Traffic Trace Info
DumpFile: 201109251400.dump
FileSize: 3244.20MB
Id: 201109251400
StartTime: Sun Sep 25 14:00:01 2011
EndTime: Sun Sep 25 14:15:00 2011
TotalTime: 899.71 seconds
TotalCapSize: -1548.28MB CapLen: 96 bytes
# of packets: 45644158 (21964.28MB)
AvgRate: 204.74Mbps stddev:49.49M
IP flow (unique src/dst pair) Information
# of flows: 1962768 (avg. 23.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.1% 1.7% 1.6% 1.3% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1395910
Top 10 bandwidth usage (bytes/total in %):
28.0% 8.1% 6.4% 5.8% 4.1% 3.6% 2.6% 2.2% 2.2% 2.1%
# of IPv6 addresses: 3182
Top 10 bandwidth usage (bytes/total in %):
54.6% 54.5% 25.4% 10.6% 9.7% 8.8% 5.2% 5.2% 4.5% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109251400.pktlen.png)
detailed numbers
[ 32- 63]: 18597126
[ 64- 127]: 11354500
[ 128- 255]: 815450
[ 256- 511]: 424989
[ 512- 1023]: 531409
[ 1024- 2047]: 13920684
Protocol Breakdown
![[protocol breakdown chart]](201109251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45644158 (100.00%) 23031220257 (100.00%) 504.58
ip 45394586 ( 99.45%) 22774453036 ( 98.89%) 501.70
tcp 38982558 ( 85.41%) 19969160587 ( 86.70%) 512.26
http(s) 12191891 ( 26.71%) 16575137343 ( 71.97%) 1359.52
http(c) 5269932 ( 11.55%) 454834303 ( 1.97%) 86.31
squid 168249 ( 0.37%) 72664594 ( 0.32%) 431.89
smtp 57012 ( 0.12%) 25387143 ( 0.11%) 445.29
ftp 65942 ( 0.14%) 7427880 ( 0.03%) 112.64
pop3 14608 ( 0.03%) 3355339 ( 0.01%) 229.69
imap 405 ( 0.00%) 71264 ( 0.00%) 175.96
telnet 767 ( 0.00%) 86997 ( 0.00%) 113.43
ssh 84265 ( 0.18%) 12725459 ( 0.06%) 151.02
dns 34589 ( 0.08%) 4074077 ( 0.02%) 117.79
bgp 643 ( 0.00%) 107827 ( 0.00%) 167.69
napster 6148 ( 0.01%) 450424 ( 0.00%) 73.26
realaud 356 ( 0.00%) 22245 ( 0.00%) 62.49
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 3428 ( 0.01%) 487734 ( 0.00%) 142.28
hotline 149 ( 0.00%) 9266 ( 0.00%) 62.19
other 21084151 ( 46.19%) 2812317312 ( 12.21%) 133.39
udp 3742716 ( 8.20%) 1819395206 ( 7.90%) 486.12
dns 370161 ( 0.81%) 87509048 ( 0.38%) 236.41
realaud 15 ( 0.00%) 2592 ( 0.00%) 172.80
halflif 1547 ( 0.00%) 93605 ( 0.00%) 60.51
starcra 131 ( 0.00%) 12169 ( 0.00%) 92.89
everque 3575 ( 0.01%) 2677609 ( 0.01%) 748.98
unreal 63 ( 0.00%) 6901 ( 0.00%) 109.54
quake 360 ( 0.00%) 48590 ( 0.00%) 134.97
cuseeme 2 ( 0.00%) 191 ( 0.00%) 95.50
other 3366802 ( 7.38%) 1729014178 ( 7.51%) 513.55
icmp 1523410 ( 3.34%) 134960396 ( 0.59%) 88.59
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 90 ( 0.00%) 17404 ( 0.00%) 193.38
ip6 1129889 ( 2.48%) 845748790 ( 3.67%) 748.52
other 15739 ( 0.03%) 5151493 ( 0.02%) 327.31
frag 11443 ( 0.03%) 8597502 ( 0.04%) 751.33
ip6 249572 ( 0.55%) 256767221 ( 1.11%) 1028.83
tcp6 198460 ( 0.43%) 244395863 ( 1.06%) 1231.46
http(s) 36788 ( 0.08%) 52844091 ( 0.23%) 1436.45
http(c) 28963 ( 0.06%) 2671392 ( 0.01%) 92.23
smtp 177 ( 0.00%) 60947 ( 0.00%) 344.33
ftp 132 ( 0.00%) 13403 ( 0.00%) 101.54
dns 323 ( 0.00%) 72146 ( 0.00%) 223.36
bgp 90 ( 0.00%) 13339 ( 0.00%) 148.21
other 131987 ( 0.29%) 188720545 ( 0.82%) 1429.84
udp6 35085 ( 0.08%) 9070679 ( 0.04%) 258.53
dns 33583 ( 0.07%) 8881367 ( 0.04%) 264.46
halflif 2 ( 0.00%) 209 ( 0.00%) 104.50
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1499 ( 0.00%) 188996 ( 0.00%) 126.08
icmp6 14902 ( 0.03%) 2623010 ( 0.01%) 176.02
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1010 ( 0.00%) 662009 ( 0.00%) 655.45
tcpdump file: 201109251400.dump.gz (1150.80 MB)