Traffic Trace Info
DumpFile: 201109191400.dump
FileSize: 2247.42MB
Id: 201109191400
StartTime: Mon Sep 19 14:00:01 2011
EndTime: Mon Sep 19 14:15:01 2011
TotalTime: 900.01 seconds
TotalCapSize: 1765.50MB CapLen: 96 bytes
# of packets: 31582936 (17442.18MB)
AvgRate: 162.54Mbps stddev:38.57M
IP flow (unique src/dst pair) Information
# of flows: 1909381 (avg. 16.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.8% 1.6% 1.5% 1.5% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1412689
Top 10 bandwidth usage (bytes/total in %):
12.8% 7.9% 5.7% 4.8% 4.7% 4.4% 3.8% 3.4% 3.3% 2.4%
# of IPv6 addresses: 3523
Top 10 bandwidth usage (bytes/total in %):
58.2% 33.2% 25.0% 15.0% 12.2% 8.4% 5.3% 4.9% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109191400.pktlen.png)
detailed numbers
[ 32- 63]: 9310427
[ 64- 127]: 9034009
[ 128- 255]: 1142985
[ 256- 511]: 482959
[ 512- 1023]: 567820
[ 1024- 2047]: 11044736
Protocol Breakdown
![[protocol breakdown chart]](201109191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31582936 (100.00%) 18289446179 (100.00%) 579.09
ip 31353798 ( 99.27%) 18124927325 ( 99.10%) 578.08
tcp 23101707 ( 73.15%) 14742673771 ( 80.61%) 638.16
http(s) 8558579 ( 27.10%) 11505030122 ( 62.91%) 1344.27
http(c) 4748839 ( 15.04%) 597230196 ( 3.27%) 125.76
squid 82962 ( 0.26%) 63742293 ( 0.35%) 768.33
smtp 76857 ( 0.24%) 42227592 ( 0.23%) 549.43
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 56454 ( 0.18%) 36431395 ( 0.20%) 645.33
pop3 1264 ( 0.00%) 228215 ( 0.00%) 180.55
imap 478 ( 0.00%) 58289 ( 0.00%) 121.94
telnet 476 ( 0.00%) 78960 ( 0.00%) 165.88
ssh 23607 ( 0.07%) 6085427 ( 0.03%) 257.78
dns 81821 ( 0.26%) 5756486 ( 0.03%) 70.35
bgp 650 ( 0.00%) 108559 ( 0.00%) 167.01
napster 1046 ( 0.00%) 65529 ( 0.00%) 62.65
realaud 322 ( 0.00%) 40071 ( 0.00%) 124.44
rtsp 38112 ( 0.12%) 42055643 ( 0.23%) 1103.48
icecast 8732 ( 0.03%) 787510 ( 0.00%) 90.19
hotline 85 ( 0.00%) 5388 ( 0.00%) 63.39
other 9421422 ( 29.83%) 2442742036 ( 13.36%) 259.28
udp 5066751 ( 16.04%) 2425847217 ( 13.26%) 478.78
dns 482476 ( 1.53%) 126571273 ( 0.69%) 262.34
realaud 6 ( 0.00%) 494 ( 0.00%) 82.33
halflif 51 ( 0.00%) 4085 ( 0.00%) 80.10
starcra 85 ( 0.00%) 7571 ( 0.00%) 89.07
everque 1636 ( 0.01%) 1184418 ( 0.01%) 723.97
unreal 8 ( 0.00%) 881 ( 0.00%) 110.12
quake 391 ( 0.00%) 47507 ( 0.00%) 121.50
cuseeme 5 ( 0.00%) 513 ( 0.00%) 102.60
other 4582053 ( 14.51%) 2298002812 ( 12.56%) 501.52
icmp 1429915 ( 4.53%) 128164437 ( 0.70%) 89.63
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1616 ( 0.01%) 678208 ( 0.00%) 419.68
ip6 1737729 ( 5.50%) 822235350 ( 4.50%) 473.17
other 15896 ( 0.05%) 5309182 ( 0.03%) 333.99
frag 268 ( 0.00%) 287411 ( 0.00%) 1072.43
ip6 229136 ( 0.73%) 164518734 ( 0.90%) 718.00
tcp6 163574 ( 0.52%) 146366895 ( 0.80%) 894.81
http(s) 12413 ( 0.04%) 16249037 ( 0.09%) 1309.03
http(c) 59034 ( 0.19%) 5242964 ( 0.03%) 88.81
smtp 149 ( 0.00%) 38903 ( 0.00%) 261.09
ftp 26 ( 0.00%) 2333 ( 0.00%) 89.73
ssh 16 ( 0.00%) 3833 ( 0.00%) 239.56
dns 323 ( 0.00%) 70657 ( 0.00%) 218.75
bgp 91 ( 0.00%) 16349 ( 0.00%) 179.66
other 91522 ( 0.29%) 124742819 ( 0.68%) 1362.98
udp6 42752 ( 0.14%) 10574131 ( 0.06%) 247.34
dns 37679 ( 0.12%) 9998844 ( 0.05%) 265.37
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 5071 ( 0.02%) 575072 ( 0.00%) 113.40
icmp6 15952 ( 0.05%) 2753792 ( 0.02%) 172.63
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6744 ( 0.02%) 4808356 ( 0.03%) 712.98
tcpdump file: 201109191400.dump.gz (778.03 MB)