Traffic Trace Info
DumpFile: 201110171400.dump
FileSize: 4828.01MB
Id: 201110171400
StartTime: Mon Oct 17 14:00:00 2011
EndTime: Mon Oct 17 14:15:01 2011
TotalTime: 900.60 seconds
TotalCapSize: -350.36MB CapLen: 96 bytes
# of packets: 70931276 (33020.23MB)
AvgRate: 307.55Mbps stddev:40.46M
IP flow (unique src/dst pair) Information
# of flows: 12422981 (avg. 5.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.2% 8.4% 2.0% 1.6% 1.6% 1.5% 1.4% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 9717872
Top 10 bandwidth usage (bytes/total in %):
26.0% 12.7% 8.8% 7.9% 7.7% 3.2% 2.9% 2.9% 2.7% 2.3%
# of IPv6 addresses: 4755
Top 10 bandwidth usage (bytes/total in %):
41.7% 9.3% 9.3% 7.4% 5.9% 5.8% 5.7% 5.7% 4.1% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110171400.pktlen.png)
detailed numbers
[ 32- 63]: 31683564
[ 64- 127]: 13299918
[ 128- 255]: 1461613
[ 256- 511]: 776891
[ 512- 1023]: 4180058
[ 1024- 2047]: 19529232
Protocol Breakdown
![[protocol breakdown chart]](201110171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 70931276 (100.00%) 34624220869 (100.00%) 488.14
ip 70621040 ( 99.56%) 34405402255 ( 99.37%) 487.18
tcp 44737001 ( 63.07%) 27838405261 ( 80.40%) 622.27
http(s) 15452786 ( 21.79%) 15096845248 ( 43.60%) 976.97
http(c) 13256039 ( 18.69%) 8905935899 ( 25.72%) 671.84
squid 309836 ( 0.44%) 144706786 ( 0.42%) 467.04
smtp 113804 ( 0.16%) 56141007 ( 0.16%) 493.31
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 52732 ( 0.07%) 35049581 ( 0.10%) 664.67
pop3 87258 ( 0.12%) 6341601 ( 0.02%) 72.68
imap 9630 ( 0.01%) 2227779 ( 0.01%) 231.34
telnet 951 ( 0.00%) 109639 ( 0.00%) 115.29
ssh 12106 ( 0.02%) 2568192 ( 0.01%) 212.14
dns 38288 ( 0.05%) 3426943 ( 0.01%) 89.50
bgp 758 ( 0.00%) 125516 ( 0.00%) 165.59
napster 349 ( 0.00%) 21714 ( 0.00%) 62.22
realaud 125 ( 0.00%) 7968 ( 0.00%) 63.74
rtsp 42123 ( 0.06%) 45404234 ( 0.13%) 1077.90
icecast 9746 ( 0.01%) 826338 ( 0.00%) 84.79
hotline 143 ( 0.00%) 9090 ( 0.00%) 63.57
other 15350324 ( 21.64%) 3538656163 ( 10.22%) 230.53
udp 5131967 ( 7.24%) 2719057613 ( 7.85%) 529.83
dns 598588 ( 0.84%) 149316236 ( 0.43%) 249.45
realaud 32 ( 0.00%) 2444 ( 0.00%) 76.38
halflif 797 ( 0.00%) 64948 ( 0.00%) 81.49
starcra 53 ( 0.00%) 6088 ( 0.00%) 114.87
everque 27997 ( 0.04%) 26515587 ( 0.08%) 947.09
unreal 7 ( 0.00%) 838 ( 0.00%) 119.71
quake 332 ( 0.00%) 44800 ( 0.00%) 134.94
cuseeme 3 ( 0.00%) 288 ( 0.00%) 96.00
other 4503854 ( 6.35%) 2543047236 ( 7.34%) 564.64
icmp 18143816 ( 25.58%) 1166040991 ( 3.37%) 64.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11183 ( 0.02%) 3099386 ( 0.01%) 277.15
ip6 2556615 ( 3.60%) 2672386749 ( 7.72%) 1045.28
sctp 1 ( 0.00%) 60 ( 0.00%) 60.00
other 40272 ( 0.06%) 6392925 ( 0.02%) 158.74
frag 1610 ( 0.00%) 1285824 ( 0.00%) 798.65
ip6 310236 ( 0.44%) 218818614 ( 0.63%) 705.33
tcp6 176233 ( 0.25%) 166483201 ( 0.48%) 944.68
http(s) 24746 ( 0.03%) 30202130 ( 0.09%) 1220.49
http(c) 23657 ( 0.03%) 2182083 ( 0.01%) 92.24
squid 2 ( 0.00%) 188 ( 0.00%) 94.00
smtp 53 ( 0.00%) 16786 ( 0.00%) 316.72
dns 310 ( 0.00%) 70667 ( 0.00%) 227.96
bgp 81 ( 0.00%) 11280 ( 0.00%) 139.26
icecast 413 ( 0.00%) 467645 ( 0.00%) 1132.31
other 126971 ( 0.18%) 133532422 ( 0.39%) 1051.68
udp6 86175 ( 0.12%) 29772064 ( 0.09%) 345.48
dns 59769 ( 0.08%) 18577435 ( 0.05%) 310.82
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 26403 ( 0.04%) 11194305 ( 0.03%) 423.98
icmp6 20354 ( 0.03%) 3180441 ( 0.01%) 156.26
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27362 ( 0.04%) 19367652 ( 0.06%) 707.83
tcpdump file: 201110171400.dump.gz (1623.85 MB)