Traffic Trace Info
DumpFile: 201110141400.dump
FileSize: 4590.90MB
Id: 201110141400
StartTime: Fri Oct 14 14:00:00 2011
EndTime: Fri Oct 14 14:15:00 2011
TotalTime: 900.15 seconds
TotalCapSize: -528.01MB CapLen: 96 bytes
# of packets: 67036707 (31414.08MB)
AvgRate: 292.70Mbps stddev:30.38M
IP flow (unique src/dst pair) Information
# of flows: 12317205 (avg. 5.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 3.2% 1.4% 1.4% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 9694343
Top 10 bandwidth usage (bytes/total in %):
10.8% 8.7% 8.1% 6.3% 4.1% 3.9% 3.7% 3.2% 3.2% 3.2%
# of IPv6 addresses: 4347
Top 10 bandwidth usage (bytes/total in %):
43.5% 42.4% 19.9% 19.9% 13.2% 12.4% 6.8% 5.7% 4.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110141400.pktlen.png)
detailed numbers
[ 32- 63]: 30256925
[ 64- 127]: 14035975
[ 128- 255]: 1407365
[ 256- 511]: 892600
[ 512- 1023]: 701528
[ 1024- 2047]: 19742314
Protocol Breakdown
![[protocol breakdown chart]](201110141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 67036707 (100.00%) 32940054984 (100.00%) 491.37
ip 66529692 ( 99.24%) 32387641454 ( 98.32%) 486.81
tcp 43957610 ( 65.57%) 29177569436 ( 88.58%) 663.77
http(s) 18123175 ( 27.03%) 24238802350 ( 73.58%) 1337.45
http(c) 9302474 ( 13.88%) 2104751960 ( 6.39%) 226.26
squid 164324 ( 0.25%) 116363841 ( 0.35%) 708.14
smtp 74074 ( 0.11%) 21201520 ( 0.06%) 286.22
ftp 45720 ( 0.07%) 33158877 ( 0.10%) 725.26
pop3 15408 ( 0.02%) 3224013 ( 0.01%) 209.24
imap 1916 ( 0.00%) 213522 ( 0.00%) 111.44
telnet 852 ( 0.00%) 91976 ( 0.00%) 107.95
ssh 46154 ( 0.07%) 7173967 ( 0.02%) 155.44
dns 41131 ( 0.06%) 3587424 ( 0.01%) 87.22
bgp 770 ( 0.00%) 117119 ( 0.00%) 152.10
napster 1341 ( 0.00%) 85331 ( 0.00%) 63.63
realaud 96 ( 0.00%) 6044 ( 0.00%) 62.96
rtsp 26130 ( 0.04%) 28245681 ( 0.09%) 1080.97
icecast 4501 ( 0.01%) 912726 ( 0.00%) 202.78
hotline 399 ( 0.00%) 24956 ( 0.00%) 62.55
other 16109144 ( 24.03%) 2619608069 ( 7.95%) 162.62
udp 3680781 ( 5.49%) 1449513118 ( 4.40%) 393.81
dns 586973 ( 0.88%) 146591271 ( 0.45%) 249.74
realaud 20 ( 0.00%) 2192 ( 0.00%) 109.60
halflif 2279 ( 0.00%) 184482 ( 0.00%) 80.95
starcra 100 ( 0.00%) 8291 ( 0.00%) 82.91
everque 1081 ( 0.00%) 565051 ( 0.00%) 522.71
unreal 65 ( 0.00%) 12058 ( 0.00%) 185.51
quake 9 ( 0.00%) 1120 ( 0.00%) 124.44
cuseeme 2 ( 0.00%) 142 ( 0.00%) 71.00
other 3090075 ( 4.61%) 1302088409 ( 3.95%) 421.38
icmp 17100057 ( 25.51%) 1114350829 ( 3.38%) 65.17
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 22007 ( 0.03%) 6097770 ( 0.02%) 277.08
ip6 1748165 ( 2.61%) 634254317 ( 1.93%) 362.81
other 20887 ( 0.03%) 5836714 ( 0.02%) 279.44
frag 752 ( 0.00%) 669030 ( 0.00%) 889.67
ip6 507015 ( 0.76%) 552413530 ( 1.68%) 1089.54
tcp6 397172 ( 0.59%) 492470501 ( 1.50%) 1239.94
http(s) 209704 ( 0.31%) 303557938 ( 0.92%) 1447.55
http(c) 38376 ( 0.06%) 3401990 ( 0.01%) 88.65
smtp 99 ( 0.00%) 16902 ( 0.00%) 170.73
ftp 25 ( 0.00%) 2359 ( 0.00%) 94.36
imap 38 ( 0.00%) 10049 ( 0.00%) 264.45
dns 304 ( 0.00%) 78885 ( 0.00%) 259.49
bgp 93 ( 0.00%) 16503 ( 0.00%) 177.45
other 148533 ( 0.22%) 185385875 ( 0.56%) 1248.11
udp6 84954 ( 0.13%) 50746427 ( 0.15%) 597.34
dns 56551 ( 0.08%) 18611466 ( 0.06%) 329.11
other 28403 ( 0.04%) 32134961 ( 0.10%) 1131.39
icmp6 15847 ( 0.02%) 2790919 ( 0.01%) 176.12
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8929 ( 0.01%) 6390309 ( 0.02%) 715.68
tcpdump file: 201110141400.dump.gz (1621.20 MB)