Traffic Trace Info
DumpFile: 201110041400.dump
FileSize: 4729.36MB
Id: 201110041400
StartTime: Tue Oct 4 14:00:00 2011
EndTime: Tue Oct 4 14:15:01 2011
TotalTime: 900.20 seconds
TotalCapSize: -343.45MB CapLen: 96 bytes
# of packets: 64015582 (35600.18MB)
AvgRate: 331.76Mbps stddev:50.17M
IP flow (unique src/dst pair) Information
# of flows: 2191451 (avg. 29.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 8.8% 4.0% 3.4% 2.3% 1.9% 1.5% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1552097
Top 10 bandwidth usage (bytes/total in %):
16.9% 12.7% 11.1% 10.8% 9.1% 4.8% 4.5% 4.3% 3.7% 3.6%
# of IPv6 addresses: 4864
Top 10 bandwidth usage (bytes/total in %):
48.8% 48.8% 21.8% 18.4% 18.2% 18.1% 3.6% 3.6% 1.2% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110041400.pktlen.png)
detailed numbers
[ 32- 63]: 17119313
[ 64- 127]: 19057505
[ 128- 255]: 1884711
[ 256- 511]: 837030
[ 512- 1023]: 3587625
[ 1024- 2047]: 21529398
Protocol Breakdown
![[protocol breakdown chart]](201110041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64015582 (100.00%) 37329490234 (100.00%) 583.13
ip 56263378 ( 87.89%) 36377701742 ( 97.45%) 646.56
tcp 46853019 ( 73.19%) 32616712575 ( 87.38%) 696.15
http(s) 20019217 ( 31.27%) 22857803124 ( 61.23%) 1141.79
http(c) 13512802 ( 21.11%) 6997791000 ( 18.75%) 517.86
squid 135536 ( 0.21%) 58999667 ( 0.16%) 435.31
smtp 99821 ( 0.16%) 48838766 ( 0.13%) 489.26
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 48143 ( 0.08%) 15555410 ( 0.04%) 323.11
pop3 83159 ( 0.13%) 6506505 ( 0.02%) 78.24
imap 2778 ( 0.00%) 646073 ( 0.00%) 232.57
telnet 400 ( 0.00%) 61238 ( 0.00%) 153.09
ssh 25756 ( 0.04%) 3529421 ( 0.01%) 137.03
dns 41224 ( 0.06%) 3443330 ( 0.01%) 83.53
bgp 653 ( 0.00%) 135869 ( 0.00%) 208.07
napster 430 ( 0.00%) 27206 ( 0.00%) 63.27
realaud 58 ( 0.00%) 3628 ( 0.00%) 62.55
rtsp 21827 ( 0.03%) 12329630 ( 0.03%) 564.88
icecast 4046 ( 0.01%) 358604 ( 0.00%) 88.63
hotline 84 ( 0.00%) 5605 ( 0.00%) 66.73
other 12857084 ( 20.08%) 2610677439 ( 6.99%) 203.05
udp 5299914 ( 8.28%) 2297241064 ( 6.15%) 433.45
dns 549153 ( 0.86%) 119014798 ( 0.32%) 216.72
realaud 21 ( 0.00%) 2545 ( 0.00%) 121.19
halflif 33 ( 0.00%) 2710 ( 0.00%) 82.12
starcra 104 ( 0.00%) 15430 ( 0.00%) 148.37
everque 3834 ( 0.01%) 2929023 ( 0.01%) 763.96
unreal 415 ( 0.00%) 335341 ( 0.00%) 808.05
quake 393 ( 0.00%) 52157 ( 0.00%) 132.72
cuseeme 1 ( 0.00%) 140 ( 0.00%) 140.00
other 4745869 ( 7.41%) 2174830087 ( 5.83%) 458.26
icmp 1608967 ( 2.51%) 164092879 ( 0.44%) 101.99
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 47927 ( 0.07%) 10730746 ( 0.03%) 223.90
ip6 2440351 ( 3.81%) 1286913853 ( 3.45%) 527.35
other 13015 ( 0.02%) 1991355 ( 0.01%) 153.00
frag 358 ( 0.00%) 369377 ( 0.00%) 1031.78
ip6 7752204 ( 12.11%) 951788492 ( 2.55%) 122.78
tcp6 7606317 ( 11.88%) 891738901 ( 2.39%) 117.24
http(s) 42165 ( 0.07%) 50390291 ( 0.13%) 1195.07
http(c) 5409302 ( 8.45%) 471195198 ( 1.26%) 87.11
smtp 212 ( 0.00%) 96612 ( 0.00%) 455.72
ftp 63 ( 0.00%) 6423 ( 0.00%) 101.95
dns 378 ( 0.00%) 84043 ( 0.00%) 222.34
bgp 78 ( 0.00%) 14071 ( 0.00%) 180.40
other 2154119 ( 3.36%) 369952263 ( 0.99%) 171.74
udp6 73943 ( 0.12%) 20393181 ( 0.05%) 275.80
dns 64583 ( 0.10%) 19374143 ( 0.05%) 299.99
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 9358 ( 0.01%) 1018825 ( 0.00%) 108.87
icmp6 20269 ( 0.03%) 3317657 ( 0.01%) 163.68
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 51561 ( 0.08%) 36323243 ( 0.10%) 704.47
tcpdump file: 201110041400.dump.gz (1462.58 MB)