Traffic Trace Info
DumpFile: 201110011400.dump
FileSize: 3797.54MB
Id: 201110011400
StartTime: Sat Oct 1 14:00:01 2011
EndTime: Sat Oct 1 14:15:01 2011
TotalTime: 899.90 seconds
TotalCapSize: -1116.76MB CapLen: 96 bytes
# of packets: 53627785 (28188.36MB)
AvgRate: 262.79Mbps stddev:51.12M
IP flow (unique src/dst pair) Information
# of flows: 1944159 (avg. 27.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 5.1% 2.4% 1.7% 1.5% 1.3% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1396021
Top 10 bandwidth usage (bytes/total in %):
21.6% 12.4% 11.5% 5.3% 4.5% 4.3% 4.1% 3.7% 2.9% 2.6%
# of IPv6 addresses: 3576
Top 10 bandwidth usage (bytes/total in %):
44.7% 44.7% 23.5% 18.1% 12.7% 10.7% 9.6% 6.7% 3.0% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110011400.pktlen.png)
detailed numbers
[ 32- 63]: 19118416
[ 64- 127]: 12550128
[ 128- 255]: 1378322
[ 256- 511]: 804947
[ 512- 1023]: 2771640
[ 1024- 2047]: 17004332
Protocol Breakdown
![[protocol breakdown chart]](201110011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53627785 (100.00%) 29557635457 (100.00%) 551.16
ip 53291439 ( 99.37%) 29244255006 ( 98.94%) 548.76
tcp 45404824 ( 84.67%) 26541040447 ( 89.79%) 584.54
http(s) 14501782 ( 27.04%) 16011371248 ( 54.17%) 1104.10
http(c) 10104365 ( 18.84%) 5370950506 ( 18.17%) 531.55
squid 110492 ( 0.21%) 74545853 ( 0.25%) 674.67
smtp 52340 ( 0.10%) 8558318 ( 0.03%) 163.51
ftp 20595 ( 0.04%) 1842901 ( 0.01%) 89.48
pop3 1579 ( 0.00%) 138736 ( 0.00%) 87.86
imap 2424 ( 0.00%) 940154 ( 0.00%) 387.85
telnet 611 ( 0.00%) 75249 ( 0.00%) 123.16
ssh 125932 ( 0.23%) 17141191 ( 0.06%) 136.11
dns 37650 ( 0.07%) 2980527 ( 0.01%) 79.16
bgp 621 ( 0.00%) 97192 ( 0.00%) 156.51
napster 9147 ( 0.02%) 573258 ( 0.00%) 62.67
realaud 147 ( 0.00%) 9370 ( 0.00%) 63.74
rtsp 20387 ( 0.04%) 20312328 ( 0.07%) 996.34
icecast 4320 ( 0.01%) 884108 ( 0.00%) 204.65
hotline 154 ( 0.00%) 9724 ( 0.00%) 63.14
other 20412277 ( 38.06%) 5030609430 ( 17.02%) 246.45
udp 4377368 ( 8.16%) 1682891691 ( 5.69%) 384.45
dns 411887 ( 0.77%) 92544729 ( 0.31%) 224.68
realaud 19 ( 0.00%) 2211 ( 0.00%) 116.37
halflif 507 ( 0.00%) 94899 ( 0.00%) 187.18
starcra 111 ( 0.00%) 10676 ( 0.00%) 96.18
everque 563 ( 0.00%) 120718 ( 0.00%) 214.42
unreal 96 ( 0.00%) 19770 ( 0.00%) 205.94
quake 379 ( 0.00%) 51292 ( 0.00%) 135.34
cuseeme 3 ( 0.00%) 266 ( 0.00%) 88.67
other 3963525 ( 7.39%) 1589994502 ( 5.38%) 401.16
icmp 1490696 ( 2.78%) 143894682 ( 0.49%) 96.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 159 ( 0.00%) 27802 ( 0.00%) 174.86
ip6 2003870 ( 3.74%) 872370210 ( 2.95%) 435.34
other 14338 ( 0.03%) 4011014 ( 0.01%) 279.75
frag 1006 ( 0.00%) 905791 ( 0.00%) 900.39
ip6 336346 ( 0.63%) 313380451 ( 1.06%) 931.72
tcp6 219477 ( 0.41%) 261941360 ( 0.89%) 1193.48
http(s) 13032 ( 0.02%) 15271233 ( 0.05%) 1171.83
http(c) 15633 ( 0.03%) 1385670 ( 0.00%) 88.64
smtp 1232 ( 0.00%) 1513519 ( 0.01%) 1228.51
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 295 ( 0.00%) 59836 ( 0.00%) 202.83
bgp 91 ( 0.00%) 15960 ( 0.00%) 175.38
other 189168 ( 0.35%) 243692829 ( 0.82%) 1288.23
udp6 49112 ( 0.09%) 12330554 ( 0.04%) 251.07
dns 47402 ( 0.09%) 12081142 ( 0.04%) 254.87
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 1708 ( 0.00%) 249202 ( 0.00%) 145.90
icmp6 15824 ( 0.03%) 2614264 ( 0.01%) 165.21
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 51820 ( 0.10%) 36478899 ( 0.12%) 703.95
tcpdump file: 201110011400.dump.gz (1336.77 MB)