Traffic Trace Info
DumpFile: 201110251400.dump
FileSize: 5052.18MB
Id: 201110251400
StartTime: Tue Oct 25 14:00:01 2011
EndTime: Tue Oct 25 14:15:01 2011
TotalTime: 899.93 seconds
TotalCapSize: -175.64MB CapLen: 96 bytes
# of packets: 74171457 (39416.04MB)
AvgRate: 367.43Mbps stddev:44.40M
IP flow (unique src/dst pair) Information
# of flows: 11728883 (avg. 6.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 5.4% 4.6% 4.1% 3.0% 2.1% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 8966843
Top 10 bandwidth usage (bytes/total in %):
18.9% 14.2% 14.2% 7.1% 6.0% 6.0% 5.8% 5.4% 4.6% 4.5%
# of IPv6 addresses: 4763
Top 10 bandwidth usage (bytes/total in %):
28.0% 21.0% 13.4% 13.2% 10.7% 9.2% 9.2% 6.8% 4.4% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110251400.pktlen.png)
detailed numbers
[ 32- 63]: 28587137
[ 64- 127]: 14774780
[ 128- 255]: 1833946
[ 256- 511]: 972689
[ 512- 1023]: 4269832
[ 1024- 2047]: 23733073
Protocol Breakdown
![[protocol breakdown chart]](201110251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 74171457 (100.00%) 41330712175 (100.00%) 557.23
ip 73783646 ( 99.48%) 41189242985 ( 99.66%) 558.24
tcp 51298179 ( 69.16%) 36720299863 ( 88.85%) 715.82
http(s) 22771784 ( 30.70%) 25479414322 ( 61.65%) 1118.90
http(c) 17871449 ( 24.09%) 8422108742 ( 20.38%) 471.26
squid 479629 ( 0.65%) 436008329 ( 1.05%) 909.05
smtp 87608 ( 0.12%) 28787729 ( 0.07%) 328.60
nntp 22 ( 0.00%) 1320 ( 0.00%) 60.00
ftp 37838 ( 0.05%) 29273633 ( 0.07%) 773.66
pop3 5220 ( 0.01%) 858411 ( 0.00%) 164.45
imap 5677 ( 0.01%) 945464 ( 0.00%) 166.54
telnet 1045 ( 0.00%) 117312 ( 0.00%) 112.26
ssh 27613 ( 0.04%) 4800478 ( 0.01%) 173.85
dns 45580 ( 0.06%) 4010871 ( 0.01%) 88.00
bgp 864 ( 0.00%) 344523 ( 0.00%) 398.75
napster 308 ( 0.00%) 21437 ( 0.00%) 69.60
realaud 268 ( 0.00%) 45406 ( 0.00%) 169.43
rtsp 20005 ( 0.03%) 19589451 ( 0.05%) 979.23
icecast 27788 ( 0.04%) 17005167 ( 0.04%) 611.96
hotline 92 ( 0.00%) 8919 ( 0.00%) 96.95
other 9915389 ( 13.37%) 2276958349 ( 5.51%) 229.64
udp 5144675 ( 6.94%) 2169576768 ( 5.25%) 421.71
dns 635003 ( 0.86%) 160804170 ( 0.39%) 253.23
realaud 21 ( 0.00%) 2051 ( 0.00%) 97.67
halflif 43 ( 0.00%) 16956 ( 0.00%) 394.33
starcra 13 ( 0.00%) 1754 ( 0.00%) 134.92
everque 10029 ( 0.01%) 9786091 ( 0.02%) 975.78
unreal 10 ( 0.00%) 1244 ( 0.00%) 124.40
quake 18 ( 0.00%) 1858 ( 0.00%) 103.22
cuseeme 8 ( 0.00%) 1022 ( 0.00%) 127.75
other 4497559 ( 6.06%) 1998688275 ( 4.84%) 444.39
icmp 15741512 ( 21.22%) 1035376173 ( 2.51%) 65.77
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6033 ( 0.01%) 1411526 ( 0.00%) 233.97
ip6 1576028 ( 2.12%) 1256958599 ( 3.04%) 797.55
other 17035 ( 0.02%) 5600896 ( 0.01%) 328.79
frag 13275 ( 0.02%) 10378065 ( 0.03%) 781.78
ip6 387811 ( 0.52%) 141469190 ( 0.34%) 364.79
tcp6 280965 ( 0.38%) 103177717 ( 0.25%) 367.23
http(s) 28744 ( 0.04%) 34545360 ( 0.08%) 1201.83
http(c) 32568 ( 0.04%) 2822243 ( 0.01%) 86.66
smtp 499 ( 0.00%) 189182 ( 0.00%) 379.12
ftp 29 ( 0.00%) 2621 ( 0.00%) 90.38
imap 48 ( 0.00%) 5108 ( 0.00%) 106.42
dns 338 ( 0.00%) 75758 ( 0.00%) 224.14
bgp 91 ( 0.00%) 24931 ( 0.00%) 273.97
other 218648 ( 0.29%) 65512514 ( 0.16%) 299.63
udp6 71174 ( 0.10%) 23126789 ( 0.06%) 324.93
dns 62120 ( 0.08%) 19357360 ( 0.05%) 311.61
halflif 2 ( 0.00%) 592 ( 0.00%) 296.00
everque 7 ( 0.00%) 909 ( 0.00%) 129.86
unreal 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 9043 ( 0.01%) 3767731 ( 0.01%) 416.65
icmp6 18663 ( 0.03%) 3088392 ( 0.01%) 165.48
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16895 ( 0.02%) 12060800 ( 0.03%) 713.87
tcpdump file: 201110251400.dump.gz (1733.89 MB)