 99.17%) 699.59
tcp 36252239 ( 82.04%) 27832428292 ( 89.88%) 767.74
http(s) 15653426 ( 35.43%) 21768415412 ( 70.30%) 1390.65
http(c) 5693309 ( 12.88%) 468506442 ( 1.51%) 82.29
squid 61359 ( 0.14%) 36899735 ( 0.12%) 601.37
smtp 202021 ( 0.46%) 80887682 ( 0.26%) 400.39
ftp 62558 ( 0.14%) 40155076 ( 0.13%) 641.89
pop3 14412 ( 0.03%) 979229 ( 0.00%) 67.95
imap 640 ( 0.00%) 193320 ( 0.00%) 302.06
telnet 743 ( 0.00%) 82902 ( 0.00%) 111.58
ssh 36777 ( 0.08%) 6518245 ( 0.02%) 177.24
dns 9573 ( 0.02%) 2575081 ( 0.01%) 268.99
bgp 626 ( 0.00%) 99776 ( 0.00%) 159.39
napster 2901 ( 0.01%) 183664 ( 0.00%) 63.31
realaud 68 ( 0.00%) 4296 ( 0.00%) 63.18
rtsp 37521 ( 0.08%) 41486289 ( 0.13%) 1105.68
icecast 8501 ( 0.02%) 687969 ( 0.00%) 80.93
hotline 96 ( 0.00%) 6210 ( 0.00%) 64.69
other 14467707 ( 32.74%) 5384746904 ( 17.39%) 372.19
udp 4052851 ( 9.17%) 1647464301 ( 5.32%) 406.50
dns 404990 ( 0.92%) 98241562 ( 0.32%) 242.58
realaud 5 ( 0.00%) 632 ( 0.00%) 126.40
halflif 27 ( 0.00%) 2476 ( 0.00%) 91.70
starcra 68 ( 0.00%) 13044 ( 0.00%) 191.82
everque 543 ( 0.00%) 121128 ( 0.00%) 223.07
unreal 225 ( 0.00%) 41259 ( 0.00%) 183.37
quake 423 ( 0.00%) 55940 ( 0.00%) 132.25
cuseeme 7 ( 0.00%) 1154 ( 0.00%) 164.86
other 3646514 ( 8.25%) 1548967709 ( 5.00%) 424.78
icmp 1378418 ( 3.12%) 111413577 ( 0.36%) 80.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ip6 2193761 ( 4.96%) 1111718644 ( 3.59%) 506.76
other 17196 ( 0.04%) 5371843 ( 0.02%) 312.39
frag 300 ( 0.00%) 307201 ( 0.00%) 1024.00
ip6 291663 ( 0.66%) 257401909 ( 0.83%) 882.53
tcp6 228491 ( 0.52%) 241652770 ( 0.78%) 1057.60
http(s) 7757 ( 0.02%) 9111123 ( 0.03%) 1174.57
http(c) 67834 ( 0.15%) 6083977 ( 0.02%) 89.69
smtp 499 ( 0.00%) 167085 ( 0.00%) 334.84
ftp 24 ( 0.00%) 2141 ( 0.00%) 89.21
dns 236 ( 0.00%) 51087 ( 0.00%) 216.47
bgp 98 ( 0.00%) 21092 ( 0.00%) 215.22
other 152043 ( 0.34%) 226216265 ( 0.73%) 1487.84
udp6 42022 ( 0.10%) 9458474 ( 0.03%) 225.08
dns 35364 ( 0.08%) 8760843 ( 0.03%) 247.73
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 6656 ( 0.02%) 697411 ( 0.00%) 104.78
icmp6 15976 ( 0.04%) 2649633 ( 0.01%) 165.85
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5059 ( 0.01%) 3625404 ( 0.01%) 716.62
tcpdump file: 201109171400.dump.gz (1054.90 MB)