Traffic Trace Info
DumpFile: 201110021400.dump
FileSize: 3720.72MB
Id: 201110021400
StartTime: Sun Oct 2 14:00:01 2011
EndTime: Sun Oct 2 14:15:01 2011
TotalTime: 900.02 seconds
TotalCapSize: -1164.45MB CapLen: 96 bytes
# of packets: 51717438 (31890.38MB)
AvgRate: 297.24Mbps stddev:47.82M
IP flow (unique src/dst pair) Information
# of flows: 2068452 (avg. 25.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 2.0% 1.9% 1.5% 1.4% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1518949
Top 10 bandwidth usage (bytes/total in %):
15.3% 14.7% 12.2% 9.0% 3.8% 3.8% 3.4% 3.0% 2.8% 2.4%
# of IPv6 addresses: 3248
Top 10 bandwidth usage (bytes/total in %):
81.6% 59.1% 23.3% 14.1% 5.2% 4.5% 4.3% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110021400.pktlen.png)
detailed numbers
[ 32- 63]: 15947826
[ 64- 127]: 12329223
[ 128- 255]: 1430770
[ 256- 511]: 645109
[ 512- 1023]: 868854
[ 1024- 2047]: 20495656
Protocol Breakdown
![[protocol breakdown chart]](201110021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51717438 (100.00%) 33439481930 (100.00%) 646.58
ip 51204868 ( 99.01%) 32834241744 ( 98.19%) 641.23
tcp 43064553 ( 83.27%) 30122218912 ( 90.08%) 699.47
http(s) 14931863 ( 28.87%) 20242720509 ( 60.54%) 1355.67
http(c) 5485105 ( 10.61%) 1246092695 ( 3.73%) 227.18
squid 133183 ( 0.26%) 85656128 ( 0.26%) 643.15
smtp 63268 ( 0.12%) 13133442 ( 0.04%) 207.58
ftp 52475 ( 0.10%) 17097100 ( 0.05%) 325.81
pop3 1188 ( 0.00%) 101512 ( 0.00%) 85.45
imap 364 ( 0.00%) 42663 ( 0.00%) 117.21
telnet 553 ( 0.00%) 74031 ( 0.00%) 133.87
ssh 99895 ( 0.19%) 16583277 ( 0.05%) 166.01
dns 37269 ( 0.07%) 4560802 ( 0.01%) 122.38
bgp 630 ( 0.00%) 101521 ( 0.00%) 161.14
napster 1362 ( 0.00%) 85586 ( 0.00%) 62.84
realaud 225 ( 0.00%) 15993 ( 0.00%) 71.08
rtsp 14188 ( 0.03%) 11935527 ( 0.04%) 841.24
icecast 3224 ( 0.01%) 323977 ( 0.00%) 100.49
hotline 244 ( 0.00%) 16982 ( 0.00%) 69.60
other 22239517 ( 43.00%) 8483677167 ( 25.37%) 381.47
udp 4281601 ( 8.28%) 1730094917 ( 5.17%) 404.08
dns 383217 ( 0.74%) 89142582 ( 0.27%) 232.62
realaud 24 ( 0.00%) 3206 ( 0.00%) 133.58
halflif 520 ( 0.00%) 102671 ( 0.00%) 197.44
starcra 75 ( 0.00%) 11274 ( 0.00%) 150.32
everque 588 ( 0.00%) 116497 ( 0.00%) 198.12
unreal 38 ( 0.00%) 4018 ( 0.00%) 105.74
quake 341 ( 0.00%) 49046 ( 0.00%) 143.83
cuseeme 4 ( 0.00%) 354 ( 0.00%) 88.50
other 3896533 ( 7.53%) 1640627053 ( 4.91%) 421.05
icmp 1559936 ( 3.02%) 139233507 ( 0.42%) 89.26
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 370 ( 0.00%) 143212 ( 0.00%) 387.06
ip6 2283399 ( 4.42%) 838718160 ( 2.51%) 367.31
other 14825 ( 0.03%) 3813876 ( 0.01%) 257.26
frag 1026 ( 0.00%) 886223 ( 0.00%) 863.77
ip6 512570 ( 0.99%) 605240186 ( 1.81%) 1180.80
tcp6 418067 ( 0.81%) 561016165 ( 1.68%) 1341.93
http(s) 6756 ( 0.01%) 6638954 ( 0.02%) 982.68
http(c) 32806 ( 0.06%) 2771929 ( 0.01%) 84.49
smtp 166 ( 0.00%) 60203 ( 0.00%) 362.67
ftp 75 ( 0.00%) 6756 ( 0.00%) 90.08
dns 309 ( 0.00%) 64668 ( 0.00%) 209.28
bgp 87 ( 0.00%) 15767 ( 0.00%) 181.23
other 377868 ( 0.73%) 551457888 ( 1.65%) 1459.39
udp6 36053 ( 0.07%) 9424250 ( 0.03%) 261.40
dns 35323 ( 0.07%) 9326989 ( 0.03%) 264.05
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 729 ( 0.00%) 97157 ( 0.00%) 133.27
icmp6 12268 ( 0.02%) 2376111 ( 0.01%) 193.68
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 46068 ( 0.09%) 32408150 ( 0.10%) 703.49
tcpdump file: 201110021400.dump.gz (1278.27 MB)