Traffic Trace Info
DumpFile: 201110161400.dump
FileSize: 3935.95MB
Id: 201110161400
StartTime: Sun Oct 16 14:00:00 2011
EndTime: Sun Oct 16 14:15:01 2011
TotalTime: 900.71 seconds
TotalCapSize: -1034.67MB CapLen: 96 bytes
# of packets: 57317414 (22117.82MB)
AvgRate: 205.97Mbps stddev:37.69M
IP flow (unique src/dst pair) Information
# of flows: 13120358 (avg. 4.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 4.4% 3.7% 1.8% 1.8% 1.6% 1.6% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 9988764
Top 10 bandwidth usage (bytes/total in %):
20.3% 5.3% 5.3% 5.0% 4.7% 4.5% 4.4% 4.0% 4.0% 3.9%
# of IPv6 addresses: 3468
Top 10 bandwidth usage (bytes/total in %):
83.7% 83.7% 6.5% 1.4% 1.4% 1.3% 1.2% 0.9% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110161400.pktlen.png)
detailed numbers
[ 32- 63]: 25930763
[ 64- 127]: 14666845
[ 128- 255]: 2273438
[ 256- 511]: 713234
[ 512- 1023]: 641998
[ 1024- 2047]: 13091136
Protocol Breakdown
![[protocol breakdown chart]](201110161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57317414 (100.00%) 23192214070 (100.00%) 404.63
ip 57162352 ( 99.73%) 23039937974 ( 99.34%) 403.06
tcp 33666830 ( 58.74%) 19344363635 ( 83.41%) 574.58
http(s) 11842637 ( 20.66%) 14606277360 ( 62.98%) 1233.36
http(c) 4411971 ( 7.70%) 2107169679 ( 9.09%) 477.60
squid 194597 ( 0.34%) 169826793 ( 0.73%) 872.71
smtp 72480 ( 0.13%) 35758492 ( 0.15%) 493.36
nntp 16 ( 0.00%) 978 ( 0.00%) 61.12
ftp 56822 ( 0.10%) 34075539 ( 0.15%) 599.69
pop3 1021 ( 0.00%) 326008 ( 0.00%) 319.30
imap 2719 ( 0.00%) 244778 ( 0.00%) 90.03
telnet 3262 ( 0.01%) 269658 ( 0.00%) 82.67
ssh 4075574 ( 7.11%) 537249880 ( 2.32%) 131.82
dns 33468 ( 0.06%) 3688246 ( 0.02%) 110.20
bgp 590 ( 0.00%) 89303 ( 0.00%) 151.36
napster 225 ( 0.00%) 14162 ( 0.00%) 62.94
realaud 972 ( 0.00%) 61538 ( 0.00%) 63.31
rtsp 6244 ( 0.01%) 7687065 ( 0.03%) 1231.11
icecast 1323 ( 0.00%) 701012 ( 0.00%) 529.87
hotline 95 ( 0.00%) 5924 ( 0.00%) 62.36
other 12962812 ( 22.62%) 1840917100 ( 7.94%) 142.02
udp 4729127 ( 8.25%) 1818030217 ( 7.84%) 384.43
dns 530872 ( 0.93%) 97379861 ( 0.42%) 183.43
realaud 7 ( 0.00%) 601 ( 0.00%) 85.86
halflif 193 ( 0.00%) 13652 ( 0.00%) 70.74
starcra 117 ( 0.00%) 10443 ( 0.00%) 89.26
everque 541 ( 0.00%) 89358 ( 0.00%) 165.17
unreal 8 ( 0.00%) 745 ( 0.00%) 93.12
quake 23 ( 0.00%) 2906 ( 0.00%) 126.35
cuseeme 3 ( 0.00%) 257 ( 0.00%) 85.67
other 4196982 ( 7.32%) 1720262272 ( 7.42%) 409.88
icmp 16770060 ( 29.26%) 1080100040 ( 4.66%) 64.41
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 615 ( 0.00%) 171226 ( 0.00%) 278.42
ip6 1973127 ( 3.44%) 792689428 ( 3.42%) 401.74
other 22409 ( 0.04%) 4564268 ( 0.02%) 203.68
frag 1448 ( 0.00%) 1518093 ( 0.01%) 1048.41
ip6 155062 ( 0.27%) 152276096 ( 0.66%) 982.03
tcp6 105434 ( 0.18%) 139825050 ( 0.60%) 1326.19
http(s) 10777 ( 0.02%) 10913828 ( 0.05%) 1012.70
http(c) 9254 ( 0.02%) 896370 ( 0.00%) 96.86
smtp 103 ( 0.00%) 24752 ( 0.00%) 240.31
ftp 25 ( 0.00%) 2359 ( 0.00%) 94.36
imap 5 ( 0.00%) 743 ( 0.00%) 148.60
dns 302 ( 0.00%) 66866 ( 0.00%) 221.41
bgp 92 ( 0.00%) 14107 ( 0.00%) 153.34
other 84876 ( 0.15%) 127906025 ( 0.55%) 1506.98
udp6 32389 ( 0.06%) 9203571 ( 0.04%) 284.16
dns 31362 ( 0.05%) 9064603 ( 0.04%) 289.03
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1024 ( 0.00%) 138648 ( 0.00%) 135.40
icmp6 16838 ( 0.03%) 2947897 ( 0.01%) 175.07
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 287 ( 0.00%) 284036 ( 0.00%) 989.67
tcpdump file: 201110161400.dump.gz (1417.69 MB)