Traffic Trace Info
DumpFile: 201110211400.dump
FileSize: 4744.16MB
Id: 201110211400
StartTime: Fri Oct 21 14:00:00 2011
EndTime: Fri Oct 21 14:15:01 2011
TotalTime: 900.35 seconds
TotalCapSize: -396.91MB CapLen: 96 bytes
# of packets: 68488653 (30422.68MB)
AvgRate: 283.44Mbps stddev:32.46M
IP flow (unique src/dst pair) Information
# of flows: 11591287 (avg. 5.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.0% 1.5% 1.4% 1.3% 1.1% 1.1% 1.1% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 8854423
Top 10 bandwidth usage (bytes/total in %):
9.1% 7.9% 6.2% 5.2% 4.9% 4.2% 3.5% 3.0% 3.0% 2.9%
# of IPv6 addresses: 4260
Top 10 bandwidth usage (bytes/total in %):
57.1% 57.0% 18.8% 16.2% 2.4% 1.9% 1.9% 1.9% 1.8% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110211400.pktlen.png)
detailed numbers
[ 32- 63]: 28681194
[ 64- 127]: 16916080
[ 128- 255]: 1697300
[ 256- 511]: 811231
[ 512- 1023]: 1703940
[ 1024- 2047]: 18678908
Protocol Breakdown
![[protocol breakdown chart]](201110211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 68488653 (100.00%) 31900494644 (100.00%) 465.78
ip 68024890 ( 99.32%) 31749868113 ( 99.53%) 466.74
tcp 45502135 ( 66.44%) 27502123657 ( 86.21%) 604.41
http(s) 16389893 ( 23.93%) 20604404541 ( 64.59%) 1257.14
http(c) 11622239 ( 16.97%) 3394389869 ( 10.64%) 292.06
squid 103203 ( 0.15%) 80477899 ( 0.25%) 779.80
smtp 66378 ( 0.10%) 30714485 ( 0.10%) 462.72
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 51668 ( 0.08%) 33936952 ( 0.11%) 656.83
pop3 3712 ( 0.01%) 1168747 ( 0.00%) 314.86
imap 1499 ( 0.00%) 329762 ( 0.00%) 219.99
telnet 518 ( 0.00%) 105765 ( 0.00%) 204.18
ssh 711062 ( 1.04%) 97256585 ( 0.30%) 136.78
dns 44656 ( 0.07%) 5483183 ( 0.02%) 122.79
bgp 636 ( 0.00%) 124725 ( 0.00%) 196.11
napster 477 ( 0.00%) 30325 ( 0.00%) 63.57
realaud 141 ( 0.00%) 8924 ( 0.00%) 63.29
rtsp 30418 ( 0.04%) 24352548 ( 0.08%) 800.60
icecast 14776 ( 0.02%) 1244436 ( 0.00%) 84.22
hotline 111 ( 0.00%) 6900 ( 0.00%) 62.16
other 16460742 ( 24.03%) 3228087607 ( 10.12%) 196.11
udp 4815239 ( 7.03%) 1819190367 ( 5.70%) 377.80
dns 602802 ( 0.88%) 155728343 ( 0.49%) 258.34
realaud 34 ( 0.00%) 4832 ( 0.00%) 142.12
halflif 70 ( 0.00%) 7438 ( 0.00%) 106.26
starcra 135 ( 0.00%) 15838 ( 0.00%) 117.32
everque 8771 ( 0.01%) 8371578 ( 0.03%) 954.46
unreal 40 ( 0.00%) 6679 ( 0.00%) 166.97
quake 15 ( 0.00%) 1815 ( 0.00%) 121.00
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 4203037 ( 6.14%) 1654991695 ( 5.19%) 393.76
icmp 15879108 ( 23.19%) 1040343888 ( 3.26%) 65.52
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 19340 ( 0.03%) 3792104 ( 0.01%) 196.08
ip6 1792346 ( 2.62%) 1378361765 ( 4.32%) 769.03
other 16538 ( 0.02%) 6037172 ( 0.02%) 365.05
frag 2913 ( 0.00%) 2326824 ( 0.01%) 798.77
ip6 463763 ( 0.68%) 150626531 ( 0.47%) 324.79
tcp6 384808 ( 0.56%) 128361666 ( 0.40%) 333.57
http(s) 15298 ( 0.02%) 14346695 ( 0.04%) 937.82
http(c) 26936 ( 0.04%) 2381601 ( 0.01%) 88.42
smtp 206 ( 0.00%) 40785 ( 0.00%) 197.99
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 143 ( 0.00%) 43303 ( 0.00%) 302.82
imap 16 ( 0.00%) 2416 ( 0.00%) 151.00
dns 577 ( 0.00%) 125781 ( 0.00%) 217.99
bgp 87 ( 0.00%) 13317 ( 0.00%) 153.07
other 341519 ( 0.50%) 111405455 ( 0.35%) 326.21
udp6 62815 ( 0.09%) 18796069 ( 0.06%) 299.23
dns 61357 ( 0.09%) 18614382 ( 0.06%) 303.38
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1454 ( 0.00%) 181255 ( 0.00%) 124.66
icmp6 15188 ( 0.02%) 2675943 ( 0.01%) 176.19
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 837 ( 0.00%) 777225 ( 0.00%) 928.58
tcpdump file: 201110211400.dump.gz (1665.63 MB)