Traffic Trace Info
DumpFile: 201110061400.dump
FileSize: 3581.05MB
Id: 201110061400
StartTime: Thu Oct 6 14:00:01 2011
EndTime: Thu Oct 6 14:15:00 2011
TotalTime: 899.50 seconds
TotalCapSize: -1275.23MB CapLen: 96 bytes
# of packets: 49825793 (28456.17MB)
AvgRate: 265.33Mbps stddev:40.71M
IP flow (unique src/dst pair) Information
# of flows: 2213373 (avg. 22.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.9% 2.7% 1.9% 1.7% 1.5% 1.4% 1.3% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1548837
Top 10 bandwidth usage (bytes/total in %):
15.0% 10.3% 9.1% 5.3% 4.8% 3.0% 3.0% 2.8% 2.8% 2.6%
# of IPv6 addresses: 4676
Top 10 bandwidth usage (bytes/total in %):
45.3% 45.2% 34.2% 11.9% 11.8% 10.5% 3.6% 1.8% 1.6% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110061400.pktlen.png)
detailed numbers
[ 32- 63]: 14775402
[ 64- 127]: 13372624
[ 128- 255]: 1943112
[ 256- 511]: 726388
[ 512- 1023]: 730299
[ 1024- 2047]: 18277968
Protocol Breakdown
![[protocol breakdown chart]](201110061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49825793 (100.00%) 29838453165 (100.00%) 598.86
ip 49419844 ( 99.19%) 29455129633 ( 98.72%) 596.02
tcp 40792846 ( 81.87%) 26037597259 ( 87.26%) 638.29
http(s) 14384203 ( 28.87%) 18916589113 ( 63.40%) 1315.09
http(c) 7318153 ( 14.69%) 963870681 ( 3.23%) 131.71
squid 99170 ( 0.20%) 62054602 ( 0.21%) 625.74
smtp 67219 ( 0.13%) 22751402 ( 0.08%) 338.47
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 54704 ( 0.11%) 15454369 ( 0.05%) 282.51
pop3 8228 ( 0.02%) 5658594 ( 0.02%) 687.72
imap 2442 ( 0.00%) 1190242 ( 0.00%) 487.40
telnet 7101 ( 0.01%) 555001 ( 0.00%) 78.16
ssh 140394 ( 0.28%) 29573781 ( 0.10%) 210.65
dns 44897 ( 0.09%) 5371930 ( 0.02%) 119.65
bgp 637 ( 0.00%) 123987 ( 0.00%) 194.64
napster 6555 ( 0.01%) 412545 ( 0.00%) 62.94
realaud 219 ( 0.00%) 16687 ( 0.00%) 76.20
rtsp 14778 ( 0.03%) 14674409 ( 0.05%) 992.99
icecast 1466 ( 0.00%) 560197 ( 0.00%) 382.13
hotline 107 ( 0.00%) 7192 ( 0.00%) 67.21
other 18642567 ( 37.42%) 5998732153 ( 20.10%) 321.78
udp 5053262 ( 10.14%) 2443638926 ( 8.19%) 483.58
dns 584749 ( 1.17%) 129862202 ( 0.44%) 222.08
realaud 21 ( 0.00%) 2201 ( 0.00%) 104.81
halflif 21 ( 0.00%) 2622 ( 0.00%) 124.86
starcra 149 ( 0.00%) 13884 ( 0.00%) 93.18
everque 533 ( 0.00%) 84654 ( 0.00%) 158.83
unreal 45 ( 0.00%) 5801 ( 0.00%) 128.91
quake 395 ( 0.00%) 53274 ( 0.00%) 134.87
cuseeme 3 ( 0.00%) 377 ( 0.00%) 125.67
other 4467168 ( 8.97%) 2313552670 ( 7.75%) 517.90
icmp 1589476 ( 3.19%) 155182343 ( 0.52%) 97.63
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 12878 ( 0.03%) 1987396 ( 0.01%) 154.32
ip6 1958024 ( 3.93%) 814675736 ( 2.73%) 416.07
other 13172 ( 0.03%) 2028593 ( 0.01%) 154.01
frag 646 ( 0.00%) 618490 ( 0.00%) 957.41
ip6 405949 ( 0.81%) 383323532 ( 1.28%) 944.27
tcp6 305513 ( 0.61%) 345379677 ( 1.16%) 1130.49
http(s) 28223 ( 0.06%) 32317374 ( 0.11%) 1145.07
http(c) 70286 ( 0.14%) 5621324 ( 0.02%) 79.98
squid 11 ( 0.00%) 9435 ( 0.00%) 857.73
smtp 335 ( 0.00%) 146931 ( 0.00%) 438.60
ftp 86 ( 0.00%) 8405 ( 0.00%) 97.73
imap 10 ( 0.00%) 1486 ( 0.00%) 148.60
dns 409 ( 0.00%) 90099 ( 0.00%) 220.29
bgp 84 ( 0.00%) 13664 ( 0.00%) 162.67
other 206069 ( 0.41%) 307170959 ( 1.03%) 1490.62
udp6 79689 ( 0.16%) 31089697 ( 0.10%) 390.14
dns 61957 ( 0.12%) 19814972 ( 0.07%) 319.82
realaud 2 ( 0.00%) 203 ( 0.00%) 101.50
halflif 3 ( 0.00%) 320 ( 0.00%) 106.67
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
quake 1 ( 0.00%) 125 ( 0.00%) 125.00
other 17724 ( 0.04%) 11273866 ( 0.04%) 636.08
icmp6 14963 ( 0.03%) 2675438 ( 0.01%) 178.80
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5670 ( 0.01%) 4163228 ( 0.01%) 734.26
tcpdump file: 201110061400.dump.gz (1268.42 MB)