Traffic Trace Info
DumpFile: 201110231400.dump
FileSize: 3391.31MB
Id: 201110231400
StartTime: Sun Oct 23 14:00:01 2011
EndTime: Sun Oct 23 14:15:01 2011
TotalTime: 899.94 seconds
TotalCapSize: -1470.67MB CapLen: 96 bytes
# of packets: 50196227 (13875.71MB)
AvgRate: 129.33Mbps stddev:34.38M
IP flow (unique src/dst pair) Information
# of flows: 11257853 (avg. 4.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.1% 2.0% 1.4% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 8733681
Top 10 bandwidth usage (bytes/total in %):
27.1% 10.8% 9.8% 6.4% 5.5% 5.0% 4.2% 3.3% 2.2% 2.1%
# of IPv6 addresses: 3769
Top 10 bandwidth usage (bytes/total in %):
50.9% 50.9% 16.3% 12.5% 12.2% 11.8% 4.4% 4.3% 3.8% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110231400.pktlen.png)
detailed numbers
[ 32- 63]: 28699346
[ 64- 127]: 11801007
[ 128- 255]: 1070528
[ 256- 511]: 463140
[ 512- 1023]: 486446
[ 1024- 2047]: 7675760
Protocol Breakdown
![[protocol breakdown chart]](201110231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50196227 (100.00%) 14549738025 (100.00%) 289.86
ip 49801507 ( 99.21%) 14284044200 ( 98.17%) 286.82
tcp 29514678 ( 58.80%) 11405876814 ( 78.39%) 386.45
http(s) 6912127 ( 13.77%) 9110122825 ( 62.61%) 1317.99
http(c) 3445456 ( 6.86%) 315415747 ( 2.17%) 91.55
squid 206887 ( 0.41%) 212961697 ( 1.46%) 1029.36
smtp 41542 ( 0.08%) 9665444 ( 0.07%) 232.67
ftp 1795 ( 0.00%) 132275 ( 0.00%) 73.69
pop3 2909 ( 0.01%) 229918 ( 0.00%) 79.04
imap 1031 ( 0.00%) 89122 ( 0.00%) 86.44
telnet 749 ( 0.00%) 117489 ( 0.00%) 156.86
ssh 112329 ( 0.22%) 15290551 ( 0.11%) 136.12
dns 37380 ( 0.07%) 2907286 ( 0.02%) 77.78
bgp 478 ( 0.00%) 96872 ( 0.00%) 202.66
napster 384 ( 0.00%) 24393 ( 0.00%) 63.52
realaud 166 ( 0.00%) 10885 ( 0.00%) 65.57
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 13547 ( 0.03%) 1337318 ( 0.01%) 98.72
hotline 204 ( 0.00%) 12758 ( 0.00%) 62.54
other 18737690 ( 37.33%) 1737461994 ( 11.94%) 92.73
udp 3126913 ( 6.23%) 1062949525 ( 7.31%) 339.94
dns 317704 ( 0.63%) 75818951 ( 0.52%) 238.65
realaud 8 ( 0.00%) 1558 ( 0.00%) 194.75
halflif 17 ( 0.00%) 1308 ( 0.00%) 76.94
starcra 82 ( 0.00%) 14561 ( 0.00%) 177.57
everque 208 ( 0.00%) 46375 ( 0.00%) 222.96
unreal 2 ( 0.00%) 181 ( 0.00%) 90.50
quake 18 ( 0.00%) 1485 ( 0.00%) 82.50
cuseeme 1 ( 0.00%) 445 ( 0.00%) 445.00
other 2807180 ( 5.59%) 986819815 ( 6.78%) 351.53
icmp 15644267 ( 31.17%) 1018431471 ( 7.00%) 65.10
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 99 ( 0.00%) 19394 ( 0.00%) 195.90
ip6 1496390 ( 2.98%) 791349286 ( 5.44%) 528.84
other 18975 ( 0.04%) 5398440 ( 0.04%) 284.50
frag 16484 ( 0.03%) 13027302 ( 0.09%) 790.30
ip6 394720 ( 0.79%) 265693825 ( 1.83%) 673.12
tcp6 242864 ( 0.48%) 171434448 ( 1.18%) 705.89
http(s) 4365 ( 0.01%) 3429344 ( 0.02%) 785.65
http(c) 13938 ( 0.03%) 1364035 ( 0.01%) 97.86
smtp 122 ( 0.00%) 38734 ( 0.00%) 317.49
ftp 48 ( 0.00%) 4318 ( 0.00%) 89.96
dns 306 ( 0.00%) 62221 ( 0.00%) 203.34
bgp 93 ( 0.00%) 14039 ( 0.00%) 150.96
other 223992 ( 0.45%) 166521757 ( 1.14%) 743.43
udp6 67460 ( 0.13%) 42894298 ( 0.29%) 635.85
dns 35749 ( 0.07%) 10113521 ( 0.07%) 282.90
quake 3 ( 0.00%) 319 ( 0.00%) 106.33
other 31708 ( 0.06%) 32780458 ( 0.23%) 1033.82
icmp6 15085 ( 0.03%) 2643082 ( 0.02%) 175.21
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 69198 ( 0.14%) 48706623 ( 0.33%) 703.87
tcpdump file: 201110231400.dump.gz (1238.29 MB)