Traffic Trace Info
DumpFile: 201110131400.dump
FileSize: 4514.18MB
Id: 201110131400
StartTime: Thu Oct 13 14:00:01 2011
EndTime: Thu Oct 13 14:15:01 2011
TotalTime: 899.60 seconds
TotalCapSize: -583.64MB CapLen: 96 bytes
# of packets: 65654275 (29988.60MB)
AvgRate: 279.59Mbps stddev:32.52M
IP flow (unique src/dst pair) Information
# of flows: 12512160 (avg. 5.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.9% 2.9% 2.5% 1.6% 1.6% 1.5% 1.5% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 9815851
Top 10 bandwidth usage (bytes/total in %):
15.7% 11.3% 6.4% 6.3% 6.2% 4.8% 3.5% 3.2% 3.1% 3.0%
# of IPv6 addresses: 4328
Top 10 bandwidth usage (bytes/total in %):
41.3% 41.3% 28.5% 28.5% 13.1% 12.9% 4.4% 4.3% 2.2% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110131400.pktlen.png)
detailed numbers
[ 32- 63]: 28354408
[ 64- 127]: 15341279
[ 128- 255]: 1775678
[ 256- 511]: 758010
[ 512- 1023]: 715251
[ 1024- 2047]: 18709649
Protocol Breakdown
![[protocol breakdown chart]](201110131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 65654275 (100.00%) 31445329874 (100.00%) 478.95
ip 65215360 ( 99.33%) 31029972385 ( 98.68%) 475.81
tcp 41342993 ( 62.97%) 26820056335 ( 85.29%) 648.72
http(s) 16703970 ( 25.44%) 22835571602 ( 72.62%) 1367.07
http(c) 9048338 ( 13.78%) 1164742783 ( 3.70%) 128.72
squid 125356 ( 0.19%) 93427493 ( 0.30%) 745.30
smtp 96669 ( 0.15%) 32938818 ( 0.10%) 340.74
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 58245 ( 0.09%) 36091628 ( 0.11%) 619.65
pop3 4160 ( 0.01%) 2696435 ( 0.01%) 648.18
imap 2180 ( 0.00%) 378089 ( 0.00%) 173.44
telnet 876 ( 0.00%) 94032 ( 0.00%) 107.34
ssh 208225 ( 0.32%) 36395115 ( 0.12%) 174.79
dns 41587 ( 0.06%) 3693304 ( 0.01%) 88.81
bgp 653 ( 0.00%) 148558 ( 0.00%) 227.50
napster 346 ( 0.00%) 21758 ( 0.00%) 62.88
realaud 724 ( 0.00%) 47087 ( 0.00%) 65.04
rtsp 71271 ( 0.11%) 71638978 ( 0.23%) 1005.16
icecast 1470 ( 0.00%) 593076 ( 0.00%) 403.45
hotline 63 ( 0.00%) 3982 ( 0.00%) 63.21
other 14978856 ( 22.81%) 2541573321 ( 8.08%) 169.68
udp 4978220 ( 7.58%) 2428839824 ( 7.72%) 487.89
dns 616630 ( 0.94%) 153644123 ( 0.49%) 249.17
realaud 233 ( 0.00%) 17671 ( 0.00%) 75.84
halflif 74 ( 0.00%) 11957 ( 0.00%) 161.58
starcra 46 ( 0.00%) 6837 ( 0.00%) 148.63
everque 640 ( 0.00%) 141319 ( 0.00%) 220.81
unreal 11 ( 0.00%) 1629 ( 0.00%) 148.09
quake 36 ( 0.00%) 3175 ( 0.00%) 88.19
cuseeme 4 ( 0.00%) 396 ( 0.00%) 99.00
other 4360314 ( 6.64%) 2274959400 ( 7.23%) 521.74
icmp 17174842 ( 26.16%) 1108684808 ( 3.53%) 64.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5196 ( 0.01%) 705032 ( 0.00%) 135.69
ip6 1698202 ( 2.59%) 669310022 ( 2.13%) 394.13
other 15722 ( 0.02%) 2357094 ( 0.01%) 149.92
frag 1532 ( 0.00%) 1241573 ( 0.00%) 810.43
ip6 438915 ( 0.67%) 415357489 ( 1.32%) 946.33
tcp6 323947 ( 0.49%) 371597247 ( 1.18%) 1147.09
http(s) 96917 ( 0.15%) 137235760 ( 0.44%) 1416.01
http(c) 55336 ( 0.08%) 4472732 ( 0.01%) 80.83
smtp 2743 ( 0.00%) 2859617 ( 0.01%) 1042.51
dns 427 ( 0.00%) 95191 ( 0.00%) 222.93
bgp 89 ( 0.00%) 13744 ( 0.00%) 154.43
other 168435 ( 0.26%) 226920203 ( 0.72%) 1347.23
udp6 69158 ( 0.11%) 20749221 ( 0.07%) 300.03
dns 59145 ( 0.09%) 19723218 ( 0.06%) 333.47
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 10012 ( 0.02%) 1025904 ( 0.00%) 102.47
icmp6 17512 ( 0.03%) 3000552 ( 0.01%) 171.34
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28186 ( 0.04%) 19995213 ( 0.06%) 709.40
tcpdump file: 201110131400.dump.gz (1587.66 MB)