Traffic Trace Info
DumpFile: 201110101400.dump
FileSize: 2997.22MB
Id: 201110101400
StartTime: Mon Oct 10 14:00:01 2011
EndTime: Mon Oct 10 14:15:01 2011
TotalTime: 900.04 seconds
TotalCapSize: -1738.68MB CapLen: 96 bytes
# of packets: 41935211 (24184.84MB)
AvgRate: 225.42Mbps stddev:33.46M
IP flow (unique src/dst pair) Information
# of flows: 1844663 (avg. 22.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 2.0% 1.8% 1.7% 1.6% 1.6% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1340251
Top 10 bandwidth usage (bytes/total in %):
12.2% 9.4% 8.2% 6.7% 5.8% 4.1% 3.7% 3.5% 3.5% 2.4%
# of IPv6 addresses: 3696
Top 10 bandwidth usage (bytes/total in %):
30.0% 29.9% 15.3% 12.5% 12.5% 9.9% 6.1% 6.1% 5.9% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110101400.pktlen.png)
detailed numbers
[ 32- 63]: 11955910
[ 64- 127]: 11433620
[ 128- 255]: 1390942
[ 256- 511]: 856088
[ 512- 1023]: 876549
[ 1024- 2047]: 15422102
Protocol Breakdown
![[protocol breakdown chart]](201110101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41935211 (100.00%) 25359642183 (100.00%) 604.73
ip 41823569 ( 99.73%) 25292107802 ( 99.73%) 604.73
tcp 33435962 ( 79.73%) 21934509327 ( 86.49%) 656.02
http(s) 13675166 ( 32.61%) 18445894478 ( 72.74%) 1348.86
http(c) 6582110 ( 15.70%) 859146807 ( 3.39%) 130.53
squid 860925 ( 2.05%) 254119648 ( 1.00%) 295.17
smtp 85754 ( 0.20%) 26175822 ( 0.10%) 305.24
ftp 33206 ( 0.08%) 3807609 ( 0.02%) 114.67
pop3 3858 ( 0.01%) 417913 ( 0.00%) 108.32
imap 1223 ( 0.00%) 182623 ( 0.00%) 149.32
telnet 403 ( 0.00%) 61430 ( 0.00%) 152.43
ssh 608257 ( 1.45%) 90868858 ( 0.36%) 149.39
dns 40177 ( 0.10%) 3308517 ( 0.01%) 82.35
bgp 674 ( 0.00%) 166917 ( 0.00%) 247.65
napster 249 ( 0.00%) 16167 ( 0.00%) 64.93
realaud 57 ( 0.00%) 3572 ( 0.00%) 62.67
rtsp 63256 ( 0.15%) 65586407 ( 0.26%) 1036.84
icecast 1567 ( 0.00%) 253214 ( 0.00%) 161.59
hotline 96 ( 0.00%) 6420 ( 0.00%) 66.88
other 11478984 ( 27.37%) 2184492925 ( 8.61%) 190.30
udp 4948921 ( 11.80%) 2298899052 ( 9.07%) 464.53
dns 503214 ( 1.20%) 134880191 ( 0.53%) 268.04
realaud 7 ( 0.00%) 564 ( 0.00%) 80.57
halflif 3343 ( 0.01%) 411463 ( 0.00%) 123.08
starcra 77 ( 0.00%) 11929 ( 0.00%) 154.92
everque 227 ( 0.00%) 47836 ( 0.00%) 210.73
unreal 120 ( 0.00%) 22883 ( 0.00%) 190.69
quake 369 ( 0.00%) 49396 ( 0.00%) 133.86
cuseeme 5 ( 0.00%) 733 ( 0.00%) 146.60
other 4440609 ( 10.59%) 2163058888 ( 8.53%) 487.11
icmp 1449208 ( 3.46%) 135407724 ( 0.53%) 93.44
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 25426 ( 0.06%) 15456148 ( 0.06%) 607.89
ip6 1950927 ( 4.65%) 905834557 ( 3.57%) 464.31
other 12940 ( 0.03%) 1981724 ( 0.01%) 153.15
frag 10229 ( 0.02%) 11280160 ( 0.04%) 1102.76
ip6 111642 ( 0.27%) 67534381 ( 0.27%) 604.92
tcp6 54178 ( 0.13%) 52462492 ( 0.21%) 968.34
http(s) 18155 ( 0.04%) 22845278 ( 0.09%) 1258.35
http(c) 14477 ( 0.03%) 1403971 ( 0.01%) 96.98
smtp 228 ( 0.00%) 137432 ( 0.00%) 602.77
ftp 182 ( 0.00%) 18663 ( 0.00%) 102.54
dns 301 ( 0.00%) 67374 ( 0.00%) 223.83
bgp 78 ( 0.00%) 11399 ( 0.00%) 146.14
other 20757 ( 0.05%) 27978375 ( 0.11%) 1347.90
udp6 43114 ( 0.10%) 12234894 ( 0.05%) 283.78
dns 41683 ( 0.10%) 12026235 ( 0.05%) 288.52
everque 2 ( 0.00%) 210 ( 0.00%) 105.00
quake 1 ( 0.00%) 95 ( 0.00%) 95.00
other 1428 ( 0.00%) 208354 ( 0.00%) 145.91
icmp6 13924 ( 0.03%) 2526819 ( 0.01%) 181.47
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 310 ( 0.00%) 294448 ( 0.00%) 949.83
tcpdump file: 201110101400.dump.gz (1041.52 MB)