Traffic Trace Info
DumpFile: 201110291400.dump
FileSize: 2924.63MB
Id: 201110291400
StartTime: Sat Oct 29 14:00:01 2011
EndTime: Sat Oct 29 14:15:00 2011
TotalTime: 899.26 seconds
TotalCapSize: -1798.54MB CapLen: 96 bytes
# of packets: 41099387 (24252.34MB)
AvgRate: 226.19Mbps stddev:45.84M
IP flow (unique src/dst pair) Information
# of flows: 804723 (avg. 51.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.9% 2.9% 2.3% 2.1% 2.0% 1.7% 1.5% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 360759
Top 10 bandwidth usage (bytes/total in %):
20.3% 19.7% 17.9% 6.1% 3.4% 3.3% 3.3% 3.0% 2.8% 2.8%
# of IPv6 addresses: 3766
Top 10 bandwidth usage (bytes/total in %):
53.7% 37.4% 36.6% 27.4% 17.1% 9.8% 1.9% 1.9% 0.8% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110291400.pktlen.png)
detailed numbers
[ 32- 63]: 13040447
[ 64- 127]: 8990149
[ 128- 255]: 1030161
[ 256- 511]: 565149
[ 512- 1023]: 2784897
[ 1024- 2047]: 14688584
Protocol Breakdown
![[protocol breakdown chart]](201110291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41099387 (100.00%) 25430426889 (100.00%) 618.75
ip 40492266 ( 98.52%) 25112265796 ( 98.75%) 620.17
tcp 35245778 ( 85.76%) 22424994795 ( 88.18%) 636.25
http(s) 11857557 ( 28.85%) 12652534533 ( 49.75%) 1067.04
http(c) 10107154 ( 24.59%) 6056493991 ( 23.82%) 599.23
squid 424202 ( 1.03%) 352093459 ( 1.38%) 830.01
smtp 74971 ( 0.18%) 32831859 ( 0.13%) 437.93
ftp 10012 ( 0.02%) 819217 ( 0.00%) 81.82
pop3 5386 ( 0.01%) 4342996 ( 0.02%) 806.35
imap 693 ( 0.00%) 100116 ( 0.00%) 144.47
telnet 469 ( 0.00%) 77962 ( 0.00%) 166.23
ssh 7010 ( 0.02%) 1318178 ( 0.01%) 188.04
dns 42001 ( 0.10%) 5064661 ( 0.02%) 120.58
bgp 622 ( 0.00%) 103895 ( 0.00%) 167.03
napster 1576 ( 0.00%) 98304 ( 0.00%) 62.38
realaud 63 ( 0.00%) 4030 ( 0.00%) 63.97
rtsp 6227 ( 0.02%) 7669473 ( 0.03%) 1231.65
icecast 1935 ( 0.00%) 547086 ( 0.00%) 282.73
hotline 79 ( 0.00%) 6129 ( 0.00%) 77.58
other 12705814 ( 30.91%) 3310888486 ( 13.02%) 260.58
udp 3263506 ( 7.94%) 1315159832 ( 5.17%) 402.99
dns 369695 ( 0.90%) 87101132 ( 0.34%) 235.60
realaud 8 ( 0.00%) 1436 ( 0.00%) 179.50
halflif 574 ( 0.00%) 36033 ( 0.00%) 62.78
starcra 68 ( 0.00%) 8594 ( 0.00%) 126.38
everque 469 ( 0.00%) 82780 ( 0.00%) 176.50
unreal 5 ( 0.00%) 1011 ( 0.00%) 202.20
quake 6 ( 0.00%) 618 ( 0.00%) 103.00
cuseeme 5 ( 0.00%) 509 ( 0.00%) 101.80
other 2892581 ( 7.04%) 1227879133 ( 4.83%) 424.49
icmp 505937 ( 1.23%) 121479950 ( 0.48%) 240.11
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 1427 ( 0.00%) 588658 ( 0.00%) 412.51
ip6 1462015 ( 3.56%) 1246337886 ( 4.90%) 852.48
other 13420 ( 0.03%) 3685613 ( 0.01%) 274.64
frag 509 ( 0.00%) 508242 ( 0.00%) 998.51
ip6 607119 ( 1.48%) 318160973 ( 1.25%) 524.05
tcp6 547729 ( 1.33%) 303152954 ( 1.19%) 553.47
http(s) 4973 ( 0.01%) 3839158 ( 0.02%) 772.00
http(c) 9999 ( 0.02%) 987650 ( 0.00%) 98.77
smtp 65 ( 0.00%) 42093 ( 0.00%) 647.58
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 484 ( 0.00%) 668364 ( 0.00%) 1380.92
dns 713 ( 0.00%) 116437 ( 0.00%) 163.31
bgp 88 ( 0.00%) 12390 ( 0.00%) 140.80
other 531381 ( 1.29%) 297484549 ( 1.17%) 559.83
udp6 41056 ( 0.10%) 11602294 ( 0.05%) 282.60
dns 38928 ( 0.09%) 11274506 ( 0.04%) 289.62
halflif 1 ( 0.00%) 114 ( 0.00%) 114.00
starcra 1 ( 0.00%) 95 ( 0.00%) 95.00
everque 3 ( 0.00%) 326 ( 0.00%) 108.67
other 2123 ( 0.01%) 327253 ( 0.00%) 154.15
icmp6 17606 ( 0.04%) 2847589 ( 0.01%) 161.74
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 614 ( 0.00%) 542626 ( 0.00%) 883.76
tcpdump file: 201110291400.dump.gz (985.26 MB)