Traffic Trace Info
DumpFile: 201109241400.dump
FileSize: 2617.10MB
Id: 201109241400
StartTime: Sat Sep 24 14:00:01 2011
EndTime: Sat Sep 24 14:15:00 2011
TotalTime: 899.65 seconds
TotalCapSize: -2039.79MB CapLen: 96 bytes
# of packets: 36757762 (19091.32MB)
AvgRate: 177.94Mbps stddev:50.90M
IP flow (unique src/dst pair) Information
# of flows: 1862512 (avg. 19.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 2.3% 1.6% 1.3% 1.0% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 1346788
Top 10 bandwidth usage (bytes/total in %):
27.7% 12.9% 9.5% 6.0% 4.4% 4.3% 4.2% 2.9% 2.4% 2.4%
# of IPv6 addresses: 3229
Top 10 bandwidth usage (bytes/total in %):
67.1% 50.9% 16.5% 9.8% 7.7% 7.7% 6.8% 6.7% 5.2% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109241400.pktlen.png)
detailed numbers
[ 32- 63]: 13125244
[ 64- 127]: 9283548
[ 128- 255]: 987661
[ 256- 511]: 520786
[ 512- 1023]: 946657
[ 1024- 2047]: 11893866
Protocol Breakdown
![[protocol breakdown chart]](201109241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36757762 (100.00%) 20018704430 (100.00%) 544.61
ip 36302635 ( 98.76%) 19492867819 ( 97.37%) 536.95
tcp 30184964 ( 82.12%) 17143826045 ( 85.64%) 567.96
http(s) 11221581 ( 30.53%) 14758297883 ( 73.72%) 1315.17
http(c) 4893008 ( 13.31%) 428873127 ( 2.14%) 87.65
squid 149662 ( 0.41%) 99119241 ( 0.50%) 662.29
smtp 49644 ( 0.14%) 9742871 ( 0.05%) 196.25
nntp 7 ( 0.00%) 438 ( 0.00%) 62.57
ftp 33117 ( 0.09%) 11709461 ( 0.06%) 353.58
pop3 9534 ( 0.03%) 758984 ( 0.00%) 79.61
imap 16753 ( 0.05%) 15228967 ( 0.08%) 909.03
telnet 556 ( 0.00%) 73551 ( 0.00%) 132.29
ssh 548605 ( 1.49%) 94795385 ( 0.47%) 172.79
dns 62049 ( 0.17%) 4599075 ( 0.02%) 74.12
bgp 625 ( 0.00%) 102719 ( 0.00%) 164.35
napster 293 ( 0.00%) 18410 ( 0.00%) 62.83
realaud 96 ( 0.00%) 7347 ( 0.00%) 76.53
rtsp 2437 ( 0.01%) 2725778 ( 0.01%) 1118.50
icecast 7899 ( 0.02%) 1014791 ( 0.01%) 128.47
hotline 81 ( 0.00%) 5146 ( 0.00%) 63.53
other 13189005 ( 35.88%) 1716752151 ( 8.58%) 130.17
udp 3188095 ( 8.67%) 1304809653 ( 6.52%) 409.28
dns 433725 ( 1.18%) 103345322 ( 0.52%) 238.27
realaud 8 ( 0.00%) 1116 ( 0.00%) 139.50
halflif 36 ( 0.00%) 5243 ( 0.00%) 145.64
starcra 67 ( 0.00%) 7726 ( 0.00%) 115.31
everque 276 ( 0.00%) 52934 ( 0.00%) 191.79
unreal 38 ( 0.00%) 6304 ( 0.00%) 165.89
quake 377 ( 0.00%) 52253 ( 0.00%) 138.60
cuseeme 3 ( 0.00%) 496 ( 0.00%) 165.33
other 2753474 ( 7.49%) 1201299991 ( 6.00%) 436.29
icmp 1593568 ( 4.34%) 158882276 ( 0.79%) 99.70
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 90 ( 0.00%) 17276 ( 0.00%) 191.96
ip6 1320066 ( 3.59%) 880594265 ( 4.40%) 667.08
other 15668 ( 0.04%) 4719144 ( 0.02%) 301.20
frag 593 ( 0.00%) 595437 ( 0.00%) 1004.11
ip6 455127 ( 1.24%) 525836611 ( 2.63%) 1155.36
tcp6 399050 ( 1.09%) 512619042 ( 2.56%) 1284.60
http(s) 3725 ( 0.01%) 3554203 ( 0.02%) 954.15
http(c) 15872 ( 0.04%) 1600557 ( 0.01%) 100.84
smtp 281 ( 0.00%) 106521 ( 0.00%) 379.08
ftp 74 ( 0.00%) 14848 ( 0.00%) 200.65
pop3 54 ( 0.00%) 10623 ( 0.00%) 196.72
dns 232 ( 0.00%) 49950 ( 0.00%) 215.30
bgp 84 ( 0.00%) 12780 ( 0.00%) 152.14
other 378728 ( 1.03%) 507269560 ( 2.53%) 1339.40
udp6 36915 ( 0.10%) 9496205 ( 0.05%) 257.25
dns 35193 ( 0.10%) 9281717 ( 0.05%) 263.74
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1721 ( 0.00%) 214383 ( 0.00%) 124.57
icmp6 18281 ( 0.05%) 3128262 ( 0.02%) 171.12
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 767 ( 0.00%) 577592 ( 0.00%) 753.05
tcpdump file: 201109241400.dump.gz (923.43 MB)