Traffic Trace Info
DumpFile: 201110241400.dump
FileSize: 4539.73MB
Id: 201110241400
StartTime: Mon Oct 24 14:00:00 2011
EndTime: Mon Oct 24 14:15:00 2011
TotalTime: 899.94 seconds
TotalCapSize: -562.98MB CapLen: 96 bytes
# of packets: 65973153 (23730.62MB)
AvgRate: 221.17Mbps stddev:34.10M
IP flow (unique src/dst pair) Information
# of flows: 11422953 (avg. 5.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.9% 1.6% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 8767037
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.3% 4.5% 4.3% 3.8% 3.4% 3.3% 2.8% 2.7% 2.6%
# of IPv6 addresses: 4474
Top 10 bandwidth usage (bytes/total in %):
32.2% 30.3% 28.1% 28.1% 10.7% 10.5% 10.3% 6.2% 5.9% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110241400.pktlen.png)
detailed numbers
[ 32- 63]: 32132238
[ 64- 127]: 16466752
[ 128- 255]: 1482529
[ 256- 511]: 849550
[ 512- 1023]: 1021091
[ 1024- 2047]: 14020993
Protocol Breakdown
![[protocol breakdown chart]](201110241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 65973153 (100.00%) 24883353886 (100.00%) 377.17
ip 65453647 ( 99.21%) 24458946772 ( 98.29%) 373.68
tcp 43086734 ( 65.31%) 19917459458 ( 80.04%) 462.26
http(s) 12262024 ( 18.59%) 15912879785 ( 63.95%) 1297.74
http(c) 8866547 ( 13.44%) 1146897953 ( 4.61%) 129.35
squid 321941 ( 0.49%) 261808631 ( 1.05%) 813.22
smtp 72707 ( 0.11%) 16721207 ( 0.07%) 229.98
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 5793 ( 0.01%) 1278234 ( 0.01%) 220.65
pop3 5599 ( 0.01%) 2984251 ( 0.01%) 533.00
imap 7863 ( 0.01%) 5443843 ( 0.02%) 692.34
telnet 845 ( 0.00%) 121167 ( 0.00%) 143.39
ssh 74444 ( 0.11%) 9744066 ( 0.04%) 130.89
dns 46617 ( 0.07%) 4076196 ( 0.02%) 87.44
bgp 605 ( 0.00%) 102133 ( 0.00%) 168.81
napster 1084 ( 0.00%) 69839 ( 0.00%) 64.43
realaud 269 ( 0.00%) 26865 ( 0.00%) 99.87
rtsp 6235 ( 0.01%) 7669923 ( 0.03%) 1230.14
icecast 17889 ( 0.03%) 1533092 ( 0.01%) 85.70
hotline 164 ( 0.00%) 10300 ( 0.00%) 62.80
other 21396102 ( 32.43%) 2546091607 ( 10.23%) 119.00
udp 4931314 ( 7.47%) 2434401957 ( 9.78%) 493.66
dns 657695 ( 1.00%) 168249293 ( 0.68%) 255.82
realaud 25 ( 0.00%) 3281 ( 0.00%) 131.24
halflif 1356 ( 0.00%) 520704 ( 0.00%) 384.00
starcra 55 ( 0.00%) 6079 ( 0.00%) 110.53
everque 1077 ( 0.00%) 405269 ( 0.00%) 376.29
unreal 134 ( 0.00%) 84760 ( 0.00%) 632.54
quake 19 ( 0.00%) 1831 ( 0.00%) 96.37
cuseeme 2 ( 0.00%) 516 ( 0.00%) 258.00
other 4266649 ( 6.47%) 2264619465 ( 9.10%) 530.77
icmp 15938398 ( 24.16%) 1061369694 ( 4.27%) 66.59
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 18598 ( 0.03%) 4114644 ( 0.02%) 221.24
ip6 1461028 ( 2.21%) 1037543366 ( 4.17%) 710.15
other 17391 ( 0.03%) 4038493 ( 0.02%) 232.22
frag 25128 ( 0.04%) 19814577 ( 0.08%) 788.55
ip6 519506 ( 0.79%) 424407114 ( 1.71%) 816.94
tcp6 435736 ( 0.66%) 400597024 ( 1.61%) 919.36
http(s) 161347 ( 0.24%) 231462301 ( 0.93%) 1434.56
http(c) 46244 ( 0.07%) 3981367 ( 0.02%) 86.09
smtp 1586 ( 0.00%) 1597408 ( 0.01%) 1007.19
ftp 40 ( 0.00%) 3763 ( 0.00%) 94.08
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 469 ( 0.00%) 90869 ( 0.00%) 193.75
bgp 94 ( 0.00%) 14572 ( 0.00%) 155.02
other 225945 ( 0.34%) 163445763 ( 0.66%) 723.39
udp6 64355 ( 0.10%) 19972568 ( 0.08%) 310.35
dns 62892 ( 0.10%) 19737328 ( 0.08%) 313.83
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1462 ( 0.00%) 235122 ( 0.00%) 160.82
icmp6 18667 ( 0.03%) 3203739 ( 0.01%) 171.63
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 635 ( 0.00%) 618409 ( 0.00%) 973.87
tcpdump file: 201110241400.dump.gz (1654.74 MB)