Traffic Trace Info
DumpFile: 201109291400.dump
FileSize: 2907.52MB
Id: 201109291400
StartTime: Thu Sep 29 14:00:00 2011
EndTime: Thu Sep 29 14:15:00 2011
TotalTime: 899.67 seconds
TotalCapSize: -1821.34MB CapLen: 96 bytes
# of packets: 41474622 (28876.72MB)
AvgRate: 269.27Mbps stddev:46.01M
IP flow (unique src/dst pair) Information
# of flows: 1766353 (avg. 23.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.4% 6.1% 5.5% 1.4% 1.3% 1.3% 1.2% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 1345282
Top 10 bandwidth usage (bytes/total in %):
24.0% 15.2% 7.6% 7.4% 6.5% 5.9% 5.8% 5.3% 2.2% 2.1%
# of IPv6 addresses: 4381
Top 10 bandwidth usage (bytes/total in %):
66.5% 66.5% 9.9% 5.5% 4.8% 4.4% 4.2% 2.8% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109291400.pktlen.png)
detailed numbers
[ 32- 63]: 9887296
[ 64- 127]: 7992668
[ 128- 255]: 1307985
[ 256- 511]: 939479
[ 512- 1023]: 3712299
[ 1024- 2047]: 17634895
Protocol Breakdown
![[protocol breakdown chart]](201109291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41474622 (100.00%) 30279437541 (100.00%) 730.07
ip 40951503 ( 98.74%) 29731946681 ( 98.19%) 726.03
tcp 35156692 ( 84.77%) 27686272786 ( 91.44%) 787.51
http(s) 16004885 ( 38.59%) 17146011387 ( 56.63%) 1071.30
http(c) 13276391 ( 32.01%) 7625247902 ( 25.18%) 574.35
squid 112807 ( 0.27%) 78825625 ( 0.26%) 698.77
smtp 85906 ( 0.21%) 28760572 ( 0.09%) 334.79
ftp 50427 ( 0.12%) 29319426 ( 0.10%) 581.42
pop3 4311 ( 0.01%) 1597052 ( 0.01%) 370.46
imap 1240 ( 0.00%) 231912 ( 0.00%) 187.03
telnet 939 ( 0.00%) 98515 ( 0.00%) 104.91
ssh 42497 ( 0.10%) 5318543 ( 0.02%) 125.15
dns 45022 ( 0.11%) 3727778 ( 0.01%) 82.80
bgp 628 ( 0.00%) 111508 ( 0.00%) 177.56
napster 41 ( 0.00%) 3516 ( 0.00%) 85.76
rtsp 7920 ( 0.02%) 11349385 ( 0.04%) 1433.00
icecast 12043 ( 0.03%) 8546158 ( 0.03%) 709.64
hotline 12 ( 0.00%) 740 ( 0.00%) 61.67
other 5511622 ( 13.29%) 2747122707 ( 9.07%) 498.42
udp 3486641 ( 8.41%) 1317614996 ( 4.35%) 377.90
dns 641231 ( 1.55%) 156707197 ( 0.52%) 244.38
realaud 11 ( 0.00%) 1599 ( 0.00%) 145.36
halflif 29 ( 0.00%) 2931 ( 0.00%) 101.07
starcra 42 ( 0.00%) 7054 ( 0.00%) 167.95
everque 2545 ( 0.01%) 1474665 ( 0.00%) 579.44
unreal 58 ( 0.00%) 11004 ( 0.00%) 189.72
quake 354 ( 0.00%) 51125 ( 0.00%) 144.42
cuseeme 8 ( 0.00%) 616 ( 0.00%) 77.00
other 2840050 ( 6.85%) 1159141741 ( 3.83%) 408.14
icmp 1342026 ( 3.24%) 93013368 ( 0.31%) 69.31
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5458 ( 0.01%) 1399052 ( 0.00%) 256.33
ip6 942443 ( 2.27%) 626859916 ( 2.07%) 665.14
other 18059 ( 0.04%) 6767403 ( 0.02%) 374.74
frag 8159 ( 0.02%) 6941280 ( 0.02%) 850.75
ip6 523119 ( 1.26%) 547490860 ( 1.81%) 1046.59
tcp6 394648 ( 0.95%) 488272115 ( 1.61%) 1237.23
http(s) 35184 ( 0.08%) 41115589 ( 0.14%) 1168.59
http(c) 51454 ( 0.12%) 4579912 ( 0.02%) 89.01
smtp 4050 ( 0.01%) 474605 ( 0.00%) 117.19
ftp 65 ( 0.00%) 5924 ( 0.00%) 91.14
dns 364 ( 0.00%) 81937 ( 0.00%) 225.10
bgp 84 ( 0.00%) 12871 ( 0.00%) 153.23
other 303447 ( 0.73%) 442001277 ( 1.46%) 1456.60
udp6 93854 ( 0.23%) 43772216 ( 0.14%) 466.39
dns 64236 ( 0.15%) 18861922 ( 0.06%) 293.63
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 2 ( 0.00%) 228 ( 0.00%) 114.00
unreal 2 ( 0.00%) 215 ( 0.00%) 107.50
quake 3 ( 0.00%) 344 ( 0.00%) 114.67
other 29610 ( 0.07%) 24909397 ( 0.08%) 841.25
icmp6 16814 ( 0.04%) 2820470 ( 0.01%) 167.75
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17690 ( 0.04%) 12610635 ( 0.04%) 712.87
tcpdump file: 201109291400.dump.gz (936.67 MB)