Traffic Trace Info
DumpFile: 201110031400.dump
FileSize: 4219.89MB
Id: 201110031400
StartTime: Mon Oct 3 14:00:00 2011
EndTime: Mon Oct 3 14:15:00 2011
TotalTime: 899.76 seconds
TotalCapSize: -797.98MB CapLen: 96 bytes
# of packets: 60412948 (33726.65MB)
AvgRate: 314.44Mbps stddev:44.96M
IP flow (unique src/dst pair) Information
# of flows: 1992264 (avg. 30.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 7.5% 7.1% 1.4% 1.2% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 1399879
Top 10 bandwidth usage (bytes/total in %):
17.0% 15.7% 10.6% 9.8% 7.8% 7.4% 4.0% 2.7% 2.5% 2.4%
# of IPv6 addresses: 4774
Top 10 bandwidth usage (bytes/total in %):
39.4% 39.4% 34.3% 34.3% 5.6% 5.2% 5.2% 2.3% 2.3% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110031400.pktlen.png)
detailed numbers
[ 32- 63]: 20469867
[ 64- 127]: 13440738
[ 128- 255]: 1641382
[ 256- 511]: 990560
[ 512- 1023]: 3314019
[ 1024- 2047]: 20556382
Protocol Breakdown
![[protocol breakdown chart]](201110031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60412948 (100.00%) 35364956832 (100.00%) 585.39
ip 60044173 ( 99.39%) 35065284355 ( 99.15%) 583.99
tcp 46662918 ( 77.24%) 27933810465 ( 78.99%) 598.63
http(s) 16894544 ( 27.97%) 18428893919 ( 52.11%) 1090.82
http(c) 12485917 ( 20.67%) 6598493564 ( 18.66%) 528.47
squid 119111 ( 0.20%) 85978798 ( 0.24%) 721.84
smtp 86333 ( 0.14%) 38859417 ( 0.11%) 450.11
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 59160 ( 0.10%) 28866679 ( 0.08%) 487.94
pop3 9312 ( 0.02%) 1557170 ( 0.00%) 167.22
imap 1351 ( 0.00%) 169163 ( 0.00%) 125.21
telnet 9761 ( 0.02%) 756781 ( 0.00%) 77.53
ssh 115782 ( 0.19%) 13784688 ( 0.04%) 119.06
dns 44700 ( 0.07%) 3698003 ( 0.01%) 82.73
bgp 607 ( 0.00%) 96202 ( 0.00%) 158.49
napster 809 ( 0.00%) 50428 ( 0.00%) 62.33
realaud 160 ( 0.00%) 10042 ( 0.00%) 62.76
rtsp 13994 ( 0.02%) 13523180 ( 0.04%) 966.36
icecast 1722 ( 0.00%) 257926 ( 0.00%) 149.78
hotline 149 ( 0.00%) 10220 ( 0.00%) 68.59
other 16819503 ( 27.84%) 2718804091 ( 7.69%) 161.65
udp 9316204 ( 15.42%) 5940129931 ( 16.80%) 637.61
dns 594160 ( 0.98%) 129143656 ( 0.37%) 217.36
realaud 7 ( 0.00%) 985 ( 0.00%) 140.71
halflif 27 ( 0.00%) 2728 ( 0.00%) 101.04
starcra 91 ( 0.00%) 9949 ( 0.00%) 109.33
everque 497 ( 0.00%) 107125 ( 0.00%) 215.54
unreal 51 ( 0.00%) 9998 ( 0.00%) 196.04
quake 387 ( 0.00%) 52976 ( 0.00%) 136.89
cuseeme 3 ( 0.00%) 294 ( 0.00%) 98.00
other 8553716 ( 14.16%) 5800740736 ( 16.40%) 678.15
icmp 1637064 ( 2.71%) 156157777 ( 0.44%) 95.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 68145 ( 0.11%) 18803574 ( 0.05%) 275.93
ip6 2327791 ( 3.85%) 989411793 ( 2.80%) 425.04
other 31866 ( 0.05%) 26951545 ( 0.08%) 845.78
frag 353745 ( 0.59%) 270069190 ( 0.76%) 763.46
ip6 368775 ( 0.61%) 299672477 ( 0.85%) 812.62
tcp6 292555 ( 0.48%) 277879222 ( 0.79%) 949.84
http(s) 108912 ( 0.18%) 157792488 ( 0.45%) 1448.81
http(c) 99403 ( 0.16%) 8153912 ( 0.02%) 82.03
smtp 257 ( 0.00%) 153776 ( 0.00%) 598.35
ftp 122 ( 0.00%) 11102 ( 0.00%) 91.00
dns 354 ( 0.00%) 81021 ( 0.00%) 228.87
bgp 82 ( 0.00%) 12426 ( 0.00%) 151.54
other 83425 ( 0.14%) 111674497 ( 0.32%) 1338.62
udp6 61857 ( 0.10%) 18477607 ( 0.05%) 298.71
dns 60061 ( 0.10%) 18212459 ( 0.05%) 303.23
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 1794 ( 0.00%) 264923 ( 0.00%) 147.67
icmp6 13767 ( 0.02%) 2857015 ( 0.01%) 207.53
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 480 ( 0.00%) 442855 ( 0.00%) 922.61
tcpdump file: 201110031400.dump.gz (1473.88 MB)