Traffic Trace Info
DumpFile: 201110051400.dump
FileSize: 4025.08MB
Id: 201110051400
StartTime: Wed Oct 5 14:00:00 2011
EndTime: Wed Oct 5 14:15:00 2011
TotalTime: 900.18 seconds
TotalCapSize: -937.47MB CapLen: 96 bytes
# of packets: 56789225 (32779.78MB)
AvgRate: 305.50Mbps stddev:40.10M
IP flow (unique src/dst pair) Information
# of flows: 2148331 (avg. 26.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.4% 2.2% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1491624
Top 10 bandwidth usage (bytes/total in %):
15.9% 15.8% 6.2% 5.7% 5.2% 3.4% 3.3% 3.2% 2.9% 2.7%
# of IPv6 addresses: 4340
Top 10 bandwidth usage (bytes/total in %):
61.2% 60.9% 23.1% 23.1% 3.2% 2.4% 1.5% 1.5% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110051400.pktlen.png)
detailed numbers
[ 32- 63]: 17858914
[ 64- 127]: 13084167
[ 128- 255]: 1991337
[ 256- 511]: 959025
[ 512- 1023]: 2580832
[ 1024- 2047]: 20314950
Protocol Breakdown
![[protocol breakdown chart]](201110051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56789225 (100.00%) 34372089745 (100.00%) 605.26
ip 56255342 ( 99.06%) 33796007231 ( 98.32%) 600.76
tcp 47530353 ( 83.70%) 30694108194 ( 89.30%) 645.78
http(s) 17553655 ( 30.91%) 20538146827 ( 59.75%) 1170.02
http(c) 11992221 ( 21.12%) 5228779552 ( 15.21%) 436.01
squid 185676 ( 0.33%) 104487007 ( 0.30%) 562.74
smtp 87553 ( 0.15%) 39827619 ( 0.12%) 454.90
nntp 17 ( 0.00%) 1112 ( 0.00%) 65.41
ftp 69715 ( 0.12%) 51384114 ( 0.15%) 737.06
pop3 8068 ( 0.01%) 5121569 ( 0.01%) 634.80
imap 1878 ( 0.00%) 600317 ( 0.00%) 319.66
telnet 831 ( 0.00%) 91348 ( 0.00%) 109.93
ssh 401808 ( 0.71%) 165807131 ( 0.48%) 412.65
dns 44234 ( 0.08%) 3734356 ( 0.01%) 84.42
bgp 629 ( 0.00%) 108528 ( 0.00%) 172.54
napster 481 ( 0.00%) 31247 ( 0.00%) 64.96
realaud 165 ( 0.00%) 15136 ( 0.00%) 91.73
rtsp 34492 ( 0.06%) 35167411 ( 0.10%) 1019.58
icecast 4389 ( 0.01%) 844524 ( 0.00%) 192.42
hotline 119 ( 0.00%) 7762 ( 0.00%) 65.23
other 17144419 ( 30.19%) 4519952008 ( 13.15%) 263.64
udp 4984742 ( 8.78%) 2091040833 ( 6.08%) 419.49
dns 580354 ( 1.02%) 127122977 ( 0.37%) 219.04
realaud 9 ( 0.00%) 1577 ( 0.00%) 175.22
halflif 17 ( 0.00%) 1486 ( 0.00%) 87.41
starcra 127 ( 0.00%) 22622 ( 0.00%) 178.13
everque 620 ( 0.00%) 109793 ( 0.00%) 177.09
unreal 157 ( 0.00%) 29589 ( 0.00%) 188.46
quake 275 ( 0.00%) 39552 ( 0.00%) 143.83
cuseeme 7 ( 0.00%) 959 ( 0.00%) 137.00
other 4378764 ( 7.71%) 1962192069 ( 5.71%) 448.12
icmp 1693170 ( 2.98%) 161180009 ( 0.47%) 95.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 22834 ( 0.04%) 6953516 ( 0.02%) 304.52
ip6 2011309 ( 3.54%) 840721342 ( 2.45%) 418.00
other 12749 ( 0.02%) 1984067 ( 0.01%) 155.63
frag 71185 ( 0.13%) 54327788 ( 0.16%) 763.19
ip6 533883 ( 0.94%) 576082514 ( 1.68%) 1079.04
tcp6 434646 ( 0.77%) 542351161 ( 1.58%) 1247.80
http(s) 255711 ( 0.45%) 379044613 ( 1.10%) 1482.32
http(c) 64512 ( 0.11%) 5204295 ( 0.02%) 80.67
squid 188 ( 0.00%) 124443 ( 0.00%) 661.93
smtp 316 ( 0.00%) 126857 ( 0.00%) 401.45
ftp 29 ( 0.00%) 2614 ( 0.00%) 90.14
dns 431 ( 0.00%) 94854 ( 0.00%) 220.08
bgp 93 ( 0.00%) 15139 ( 0.00%) 162.78
other 113366 ( 0.20%) 157738346 ( 0.46%) 1391.41
udp6 76586 ( 0.13%) 25939123 ( 0.08%) 338.69
dns 66323 ( 0.12%) 20904296 ( 0.06%) 315.19
halflif 2 ( 0.00%) 212 ( 0.00%) 106.00
quake 2 ( 0.00%) 214 ( 0.00%) 107.00
other 10259 ( 0.02%) 5034401 ( 0.01%) 490.73
icmp6 15589 ( 0.03%) 2777002 ( 0.01%) 178.14
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6948 ( 0.01%) 4999736 ( 0.01%) 719.59
tcpdump file: 201110051400.dump.gz (1407.91 MB)