Traffic Trace Info
DumpFile: 201110151400.dump
FileSize: 3424.57MB
Id: 201110151400
StartTime: Sat Oct 15 14:00:00 2011
EndTime: Sat Oct 15 14:15:00 2011
TotalTime: 900.14 seconds
TotalCapSize: -1445.53MB CapLen: 96 bytes
# of packets: 50730575 (17045.03MB)
AvgRate: 158.87Mbps stddev:29.05M
IP flow (unique src/dst pair) Information
# of flows: 12781949 (avg. 3.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.6% 2.6% 2.1% 1.7% 1.5% 1.5% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 9917269
Top 10 bandwidth usage (bytes/total in %):
11.8% 5.8% 5.7% 5.5% 5.4% 5.2% 4.9% 3.6% 3.6% 2.9%
# of IPv6 addresses: 3562
Top 10 bandwidth usage (bytes/total in %):
81.7% 81.0% 3.2% 2.0% 1.6% 1.4% 1.2% 1.2% 1.1% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110151400.pktlen.png)
detailed numbers
[ 32- 63]: 26863177
[ 64- 127]: 11569614
[ 128- 255]: 1254226
[ 256- 511]: 600743
[ 512- 1023]: 537642
[ 1024- 2047]: 9905173
Protocol Breakdown
![[protocol breakdown chart]](201110151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50730575 (100.00%) 17873004523 (100.00%) 352.31
ip 50603062 ( 99.75%) 17764568756 ( 99.39%) 351.06
tcp 27458736 ( 54.13%) 14264340511 ( 79.81%) 519.48
http(s) 9102199 ( 17.94%) 11795810481 ( 66.00%) 1295.93
http(c) 3749909 ( 7.39%) 382672511 ( 2.14%) 102.05
squid 108789 ( 0.21%) 70096387 ( 0.39%) 644.33
smtp 60344 ( 0.12%) 13494232 ( 0.08%) 223.62
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 60938 ( 0.12%) 38576173 ( 0.22%) 633.04
pop3 5176 ( 0.01%) 533828 ( 0.00%) 103.14
imap 1340 ( 0.00%) 170841 ( 0.00%) 127.49
telnet 10189 ( 0.02%) 780025 ( 0.00%) 76.56
ssh 24917 ( 0.05%) 3337639 ( 0.02%) 133.95
dns 38626 ( 0.08%) 4884823 ( 0.03%) 126.46
bgp 595 ( 0.00%) 90929 ( 0.00%) 152.82
napster 294 ( 0.00%) 19078 ( 0.00%) 64.89
realaud 366 ( 0.00%) 24624 ( 0.00%) 67.28
rtsp 22110 ( 0.04%) 25383384 ( 0.14%) 1148.05
icecast 1569 ( 0.00%) 704539 ( 0.00%) 449.04
hotline 169 ( 0.00%) 11046 ( 0.00%) 65.36
other 14271205 ( 28.13%) 1927749911 ( 10.79%) 135.08
udp 4379178 ( 8.63%) 1437084442 ( 8.04%) 328.16
dns 763604 ( 1.51%) 127277188 ( 0.71%) 166.68
realaud 12 ( 0.00%) 1110 ( 0.00%) 92.50
halflif 317 ( 0.00%) 47024 ( 0.00%) 148.34
starcra 35 ( 0.00%) 2920 ( 0.00%) 83.43
everque 1205 ( 0.00%) 895806 ( 0.01%) 743.41
unreal 59 ( 0.00%) 10259 ( 0.00%) 173.88
quake 32 ( 0.00%) 3032 ( 0.00%) 94.75
cuseeme 8 ( 0.00%) 716 ( 0.00%) 89.50
other 3592762 ( 7.08%) 1307036433 ( 7.31%) 363.80
icmp 16687889 ( 32.90%) 1077247430 ( 6.03%) 64.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 704 ( 0.00%) 183792 ( 0.00%) 261.07
ip6 2058802 ( 4.06%) 981806802 ( 5.49%) 476.88
other 17568 ( 0.03%) 3886509 ( 0.02%) 221.23
frag 50993 ( 0.10%) 39749083 ( 0.22%) 779.50
ip6 127513 ( 0.25%) 108435767 ( 0.61%) 850.39
tcp6 73747 ( 0.15%) 94450501 ( 0.53%) 1280.74
http(s) 5394 ( 0.01%) 5736464 ( 0.03%) 1063.49
http(c) 7530 ( 0.01%) 790834 ( 0.00%) 105.02
smtp 91 ( 0.00%) 66024 ( 0.00%) 725.54
dns 151 ( 0.00%) 24305 ( 0.00%) 160.96
bgp 84 ( 0.00%) 12038 ( 0.00%) 143.31
other 60497 ( 0.12%) 87820836 ( 0.49%) 1451.66
udp6 37753 ( 0.07%) 10805261 ( 0.06%) 286.21
dns 36576 ( 0.07%) 10639721 ( 0.06%) 290.89
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1176 ( 0.00%) 165432 ( 0.00%) 140.67
icmp6 15509 ( 0.03%) 2771666 ( 0.02%) 178.71
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 391 ( 0.00%) 392915 ( 0.00%) 1004.90
tcpdump file: 201110151400.dump.gz (1245.23 MB)