Traffic Trace Info
DumpFile: 201109301400.dump
FileSize: 2895.03MB
Id: 201109301400
StartTime: Fri Sep 30 14:00:01 2011
EndTime: Fri Sep 30 14:15:01 2011
TotalTime: 900.27 seconds
TotalCapSize: -1813.91MB CapLen: 96 bytes
# of packets: 40169104 (21072.82MB)
AvgRate: 196.31Mbps stddev:30.64M
IP flow (unique src/dst pair) Information
# of flows: 2093204 (avg. 19.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.7% 2.3% 1.6% 1.4% 1.4% 1.2% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1476703
Top 10 bandwidth usage (bytes/total in %):
11.3% 6.7% 6.5% 6.3% 6.2% 5.0% 4.0% 3.7% 2.8% 2.4%
# of IPv6 addresses: 3983
Top 10 bandwidth usage (bytes/total in %):
55.3% 21.2% 11.4% 10.7% 10.0% 8.1% 5.3% 4.7% 4.1% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109301400.pktlen.png)
detailed numbers
[ 32- 63]: 10198924
[ 64- 127]: 12964309
[ 128- 255]: 1774914
[ 256- 511]: 1073327
[ 512- 1023]: 846232
[ 1024- 2047]: 13311398
Protocol Breakdown
![[protocol breakdown chart]](201109301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40169104 (100.00%) 22096452881 (100.00%) 550.09
ip 39844991 ( 99.19%) 21875458072 ( 99.00%) 549.01
tcp 31255987 ( 77.81%) 18495642678 ( 83.70%) 591.75
http(s) 9708935 ( 24.17%) 12521736233 ( 56.67%) 1289.71
http(c) 9012802 ( 22.44%) 1227830367 ( 5.56%) 136.23
squid 100951 ( 0.25%) 61022377 ( 0.28%) 604.48
smtp 133655 ( 0.33%) 68930848 ( 0.31%) 515.74
nntp 4 ( 0.00%) 242 ( 0.00%) 60.50
ftp 48239 ( 0.12%) 29011649 ( 0.13%) 601.41
pop3 5490 ( 0.01%) 2959238 ( 0.01%) 539.02
imap 2307 ( 0.01%) 713515 ( 0.00%) 309.28
telnet 551 ( 0.00%) 73157 ( 0.00%) 132.77
ssh 486189 ( 1.21%) 69399428 ( 0.31%) 142.74
dns 39974 ( 0.10%) 3405007 ( 0.02%) 85.18
bgp 678 ( 0.00%) 138295 ( 0.00%) 203.97
napster 207 ( 0.00%) 13264 ( 0.00%) 64.08
realaud 62 ( 0.00%) 3882 ( 0.00%) 62.61
rtsp 25131 ( 0.06%) 26043899 ( 0.12%) 1036.33
icecast 54619 ( 0.14%) 46592007 ( 0.21%) 853.04
hotline 18 ( 0.00%) 1114 ( 0.00%) 61.89
other 11636175 ( 28.97%) 4437768156 ( 20.08%) 381.38
udp 4719488 ( 11.75%) 2122097753 ( 9.60%) 449.65
dns 625622 ( 1.56%) 156466012 ( 0.71%) 250.10
realaud 14 ( 0.00%) 4099 ( 0.00%) 292.79
halflif 442 ( 0.00%) 78838 ( 0.00%) 178.37
starcra 58 ( 0.00%) 7099 ( 0.00%) 122.40
everque 3897 ( 0.01%) 2416139 ( 0.01%) 620.00
unreal 47 ( 0.00%) 9043 ( 0.00%) 192.40
quake 372 ( 0.00%) 53165 ( 0.00%) 142.92
cuseeme 4 ( 0.00%) 625 ( 0.00%) 156.25
other 4076488 ( 10.15%) 1962243584 ( 8.88%) 481.36
icmp 1518715 ( 3.78%) 125957568 ( 0.57%) 82.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12526 ( 0.03%) 2001428 ( 0.01%) 159.78
ip6 2319608 ( 5.77%) 1122352733 ( 5.08%) 483.85
other 18482 ( 0.05%) 7386642 ( 0.03%) 399.67
frag 26420 ( 0.07%) 20134935 ( 0.09%) 762.11
ip6 324113 ( 0.81%) 220994809 ( 1.00%) 681.84
tcp6 151926 ( 0.38%) 127075980 ( 0.58%) 836.43
http(s) 21061 ( 0.05%) 25800982 ( 0.12%) 1225.06
http(c) 15758 ( 0.04%) 1549259 ( 0.01%) 98.32
smtp 678 ( 0.00%) 196635 ( 0.00%) 290.02
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 322 ( 0.00%) 75720 ( 0.00%) 235.16
bgp 93 ( 0.00%) 17038 ( 0.00%) 183.20
other 113988 ( 0.28%) 99434033 ( 0.45%) 872.32
udp6 122244 ( 0.30%) 66186455 ( 0.30%) 541.43
dns 58037 ( 0.14%) 17015314 ( 0.08%) 293.18
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
other 64206 ( 0.16%) 49171028 ( 0.22%) 765.83
icmp6 13973 ( 0.03%) 2533474 ( 0.01%) 181.31
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 35858 ( 0.09%) 25183644 ( 0.11%) 702.32
tcpdump file: 201109301400.dump.gz (1004.61 MB)