Traffic Trace Info
DumpFile: 201109231400.dump
FileSize: 2561.42MB
Id: 201109231400
StartTime: Fri Sep 23 14:00:00 2011
EndTime: Fri Sep 23 14:15:00 2011
TotalTime: 900.05 seconds
TotalCapSize: 2021.36MB CapLen: 96 bytes
# of packets: 35392916 (20237.04MB)
AvgRate: 188.62Mbps stddev:40.96M
IP flow (unique src/dst pair) Information
# of flows: 1930401 (avg. 18.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 6.3% 2.6% 1.4% 1.4% 1.4% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1444196
Top 10 bandwidth usage (bytes/total in %):
10.7% 10.6% 9.9% 7.7% 7.6% 6.5% 5.1% 4.3% 4.0% 3.6%
# of IPv6 addresses: 3629
Top 10 bandwidth usage (bytes/total in %):
63.5% 63.5% 12.6% 11.4% 10.6% 6.4% 3.8% 3.0% 2.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109231400.pktlen.png)
detailed numbers
[ 32- 63]: 9685066
[ 64- 127]: 10507014
[ 128- 255]: 1092783
[ 256- 511]: 529182
[ 512- 1023]: 476247
[ 1024- 2047]: 13102624
Protocol Breakdown
![[protocol breakdown chart]](201109231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35392916 (100.00%) 21220077771 (100.00%) 599.56
ip 35169210 ( 99.37%) 21028687392 ( 99.10%) 597.93
tcp 28131404 ( 79.48%) 18780940055 ( 88.51%) 667.61
http(s) 9292705 ( 26.26%) 12604543343 ( 59.40%) 1356.39
http(c) 5064815 ( 14.31%) 465363003 ( 2.19%) 91.88
squid 84948 ( 0.24%) 62797755 ( 0.30%) 739.25
smtp 69039 ( 0.20%) 16033599 ( 0.08%) 232.24
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 66789 ( 0.19%) 40385866 ( 0.19%) 604.68
pop3 1776 ( 0.01%) 394932 ( 0.00%) 222.37
imap 1718 ( 0.00%) 1090410 ( 0.01%) 634.70
telnet 446 ( 0.00%) 64187 ( 0.00%) 143.92
ssh 28449 ( 0.08%) 7186343 ( 0.03%) 252.60
dns 62279 ( 0.18%) 6214745 ( 0.03%) 99.79
bgp 632 ( 0.00%) 97080 ( 0.00%) 153.61
napster 474 ( 0.00%) 30776 ( 0.00%) 64.93
realaud 68 ( 0.00%) 4254 ( 0.00%) 62.56
rtsp 5226 ( 0.01%) 4607869 ( 0.02%) 881.72
icecast 840 ( 0.00%) 186429 ( 0.00%) 221.94
hotline 66 ( 0.00%) 4787 ( 0.00%) 72.53
other 13451130 ( 38.01%) 5571934423 ( 26.26%) 414.24
udp 3820218 ( 10.79%) 1481975671 ( 6.98%) 387.93
dns 473020 ( 1.34%) 119402375 ( 0.56%) 252.43
realaud 16 ( 0.00%) 1663 ( 0.00%) 103.94
halflif 95 ( 0.00%) 8790 ( 0.00%) 92.53
starcra 281 ( 0.00%) 23194 ( 0.00%) 82.54
everque 5148 ( 0.01%) 4125536 ( 0.02%) 801.39
unreal 9 ( 0.00%) 1649 ( 0.00%) 183.22
quake 298 ( 0.00%) 42626 ( 0.00%) 143.04
cuseeme 1 ( 0.00%) 82 ( 0.00%) 82.00
other 3341287 ( 9.44%) 1358334724 ( 6.40%) 406.53
icmp 1431991 ( 4.05%) 118615689 ( 0.56%) 82.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3185 ( 0.01%) 804182 ( 0.00%) 252.49
ip6 1765963 ( 4.99%) 641172664 ( 3.02%) 363.07
other 16264 ( 0.05%) 5159861 ( 0.02%) 317.26
frag 510 ( 0.00%) 549525 ( 0.00%) 1077.50
ip6 223706 ( 0.63%) 191390379 ( 0.90%) 855.54
tcp6 164789 ( 0.47%) 177947637 ( 0.84%) 1079.85
http(s) 4922 ( 0.01%) 5354524 ( 0.03%) 1087.88
http(c) 19894 ( 0.06%) 1952425 ( 0.01%) 98.14
smtp 1823 ( 0.01%) 258723 ( 0.00%) 141.92
ftp 84 ( 0.00%) 7920 ( 0.00%) 94.29
pop3 16 ( 0.00%) 2924 ( 0.00%) 182.75
dns 281 ( 0.00%) 71823 ( 0.00%) 255.60
bgp 90 ( 0.00%) 16363 ( 0.00%) 181.81
other 137679 ( 0.39%) 170282935 ( 0.80%) 1236.81
udp6 40456 ( 0.11%) 10040855 ( 0.05%) 248.19
dns 38035 ( 0.11%) 9788045 ( 0.05%) 257.34
realaud 2 ( 0.00%) 203 ( 0.00%) 101.50
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
unreal 2 ( 0.00%) 236 ( 0.00%) 118.00
other 2415 ( 0.01%) 252153 ( 0.00%) 104.41
icmp6 17932 ( 0.05%) 2990959 ( 0.01%) 166.79
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 415 ( 0.00%) 395418 ( 0.00%) 952.81
tcpdump file: 201109231400.dump.gz (873.46 MB)