Traffic Trace Info
DumpFile: 201110191400.dump
FileSize: 3988.03MB
Id: 201110191400
StartTime: Wed Oct 19 14:00:00 2011
EndTime: Wed Oct 19 14:15:00 2011
TotalTime: 900.13 seconds
TotalCapSize: -1017.91MB CapLen: 96 bytes
# of packets: 59632615 (29212.28MB)
AvgRate: 272.24Mbps stddev:48.71M
IP flow (unique src/dst pair) Information
# of flows: 11451001 (avg. 5.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.4% 3.0% 1.7% 1.5% 1.5% 1.4% 1.4% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 8795635
Top 10 bandwidth usage (bytes/total in %):
10.4% 8.0% 4.7% 4.2% 3.8% 3.7% 3.7% 3.5% 3.2% 3.1%
# of IPv6 addresses: 4359
Top 10 bandwidth usage (bytes/total in %):
53.4% 53.4% 12.9% 10.9% 8.9% 8.9% 5.0% 3.1% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110191400.pktlen.png)
detailed numbers
[ 32- 63]: 25373640
[ 64- 127]: 11886566
[ 128- 255]: 1971615
[ 256- 511]: 729477
[ 512- 1023]: 1490316
[ 1024- 2047]: 18181001
Protocol Breakdown
![[protocol breakdown chart]](201110191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59632615 (100.00%) 30631296041 (100.00%) 513.67
ip 59110436 ( 99.12%) 30401934176 ( 99.25%) 514.32
tcp 34208011 ( 57.36%) 23577850848 ( 76.97%) 689.25
http(s) 14385883 ( 24.12%) 18212366378 ( 59.46%) 1265.99
http(c) 8402559 ( 14.09%) 2604423759 ( 8.50%) 309.96
squid 462135 ( 0.77%) 155446638 ( 0.51%) 336.37
smtp 135110 ( 0.23%) 76421666 ( 0.25%) 565.63
nntp 9 ( 0.00%) 562 ( 0.00%) 62.44
ftp 124874 ( 0.21%) 104391528 ( 0.34%) 835.97
pop3 12475 ( 0.02%) 10469443 ( 0.03%) 839.23
imap 2621 ( 0.00%) 669548 ( 0.00%) 255.46
telnet 845 ( 0.00%) 149523 ( 0.00%) 176.95
ssh 275723 ( 0.46%) 362361995 ( 1.18%) 1314.22
dns 41972 ( 0.07%) 3787097 ( 0.01%) 90.23
bgp 653 ( 0.00%) 141387 ( 0.00%) 216.52
napster 209 ( 0.00%) 14426 ( 0.00%) 69.02
realaud 450 ( 0.00%) 29007 ( 0.00%) 64.46
rtsp 40843 ( 0.07%) 45306607 ( 0.15%) 1109.29
icecast 13277 ( 0.02%) 1077787 ( 0.00%) 81.18
hotline 56 ( 0.00%) 3494 ( 0.00%) 62.39
other 10308315 ( 17.29%) 2000789883 ( 6.53%) 194.09
udp 7673500 ( 12.87%) 4721941387 ( 15.42%) 615.36
dns 632285 ( 1.06%) 166330739 ( 0.54%) 263.06
realaud 22 ( 0.00%) 1792 ( 0.00%) 81.45
halflif 21 ( 0.00%) 1768 ( 0.00%) 84.19
starcra 82 ( 0.00%) 11087 ( 0.00%) 135.21
everque 616 ( 0.00%) 107341 ( 0.00%) 174.25
unreal 15 ( 0.00%) 2133 ( 0.00%) 142.20
quake 18 ( 0.00%) 2638 ( 0.00%) 146.56
cuseeme 2 ( 0.00%) 222 ( 0.00%) 111.00
other 7028256 ( 11.79%) 4554119691 ( 14.87%) 647.97
icmp 15887804 ( 26.64%) 1020303160 ( 3.33%) 64.22
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 19441 ( 0.03%) 2996278 ( 0.01%) 154.12
ip6 1303548 ( 2.19%) 1074199051 ( 3.51%) 824.06
other 17947 ( 0.03%) 4624182 ( 0.02%) 257.66
frag 55248 ( 0.09%) 42036146 ( 0.14%) 760.86
ip6 522179 ( 0.88%) 229361865 ( 0.75%) 439.24
tcp6 432158 ( 0.72%) 204087255 ( 0.67%) 472.25
http(s) 18866 ( 0.03%) 21823671 ( 0.07%) 1156.77
http(c) 19498 ( 0.03%) 1808668 ( 0.01%) 92.76
smtp 920 ( 0.00%) 278472 ( 0.00%) 302.69
imap 26 ( 0.00%) 9920 ( 0.00%) 381.54
dns 343 ( 0.00%) 80620 ( 0.00%) 235.04
bgp 82 ( 0.00%) 12416 ( 0.00%) 151.41
other 392423 ( 0.66%) 180073488 ( 0.59%) 458.88
udp6 67222 ( 0.11%) 19360903 ( 0.06%) 288.01
dns 61682 ( 0.10%) 18152907 ( 0.06%) 294.30
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
starcra 1 ( 0.00%) 151 ( 0.00%) 151.00
everque 2 ( 0.00%) 225 ( 0.00%) 112.50
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 5535 ( 0.01%) 1207399 ( 0.00%) 218.14
icmp6 19161 ( 0.03%) 3312483 ( 0.01%) 172.88
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3524 ( 0.01%) 2585732 ( 0.01%) 733.75
tcpdump file: 201110191400.dump.gz (1371.36 MB)