Traffic Trace Info
DumpFile: 201110221400.dump
FileSize: 3864.98MB
Id: 201110221400
StartTime: Sat Oct 22 14:00:01 2011
EndTime: Sat Oct 22 14:15:00 2011
TotalTime: 899.38 seconds
TotalCapSize: -1089.09MB CapLen: 96 bytes
# of packets: 56233015 (17978.43MB)
AvgRate: 167.67Mbps stddev:49.92M
IP flow (unique src/dst pair) Information
# of flows: 11610935 (avg. 4.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.3% 2.5% 2.4% 2.3% 1.7% 1.7% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 8896291
Top 10 bandwidth usage (bytes/total in %):
18.9% 16.2% 7.5% 5.6% 4.9% 4.7% 4.0% 3.4% 3.4% 3.1%
# of IPv6 addresses: 3995
Top 10 bandwidth usage (bytes/total in %):
60.5% 40.2% 20.3% 18.9% 10.9% 9.0% 5.1% 4.4% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110221400.pktlen.png)
detailed numbers
[ 32- 63]: 29581734
[ 64- 127]: 13933873
[ 128- 255]: 1160730
[ 256- 511]: 595256
[ 512- 1023]: 681964
[ 1024- 2047]: 10279458
Protocol Breakdown
![[protocol breakdown chart]](201110221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56233015 (100.00%) 18851746423 (100.00%) 335.24
ip 55658623 ( 98.98%) 18577370560 ( 98.54%) 333.77
tcp 35206354 ( 62.61%) 15373537557 ( 81.55%) 436.67
http(s) 9654742 ( 17.17%) 12536153629 ( 66.50%) 1298.45
http(c) 5062558 ( 9.00%) 894741010 ( 4.75%) 176.74
squid 82997 ( 0.15%) 56257267 ( 0.30%) 677.82
smtp 73701 ( 0.13%) 10906264 ( 0.06%) 147.98
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 4565 ( 0.01%) 773316 ( 0.00%) 169.40
pop3 52929 ( 0.09%) 3853158 ( 0.02%) 72.80
imap 780 ( 0.00%) 143844 ( 0.00%) 184.42
telnet 2221 ( 0.00%) 228775 ( 0.00%) 103.01
ssh 456789 ( 0.81%) 67278606 ( 0.36%) 147.29
dns 43491 ( 0.08%) 5261331 ( 0.03%) 120.98
bgp 615 ( 0.00%) 98596 ( 0.00%) 160.32
napster 281 ( 0.00%) 17632 ( 0.00%) 62.75
realaud 1987 ( 0.00%) 125794 ( 0.00%) 63.31
rtsp 15 ( 0.00%) 12358 ( 0.00%) 823.87
icecast 13979 ( 0.02%) 1354013 ( 0.01%) 96.86
hotline 731 ( 0.00%) 45314 ( 0.00%) 61.99
other 19753880 ( 35.13%) 1796281064 ( 9.53%) 90.93
udp 3241292 ( 5.76%) 975574400 ( 5.17%) 300.98
dns 427854 ( 0.76%) 100014529 ( 0.53%) 233.76
realaud 18 ( 0.00%) 2452 ( 0.00%) 136.22
halflif 316 ( 0.00%) 31104 ( 0.00%) 98.43
starcra 81 ( 0.00%) 7520 ( 0.00%) 92.84
everque 394 ( 0.00%) 75847 ( 0.00%) 192.51
unreal 11 ( 0.00%) 1611 ( 0.00%) 146.45
quake 30 ( 0.00%) 8166 ( 0.00%) 272.20
cuseeme 5 ( 0.00%) 551 ( 0.00%) 110.20
other 2810777 ( 5.00%) 875174859 ( 4.64%) 311.36
icmp 15624608 ( 27.79%) 1031144035 ( 5.47%) 65.99
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1100 ( 0.00%) 161064 ( 0.00%) 146.42
ip6 1555856 ( 2.77%) 1190068798 ( 6.31%) 764.90
other 29229 ( 0.05%) 6865546 ( 0.04%) 234.89
frag 14807 ( 0.03%) 11657359 ( 0.06%) 787.29
ip6 574392 ( 1.02%) 274375863 ( 1.46%) 477.68
tcp6 423706 ( 0.75%) 205974610 ( 1.09%) 486.13
http(s) 12178 ( 0.02%) 12463921 ( 0.07%) 1023.48
http(c) 11587 ( 0.02%) 1127806 ( 0.01%) 97.33
smtp 409 ( 0.00%) 133300 ( 0.00%) 325.92
ftp 612 ( 0.00%) 562470 ( 0.00%) 919.07
dns 328 ( 0.00%) 70434 ( 0.00%) 214.74
bgp 83 ( 0.00%) 12278 ( 0.00%) 147.93
other 398509 ( 0.71%) 191604401 ( 1.02%) 480.80
udp6 115681 ( 0.21%) 51745755 ( 0.27%) 447.31
dns 46058 ( 0.08%) 13292527 ( 0.07%) 288.60
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 69621 ( 0.12%) 38453017 ( 0.20%) 552.32
icmp6 15069 ( 0.03%) 2715495 ( 0.01%) 180.20
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19820 ( 0.04%) 13924275 ( 0.07%) 702.54
tcpdump file: 201110221400.dump.gz (1399.23 MB)