Traffic Trace Info
DumpFile: 201110181400.dump
FileSize: 3936.73MB
Id: 201110181400
StartTime: Tue Oct 18 14:00:00 2011
EndTime: Tue Oct 18 14:15:00 2011
TotalTime: 899.52 seconds
TotalCapSize: -1039.96MB CapLen: 96 bytes
# of packets: 57713782 (26308.42MB)
AvgRate: 245.36Mbps stddev:41.87M
IP flow (unique src/dst pair) Information
# of flows: 11506099 (avg. 5.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 3.1% 2.6% 1.6% 1.4% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 8867804
Top 10 bandwidth usage (bytes/total in %):
6.6% 6.5% 5.8% 5.8% 4.5% 3.8% 3.5% 3.2% 3.2% 3.2%
# of IPv6 addresses: 4746
Top 10 bandwidth usage (bytes/total in %):
46.3% 45.2% 17.5% 17.4% 9.6% 8.9% 6.0% 6.0% 5.6% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110181400.pktlen.png)
detailed numbers
[ 32- 63]: 25567036
[ 64- 127]: 12576899
[ 128- 255]: 1567640
[ 256- 511]: 887863
[ 512- 1023]: 939651
[ 1024- 2047]: 16174693
Protocol Breakdown
![[protocol breakdown chart]](201110181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57713782 (100.00%) 27586377076 (100.00%) 477.99
ip 57165287 ( 99.05%) 27033219797 ( 97.99%) 472.90
tcp 35374985 ( 61.29%) 22917761566 ( 83.08%) 647.85
http(s) 13858532 ( 24.01%) 17880574910 ( 64.82%) 1290.22
http(c) 7815798 ( 13.54%) 2599107074 ( 9.42%) 332.55
squid 95582 ( 0.17%) 74490250 ( 0.27%) 779.33
smtp 120462 ( 0.21%) 72158720 ( 0.26%) 599.02
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 51213 ( 0.09%) 35792244 ( 0.13%) 698.89
pop3 3940 ( 0.01%) 1205095 ( 0.00%) 305.86
imap 2413 ( 0.00%) 412744 ( 0.00%) 171.05
telnet 437 ( 0.00%) 63852 ( 0.00%) 146.11
ssh 1342692 ( 2.33%) 214630605 ( 0.78%) 159.85
dns 37629 ( 0.07%) 3273036 ( 0.01%) 86.98
bgp 635 ( 0.00%) 122240 ( 0.00%) 192.50
napster 315 ( 0.00%) 20618 ( 0.00%) 65.45
realaud 370 ( 0.00%) 23148 ( 0.00%) 62.56
rtsp 45021 ( 0.08%) 47939672 ( 0.17%) 1064.83
icecast 20092 ( 0.03%) 1509208 ( 0.01%) 75.11
hotline 93 ( 0.00%) 6540 ( 0.00%) 70.32
other 11979755 ( 20.76%) 1986431236 ( 7.20%) 165.82
udp 4620308 ( 8.01%) 2223612986 ( 8.06%) 481.27
dns 619488 ( 1.07%) 157961305 ( 0.57%) 254.99
realaud 16 ( 0.00%) 1445 ( 0.00%) 90.31
halflif 26 ( 0.00%) 2819 ( 0.00%) 108.42
starcra 92 ( 0.00%) 9121 ( 0.00%) 99.14
everque 1250 ( 0.00%) 767157 ( 0.00%) 613.73
unreal 136 ( 0.00%) 10785 ( 0.00%) 79.30
quake 230 ( 0.00%) 31122 ( 0.00%) 135.31
cuseeme 8 ( 0.00%) 725 ( 0.00%) 90.62
other 3998657 ( 6.93%) 2064572865 ( 7.48%) 516.32
icmp 16005343 ( 27.73%) 1029080845 ( 3.73%) 64.30
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 34135 ( 0.06%) 9482730 ( 0.03%) 277.80
ip6 1112513 ( 1.93%) 849089005 ( 3.08%) 763.22
other 17818 ( 0.03%) 4173395 ( 0.02%) 234.22
frag 34283 ( 0.06%) 26253892 ( 0.10%) 765.80
ip6 548495 ( 0.95%) 553157279 ( 2.01%) 1008.50
tcp6 449589 ( 0.78%) 521483433 ( 1.89%) 1159.91
http(s) 46551 ( 0.08%) 61789719 ( 0.22%) 1327.36
http(c) 59343 ( 0.10%) 5088518 ( 0.02%) 85.75
smtp 225 ( 0.00%) 144079 ( 0.00%) 640.35
dns 313 ( 0.00%) 77452 ( 0.00%) 247.45
bgp 81 ( 0.00%) 11316 ( 0.00%) 139.70
other 343076 ( 0.59%) 454372349 ( 1.65%) 1324.41
udp6 67903 ( 0.12%) 19634586 ( 0.07%) 289.16
dns 64390 ( 0.11%) 18660494 ( 0.07%) 289.80
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 3508 ( 0.01%) 973545 ( 0.00%) 277.52
icmp6 18551 ( 0.03%) 3150344 ( 0.01%) 169.82
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12340 ( 0.02%) 8873660 ( 0.03%) 719.10
tcpdump file: 201110181400.dump.gz (1367.53 MB)