Traffic Trace Info
DumpFile: -
Id: 201109221400
StartTime: Thu Sep 22 14:00:01 2011
EndTime: Thu Sep 22 14:15:01 2011
TotalTime: 899.92 seconds
TotalCapSize: -1647.41MB CapLen: 96 bytes
# of packets: 44740027 (25665.14MB)
AvgRate: 239.20Mbps stddev:42.86M
IP flow (unique src/dst pair) Information
# of flows: 1988074 (avg. 22.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 6.4% 6.1% 3.9% 3.4% 2.3% 1.4% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1453892
Top 10 bandwidth usage (bytes/total in %):
14.4% 14.4% 14.2% 10.7% 6.8% 6.5% 5.2% 4.3% 4.0% 3.5%
# of IPv6 addresses: 4194
Top 10 bandwidth usage (bytes/total in %):
26.6% 24.8% 24.5% 12.5% 8.5% 8.3% 7.2% 6.6% 6.3% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109221400.pktlen.png)
detailed numbers
[ 32- 63]: 14074520
[ 64- 127]: 9598308
[ 128- 255]: 1351945
[ 256- 511]: 607416
[ 512- 1023]: 3886121
[ 1024- 2047]: 15221717
Protocol Breakdown
![[protocol breakdown chart]](201109221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44740027 (100.00%) 26911850691 (100.00%) 601.52
ip 44460503 ( 99.38%) 26723473339 ( 99.30%) 601.06
tcp 36751839 ( 82.15%) 24116070982 ( 89.61%) 656.19
http(s) 12835256 ( 28.69%) 12298566738 ( 45.70%) 958.19
http(c) 11378474 ( 25.43%) 7210653274 ( 26.79%) 633.71
squid 86906 ( 0.19%) 64382491 ( 0.24%) 740.83
smtp 87968 ( 0.20%) 39919380 ( 0.15%) 453.79
nntp 14 ( 0.00%) 874 ( 0.00%) 62.43
ftp 56179 ( 0.13%) 37967981 ( 0.14%) 675.84
pop3 2852 ( 0.01%) 710975 ( 0.00%) 249.29
imap 1958 ( 0.00%) 269843 ( 0.00%) 137.82
telnet 668 ( 0.00%) 118147 ( 0.00%) 176.87
ssh 31638 ( 0.07%) 8030824 ( 0.03%) 253.83
dns 63434 ( 0.14%) 4762423 ( 0.02%) 75.08
bgp 670 ( 0.00%) 130967 ( 0.00%) 195.47
napster 192 ( 0.00%) 12346 ( 0.00%) 64.30
realaud 68 ( 0.00%) 4324 ( 0.00%) 63.59
rtsp 1505 ( 0.00%) 1372114 ( 0.01%) 911.70
icecast 1235 ( 0.00%) 474447 ( 0.00%) 384.17
hotline 66 ( 0.00%) 4970 ( 0.00%) 75.30
other 12202750 ( 27.27%) 4448688460 ( 16.53%) 364.56
udp 4572030 ( 10.22%) 1710288761 ( 6.36%) 374.08
dns 583234 ( 1.30%) 147522572 ( 0.55%) 252.94
realaud 4748 ( 0.01%) 2852358 ( 0.01%) 600.75
halflif 24 ( 0.00%) 2023 ( 0.00%) 84.29
starcra 12 ( 0.00%) 1400 ( 0.00%) 116.67
everque 2645 ( 0.01%) 2086281 ( 0.01%) 788.76
unreal 21 ( 0.00%) 3094 ( 0.00%) 147.33
quake 378 ( 0.00%) 52215 ( 0.00%) 138.13
cuseeme 4 ( 0.00%) 353 ( 0.00%) 88.25
other 3977816 ( 8.89%) 1553337807 ( 5.77%) 390.50
icmp 1461514 ( 3.27%) 129965536 ( 0.48%) 88.93
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 845 ( 0.00%) 323102 ( 0.00%) 382.37
ip6 1656945 ( 3.70%) 761702788 ( 2.83%) 459.70
other 17145 ( 0.04%) 5102900 ( 0.02%) 297.63
frag 11442 ( 0.03%) 16024485 ( 0.06%) 1400.50
ip6 279524 ( 0.62%) 188377352 ( 0.70%) 673.92
tcp6 153264 ( 0.34%) 140097060 ( 0.52%) 914.09
http(s) 22407 ( 0.05%) 27444434 ( 0.10%) 1224.82
http(c) 25190 ( 0.06%) 2306996 ( 0.01%) 91.58
smtp 1238 ( 0.00%) 982492 ( 0.00%) 793.61
ftp 1129 ( 0.00%) 552811 ( 0.00%) 489.65
dns 263 ( 0.00%) 59613 ( 0.00%) 226.67
bgp 90 ( 0.00%) 15699 ( 0.00%) 174.43
other 102947 ( 0.23%) 108735015 ( 0.40%) 1056.22
udp6 73470 ( 0.16%) 22893863 ( 0.09%) 311.61
dns 56290 ( 0.13%) 15742969 ( 0.06%) 279.68
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 92 ( 0.00%) 92.00
other 17177 ( 0.04%) 7150576 ( 0.03%) 416.29
icmp6 21336 ( 0.05%) 3229051 ( 0.01%) 151.34
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 31339 ( 0.07%) 22141750 ( 0.08%) 706.52
tcpdump file: 201109221400.dump.gz (1059.14 MB)