Traffic Trace Info
DumpFile: 201110081400.dump
FileSize: 3465.39MB
Id: 201110081400
StartTime: Sat Oct 8 14:00:01 2011
EndTime: Sat Oct 8 14:15:01 2011
TotalTime: 899.99 seconds
TotalCapSize: -1365.14MB CapLen: 96 bytes
# of packets: 48134681 (20526.09MB)
AvgRate: 191.32Mbps stddev:44.02M
IP flow (unique src/dst pair) Information
# of flows: 1910972 (avg. 25.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.1% 1.8% 1.4% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1350399
Top 10 bandwidth usage (bytes/total in %):
22.4% 8.5% 6.1% 5.3% 4.1% 3.5% 3.4% 3.3% 2.2% 2.2%
# of IPv6 addresses: 3455
Top 10 bandwidth usage (bytes/total in %):
47.0% 47.0% 31.6% 20.8% 5.7% 4.8% 4.8% 4.2% 4.2% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110081400.pktlen.png)
detailed numbers
[ 32- 63]: 18732409
[ 64- 127]: 14136276
[ 128- 255]: 1412476
[ 256- 511]: 710281
[ 512- 1023]: 742477
[ 1024- 2047]: 12400762
Protocol Breakdown
![[protocol breakdown chart]](201110081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48134681 (100.00%) 21523162600 (100.00%) 447.14
ip 47771775 ( 99.25%) 21151127533 ( 98.27%) 442.75
tcp 39868506 ( 82.83%) 18659717799 ( 86.70%) 468.03
http(s) 10961015 ( 22.77%) 14782228213 ( 68.68%) 1348.62
http(c) 4324920 ( 8.99%) 410447231 ( 1.91%) 94.90
squid 83675 ( 0.17%) 55928707 ( 0.26%) 668.40
smtp 135185 ( 0.28%) 75133310 ( 0.35%) 555.78
nntp 12 ( 0.00%) 732 ( 0.00%) 61.00
ftp 52076 ( 0.11%) 26112553 ( 0.12%) 501.43
pop3 1193 ( 0.00%) 106623 ( 0.00%) 89.37
imap 2204 ( 0.00%) 932333 ( 0.00%) 423.02
telnet 462 ( 0.00%) 65341 ( 0.00%) 141.43
ssh 1148058 ( 2.39%) 160129445 ( 0.74%) 139.48
dns 34841 ( 0.07%) 4445723 ( 0.02%) 127.60
bgp 894 ( 0.00%) 125911 ( 0.00%) 140.84
napster 2135 ( 0.00%) 134793 ( 0.00%) 63.13
realaud 217 ( 0.00%) 14128 ( 0.00%) 65.11
rtsp 6240 ( 0.01%) 7678554 ( 0.04%) 1230.54
icecast 2572 ( 0.01%) 213868 ( 0.00%) 83.15
hotline 234 ( 0.00%) 15167 ( 0.00%) 64.82
other 23112570 ( 48.02%) 3136004987 ( 14.57%) 135.68
udp 4243540 ( 8.82%) 1577760734 ( 7.33%) 371.80
dns 484878 ( 1.01%) 133671607 ( 0.62%) 275.68
realaud 33 ( 0.00%) 5756 ( 0.00%) 174.42
halflif 205 ( 0.00%) 17206 ( 0.00%) 83.93
starcra 94 ( 0.00%) 8751 ( 0.00%) 93.10
everque 991 ( 0.00%) 273333 ( 0.00%) 275.82
unreal 1089 ( 0.00%) 523910 ( 0.00%) 481.09
quake 229 ( 0.00%) 30564 ( 0.00%) 133.47
cuseeme 2 ( 0.00%) 183 ( 0.00%) 91.50
other 3755875 ( 7.80%) 1443204107 ( 6.71%) 384.25
icmp 1618188 ( 3.36%) 155911288 ( 0.72%) 96.35
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 45848 ( 0.10%) 30137828 ( 0.14%) 657.34
ip6 1982979 ( 4.12%) 725634994 ( 3.37%) 365.93
other 12529 ( 0.03%) 1945620 ( 0.01%) 155.29
frag 763 ( 0.00%) 666996 ( 0.00%) 874.18
ip6 362906 ( 0.75%) 372035067 ( 1.73%) 1025.16
tcp6 289590 ( 0.60%) 347585461 ( 1.61%) 1200.27
http(s) 6692 ( 0.01%) 8125137 ( 0.04%) 1214.16
http(c) 23317 ( 0.05%) 2161247 ( 0.01%) 92.69
smtp 1541 ( 0.00%) 168428 ( 0.00%) 109.30
ftp 1410 ( 0.00%) 1067858 ( 0.00%) 757.35
dns 355 ( 0.00%) 82955 ( 0.00%) 233.68
bgp 94 ( 0.00%) 14786 ( 0.00%) 157.30
other 256181 ( 0.53%) 335965050 ( 1.56%) 1311.44
udp6 50201 ( 0.10%) 14442771 ( 0.07%) 287.70
dns 40079 ( 0.08%) 11772588 ( 0.05%) 293.73
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 2 ( 0.00%) 197 ( 0.00%) 98.50
cuseeme 2 ( 0.00%) 209 ( 0.00%) 104.50
other 10117 ( 0.02%) 2669672 ( 0.01%) 263.88
icmp6 12288 ( 0.03%) 2351007 ( 0.01%) 191.33
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10712 ( 0.02%) 7640200 ( 0.04%) 713.24
tcpdump file: 201110081400.dump.gz (1280.94 MB)