Traffic Trace Info
DumpFile: 201109181400.dump
FileSize: 2731.57MB
Id: 201109181400
StartTime: Sun Sep 18 14:00:00 2011
EndTime: Sun Sep 18 14:15:00 2011
TotalTime: 900.10 seconds
TotalCapSize: -1956.23MB CapLen: 96 bytes
# of packets: 38783756 (24142.41MB)
AvgRate: 224.97Mbps stddev:47.67M
IP flow (unique src/dst pair) Information
# of flows: 1954976 (avg. 19.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 4.2% 1.8% 1.3% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1461279
Top 10 bandwidth usage (bytes/total in %):
18.7% 10.4% 8.4% 7.0% 6.9% 4.7% 4.4% 4.3% 3.5% 2.5%
# of IPv6 addresses: 3031
Top 10 bandwidth usage (bytes/total in %):
50.9% 29.0% 21.9% 21.1% 21.1% 6.9% 5.3% 3.6% 2.3% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109181400.pktlen.png)
detailed numbers
[ 32- 63]: 11801109
[ 64- 127]: 8901760
[ 128- 255]: 1235583
[ 256- 511]: 495923
[ 512- 1023]: 611129
[ 1024- 2047]: 15738252
Protocol Breakdown
![[protocol breakdown chart]](201109181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38783756 (100.00%) 25315147438 (100.00%) 652.73
ip 38578488 ( 99.47%) 25209760660 ( 99.58%) 653.47
tcp 29762771 ( 76.74%) 21767571879 ( 85.99%) 731.37
http(s) 11061850 ( 28.52%) 15189896716 ( 60.00%) 1373.18
http(c) 4277790 ( 11.03%) 422359673 ( 1.67%) 98.73
squid 58368 ( 0.15%) 33308449 ( 0.13%) 570.66
smtp 55737 ( 0.14%) 9439930 ( 0.04%) 169.37
ftp 15893 ( 0.04%) 1368791 ( 0.01%) 86.13
pop3 45822 ( 0.12%) 2853757 ( 0.01%) 62.28
imap 918 ( 0.00%) 184446 ( 0.00%) 200.92
telnet 431 ( 0.00%) 63126 ( 0.00%) 146.46
ssh 31332 ( 0.08%) 5880814 ( 0.02%) 187.69
dns 83699 ( 0.22%) 7467501 ( 0.03%) 89.22
bgp 698 ( 0.00%) 133753 ( 0.00%) 191.62
napster 1786 ( 0.00%) 113538 ( 0.00%) 63.57
realaud 100 ( 0.00%) 6682 ( 0.00%) 66.82
rtsp 16852 ( 0.04%) 22449726 ( 0.09%) 1332.17
icecast 10376 ( 0.03%) 880338 ( 0.00%) 84.84
hotline 121 ( 0.00%) 8148 ( 0.00%) 67.34
other 14100996 ( 36.36%) 6071156371 ( 23.98%) 430.55
udp 5272632 ( 13.59%) 2235097872 ( 8.83%) 423.91
dns 343026 ( 0.88%) 79035900 ( 0.31%) 230.41
realaud 3 ( 0.00%) 292 ( 0.00%) 97.33
halflif 71 ( 0.00%) 8711 ( 0.00%) 122.69
starcra 65 ( 0.00%) 10888 ( 0.00%) 167.51
everque 282 ( 0.00%) 54888 ( 0.00%) 194.64
unreal 12 ( 0.00%) 1797 ( 0.00%) 149.75
quake 395 ( 0.00%) 51443 ( 0.00%) 130.24
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 4928444 ( 12.71%) 2155759623 ( 8.52%) 437.41
icmp 1372921 ( 3.54%) 108949267 ( 0.43%) 79.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ip6 2153330 ( 5.55%) 1092618788 ( 4.32%) 507.41
other 16649 ( 0.04%) 5503584 ( 0.02%) 330.57
frag 32173 ( 0.08%) 24440440 ( 0.10%) 759.66
ip6 205268 ( 0.53%) 105386778 ( 0.42%) 513.41
tcp6 140236 ( 0.36%) 89651151 ( 0.35%) 639.29
http(s) 5591 ( 0.01%) 5283619 ( 0.02%) 945.02
http(c) 77890 ( 0.20%) 6864818 ( 0.03%) 88.13
smtp 142 ( 0.00%) 34467 ( 0.00%) 242.73
ftp 51 ( 0.00%) 4634 ( 0.00%) 90.86
dns 264 ( 0.00%) 57434 ( 0.00%) 217.55
bgp 99 ( 0.00%) 24521 ( 0.00%) 247.69
other 56199 ( 0.14%) 77381658 ( 0.31%) 1376.92
udp6 47312 ( 0.12%) 11849413 ( 0.05%) 250.45
dns 33534 ( 0.09%) 8664065 ( 0.03%) 258.37
halflif 1 ( 0.00%) 114 ( 0.00%) 114.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 13775 ( 0.04%) 3185024 ( 0.01%) 231.22
icmp6 16049 ( 0.04%) 2729968 ( 0.01%) 170.10
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1559 ( 0.00%) 1140990 ( 0.00%) 731.87
tcpdump file: 201109181400.dump.gz (938.97 MB)