Traffic Trace Info
DumpFile: 201110071400.dump
FileSize: 3405.52MB
Id: 201110071400
StartTime: Fri Oct 7 14:00:00 2011
EndTime: Fri Oct 7 14:15:00 2011
TotalTime: 899.54 seconds
TotalCapSize: -1418.90MB CapLen: 96 bytes
# of packets: 47735867 (23216.72MB)
AvgRate: 235.12Mbps stddev:34.33M
IP flow (unique src/dst pair) Information
# of flows: 2067547 (avg. 23.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 2.0% 1.9% 1.8% 1.7% 1.5% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1422660
Top 10 bandwidth usage (bytes/total in %):
8.8% 5.4% 4.4% 4.4% 4.1% 4.0% 3.8% 3.8% 3.7% 3.2%
# of IPv6 addresses: 3959
Top 10 bandwidth usage (bytes/total in %):
52.9% 52.8% 32.4% 32.4% 3.5% 1.3% 1.0% 1.0% 1.0% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110071400.pktlen.png)
detailed numbers
[ 32- 63]: 16914964
[ 64- 127]: 13014495
[ 128- 255]: 1662454
[ 256- 511]: 739735
[ 512- 1023]: 903711
[ 1024- 2047]: 14500508
Protocol Breakdown
![[protocol breakdown chart]](201110071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47735867 (100.00%) 24344498529 (100.00%) 509.98
ip 47393387 ( 99.28%) 24052474840 ( 98.80%) 507.51
tcp 38320611 ( 80.28%) 20166423648 ( 82.84%) 526.26
http(s) 11325514 ( 23.73%) 14782158586 ( 60.72%) 1305.21
http(c) 5411092 ( 11.34%) 649835418 ( 2.67%) 120.09
squid 87229 ( 0.18%) 59228811 ( 0.24%) 679.00
smtp 128533 ( 0.27%) 60894294 ( 0.25%) 473.76
ftp 42148 ( 0.09%) 14308466 ( 0.06%) 339.48
pop3 8203 ( 0.02%) 6303451 ( 0.03%) 768.43
imap 2426 ( 0.01%) 306735 ( 0.00%) 126.44
telnet 446 ( 0.00%) 56673 ( 0.00%) 127.07
ssh 89105 ( 0.19%) 17511026 ( 0.07%) 196.52
dns 37571 ( 0.08%) 4709237 ( 0.02%) 125.34
bgp 584 ( 0.00%) 109053 ( 0.00%) 186.73
napster 690 ( 0.00%) 45220 ( 0.00%) 65.54
realaud 206 ( 0.00%) 44788 ( 0.00%) 217.42
rtsp 62576 ( 0.13%) 69031007 ( 0.28%) 1103.15
icecast 11213 ( 0.02%) 1211964 ( 0.00%) 108.09
hotline 160 ( 0.00%) 10944 ( 0.00%) 68.40
other 21112914 ( 44.23%) 4500657915 ( 18.49%) 213.17
udp 5648843 ( 11.83%) 2801276245 ( 11.51%) 495.90
dns 500690 ( 1.05%) 109158374 ( 0.45%) 218.02
rip 1 ( 0.00%) 184 ( 0.00%) 184.00
realaud 21 ( 0.00%) 3720 ( 0.00%) 177.14
halflif 369 ( 0.00%) 39379 ( 0.00%) 106.72
starcra 132 ( 0.00%) 16412 ( 0.00%) 124.33
everque 407 ( 0.00%) 82544 ( 0.00%) 202.81
unreal 176 ( 0.00%) 24160 ( 0.00%) 137.27
quake 257 ( 0.00%) 35466 ( 0.00%) 138.00
cuseeme 9 ( 0.00%) 681 ( 0.00%) 75.67
other 5141824 ( 10.77%) 2691591732 ( 11.06%) 523.47
icmp 1481700 ( 3.10%) 158043729 ( 0.65%) 106.66
ipip 170 ( 0.00%) 17704 ( 0.00%) 104.14
ipsec 3169 ( 0.01%) 884950 ( 0.00%) 279.25
ip6 1925828 ( 4.03%) 923818753 ( 3.79%) 479.70
other 13066 ( 0.03%) 2009811 ( 0.01%) 153.82
frag 17275 ( 0.04%) 13169239 ( 0.05%) 762.33
ip6 342480 ( 0.72%) 292023689 ( 1.20%) 852.67
tcp6 265448 ( 0.56%) 270569479 ( 1.11%) 1019.29
http(s) 73837 ( 0.15%) 105369815 ( 0.43%) 1427.06
http(c) 84115 ( 0.18%) 6885267 ( 0.03%) 81.86
smtp 273 ( 0.00%) 131911 ( 0.00%) 483.19
ftp 96 ( 0.00%) 9310 ( 0.00%) 96.98
imap 5 ( 0.00%) 743 ( 0.00%) 148.60
dns 408 ( 0.00%) 91982 ( 0.00%) 225.45
bgp 88 ( 0.00%) 22519 ( 0.00%) 255.90
other 106626 ( 0.22%) 158057932 ( 0.65%) 1482.36
udp6 62512 ( 0.13%) 18430665 ( 0.08%) 294.83
dns 54319 ( 0.11%) 16832161 ( 0.07%) 309.88
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 8191 ( 0.02%) 1598291 ( 0.01%) 195.13
icmp6 13973 ( 0.03%) 2588488 ( 0.01%) 185.25
ip6 77 ( 0.00%) 10536 ( 0.00%) 136.83
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 441 ( 0.00%) 420577 ( 0.00%) 953.69
tcpdump file: 201110071400.dump.gz (1230.29 MB)