Traffic Trace Info
DumpFile: 201110121400.dump
FileSize: 3162.86MB
Id: 201110121400
StartTime: Wed Oct 12 14:00:00 2011
EndTime: Wed Oct 12 14:15:00 2011
TotalTime: 899.85 seconds
TotalCapSize: -1604.71MB CapLen: 96 bytes
# of packets: 44010384 (24708.73MB)
AvgRate: 230.36Mbps stddev:32.38M
IP flow (unique src/dst pair) Information
# of flows: 2319087 (avg. 18.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.1% 1.8% 1.4% 1.3% 1.1% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 1550664
Top 10 bandwidth usage (bytes/total in %):
7.7% 7.3% 5.6% 5.3% 5.1% 4.9% 3.9% 3.8% 3.8% 2.7%
# of IPv6 addresses: 4265
Top 10 bandwidth usage (bytes/total in %):
65.5% 65.5% 7.2% 6.4% 4.7% 4.7% 2.7% 2.7% 2.7% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110121400.pktlen.png)
detailed numbers
[ 32- 63]: 13327729
[ 64- 127]: 11316933
[ 128- 255]: 1923282
[ 256- 511]: 871186
[ 512- 1023]: 854875
[ 1024- 2047]: 15716379
Protocol Breakdown
![[protocol breakdown chart]](201110121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44010384 (100.00%) 25908980963 (100.00%) 588.70
ip 43710854 ( 99.32%) 25662170231 ( 99.05%) 587.09
tcp 35323204 ( 80.26%) 22462698238 ( 86.70%) 635.92
http(s) 14208502 ( 32.28%) 18909589025 ( 72.98%) 1330.86
http(c) 6828678 ( 15.52%) 843421958 ( 3.26%) 123.51
squid 110718 ( 0.25%) 88368443 ( 0.34%) 798.14
smtp 203672 ( 0.46%) 128089733 ( 0.49%) 628.90
nntp 21 ( 0.00%) 1336 ( 0.00%) 63.62
ftp 33155 ( 0.08%) 6835740 ( 0.03%) 206.18
pop3 4993 ( 0.01%) 3747855 ( 0.01%) 750.62
imap 3086 ( 0.01%) 890857 ( 0.00%) 288.68
telnet 887 ( 0.00%) 122802 ( 0.00%) 138.45
ssh 143506 ( 0.33%) 74064623 ( 0.29%) 516.11
dns 44299 ( 0.10%) 4060368 ( 0.02%) 91.66
bgp 624 ( 0.00%) 120091 ( 0.00%) 192.45
napster 228 ( 0.00%) 14713 ( 0.00%) 64.53
realaud 166 ( 0.00%) 23354 ( 0.00%) 140.69
rtsp 73868 ( 0.17%) 79090197 ( 0.31%) 1070.70
icecast 3774 ( 0.01%) 576956 ( 0.00%) 152.88
hotline 99 ( 0.00%) 6735 ( 0.00%) 68.03
other 13662927 ( 31.04%) 2323673392 ( 8.97%) 170.07
udp 4751842 ( 10.80%) 2005995070 ( 7.74%) 422.15
dns 631518 ( 1.43%) 160487545 ( 0.62%) 254.13
realaud 12 ( 0.00%) 2106 ( 0.00%) 175.50
halflif 2723 ( 0.01%) 221371 ( 0.00%) 81.30
starcra 99 ( 0.00%) 14904 ( 0.00%) 150.55
everque 29902 ( 0.07%) 8864563 ( 0.03%) 296.45
unreal 16 ( 0.00%) 2479 ( 0.00%) 154.94
quake 26 ( 0.00%) 3254 ( 0.00%) 125.15
cuseeme 2 ( 0.00%) 231 ( 0.00%) 115.50
other 4079906 ( 9.27%) 1835910637 ( 7.09%) 449.99
icmp 1506112 ( 3.42%) 140102563 ( 0.54%) 93.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6427 ( 0.01%) 1850002 ( 0.01%) 287.85
ip6 2107995 ( 4.79%) 1049257085 ( 4.05%) 497.75
other 15089 ( 0.03%) 2248003 ( 0.01%) 148.98
frag 20839 ( 0.05%) 15982892 ( 0.06%) 766.97
ip6 299530 ( 0.68%) 246810732 ( 0.95%) 823.99
tcp6 183833 ( 0.42%) 199650681 ( 0.77%) 1086.04
http(s) 18988 ( 0.04%) 22593988 ( 0.09%) 1189.91
http(c) 28058 ( 0.06%) 2496728 ( 0.01%) 88.98
smtp 271 ( 0.00%) 79352 ( 0.00%) 292.81
ftp 31 ( 0.00%) 3212 ( 0.00%) 103.61
dns 452 ( 0.00%) 89620 ( 0.00%) 198.27
bgp 88 ( 0.00%) 16574 ( 0.00%) 188.34
other 135945 ( 0.31%) 174371207 ( 0.67%) 1282.66
udp6 68988 ( 0.16%) 22299194 ( 0.09%) 323.23
dns 57731 ( 0.13%) 19632448 ( 0.08%) 340.07
halflif 2 ( 0.00%) 202 ( 0.00%) 101.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 11254 ( 0.03%) 2666436 ( 0.01%) 236.93
icmp6 15332 ( 0.03%) 2765862 ( 0.01%) 180.40
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31264 ( 0.07%) 22079621 ( 0.09%) 706.23
tcpdump file: 201110121400.dump.gz (1121.85 MB)