Traffic Trace Info
DumpFile: 201110201400.dump
FileSize: 4415.44MB
Id: 201110201400
StartTime: Thu Oct 20 14:00:00 2011
EndTime: Thu Oct 20 14:15:00 2011
TotalTime: 899.67 seconds
TotalCapSize: -659.05MB CapLen: 96 bytes
# of packets: 64124552 (29077.33MB)
AvgRate: 271.06Mbps stddev:32.84M
IP flow (unique src/dst pair) Information
# of flows: 11667116 (avg. 5.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.8% 2.9% 2.9% 2.7% 2.2% 1.9% 1.7% 1.5% 1.1%
IP address Information
# of IPv4 addresses: 8931153
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.6% 6.4% 5.5% 4.6% 4.5% 4.5% 3.9% 3.8% 3.3%
# of IPv6 addresses: 4533
Top 10 bandwidth usage (bytes/total in %):
69.9% 67.0% 8.7% 8.5% 5.4% 4.1% 4.1% 3.9% 3.9% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110201400.pktlen.png)
detailed numbers
[ 32- 63]: 27808148
[ 64- 127]: 14915348
[ 128- 255]: 1420203
[ 256- 511]: 893056
[ 512- 1023]: 1015726
[ 1024- 2047]: 18072071
Protocol Breakdown
![[protocol breakdown chart]](201110201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64124552 (100.00%) 30489794050 (100.00%) 475.48
ip 62890603 ( 98.08%) 29171796766 ( 95.68%) 463.85
tcp 41269665 ( 64.36%) 25429099922 ( 83.40%) 616.17
http(s) 14564356 ( 22.71%) 18906485470 ( 62.01%) 1298.13
http(c) 11449965 ( 17.86%) 3331145819 ( 10.93%) 290.93
squid 68333 ( 0.11%) 45959473 ( 0.15%) 672.58
smtp 74622 ( 0.12%) 28667237 ( 0.09%) 384.17
nntp 15 ( 0.00%) 970 ( 0.00%) 64.67
ftp 62820 ( 0.10%) 39508640 ( 0.13%) 628.92
pop3 3095 ( 0.00%) 583879 ( 0.00%) 188.65
imap 6502 ( 0.01%) 2631298 ( 0.01%) 404.69
telnet 1028 ( 0.00%) 143516 ( 0.00%) 139.61
ssh 433989 ( 0.68%) 62787322 ( 0.21%) 144.67
dns 43400 ( 0.07%) 3791774 ( 0.01%) 87.37
bgp 658 ( 0.00%) 141263 ( 0.00%) 214.69
napster 227 ( 0.00%) 15860 ( 0.00%) 69.87
realaud 664 ( 0.00%) 41021 ( 0.00%) 61.78
rtsp 51629 ( 0.08%) 46041482 ( 0.15%) 891.78
icecast 16817 ( 0.03%) 1345297 ( 0.00%) 80.00
hotline 83 ( 0.00%) 5166 ( 0.00%) 62.24
other 14491462 ( 22.60%) 2959804435 ( 9.71%) 204.24
udp 4167982 ( 6.50%) 1876357583 ( 6.15%) 450.18
dns 593592 ( 0.93%) 149309015 ( 0.49%) 251.53
realaud 28 ( 0.00%) 2764 ( 0.00%) 98.71
halflif 23 ( 0.00%) 4447 ( 0.00%) 193.35
starcra 125 ( 0.00%) 15766 ( 0.00%) 126.13
everque 5053 ( 0.01%) 4457157 ( 0.01%) 882.08
unreal 38 ( 0.00%) 3734 ( 0.00%) 98.26
quake 15 ( 0.00%) 2260 ( 0.00%) 150.67
cuseeme 13 ( 0.00%) 1426 ( 0.00%) 109.69
other 3568919 ( 5.57%) 1722489616 ( 5.65%) 482.64
icmp 16057877 ( 25.04%) 1049002953 ( 3.44%) 65.33
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2087 ( 0.00%) 603578 ( 0.00%) 289.21
ip6 1373591 ( 2.14%) 810937114 ( 2.66%) 590.38
other 19216 ( 0.03%) 5776346 ( 0.02%) 300.60
frag 718 ( 0.00%) 671826 ( 0.00%) 935.69
ip6 1233949 ( 1.92%) 1317997284 ( 4.32%) 1068.11
tcp6 911169 ( 1.42%) 1128827750 ( 3.70%) 1238.88
http(s) 69006 ( 0.11%) 96767527 ( 0.32%) 1402.31
http(c) 23090 ( 0.04%) 2032605 ( 0.01%) 88.03
smtp 193 ( 0.00%) 65350 ( 0.00%) 338.60
ftp 27 ( 0.00%) 2286 ( 0.00%) 84.67
imap 10 ( 0.00%) 1486 ( 0.00%) 148.60
dns 421 ( 0.00%) 77906 ( 0.00%) 185.05
bgp 91 ( 0.00%) 21443 ( 0.00%) 235.64
icecast 3 ( 0.00%) 254 ( 0.00%) 84.67
other 818328 ( 1.28%) 1029858893 ( 3.38%) 1258.49
udp6 68360 ( 0.11%) 18937828 ( 0.06%) 277.03
dns 59729 ( 0.09%) 18007505 ( 0.06%) 301.49
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 2 ( 0.00%) 208 ( 0.00%) 104.00
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 2 ( 0.00%) 204 ( 0.00%) 102.00
other 8625 ( 0.01%) 929702 ( 0.00%) 107.79
icmp6 16196 ( 0.03%) 2864284 ( 0.01%) 176.85
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 238110 ( 0.37%) 167351930 ( 0.55%) 702.83
tcpdump file: 201110201400.dump.gz (1543.37 MB)