Traffic Trace Info
DumpFile: 201110311400.dump
FileSize: 2491.13MB
Id: 201110311400
StartTime: Mon Oct 31 14:00:00 2011
EndTime: Mon Oct 31 14:15:00 2011
TotalTime: 899.95 seconds
TotalCapSize: 1961.29MB CapLen: 96 bytes
# of packets: 34720570 (18100.06MB)
AvgRate: 168.76Mbps stddev:42.17M
IP flow (unique src/dst pair) Information
# of flows: 894590 (avg. 38.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.8% 1.5% 1.4% 1.3% 1.2% 1.2% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 401993
Top 10 bandwidth usage (bytes/total in %):
16.7% 6.6% 4.3% 3.9% 3.8% 3.5% 3.2% 2.5% 2.3% 2.2%
# of IPv6 addresses: 5208
Top 10 bandwidth usage (bytes/total in %):
20.3% 17.0% 15.0% 10.7% 9.1% 9.1% 8.9% 6.9% 5.9% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110311400.pktlen.png)
detailed numbers
[ 32- 63]: 10959944
[ 64- 127]: 9811890
[ 128- 255]: 1169658
[ 256- 511]: 660745
[ 512- 1023]: 734970
[ 1024- 2047]: 11383363
Protocol Breakdown
![[protocol breakdown chart]](201110311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34720570 (100.00%) 18979284034 (100.00%) 546.63
ip 34403696 ( 99.09%) 18762631484 ( 98.86%) 545.37
tcp 29619743 ( 85.31%) 16636840216 ( 87.66%) 561.68
http(s) 10047610 ( 28.94%) 12871200549 ( 67.82%) 1281.02
http(c) 7124344 ( 20.52%) 1051090712 ( 5.54%) 147.54
squid 286568 ( 0.83%) 192100346 ( 1.01%) 670.35
smtp 194683 ( 0.56%) 154959134 ( 0.82%) 795.96
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 47546 ( 0.14%) 34219802 ( 0.18%) 719.72
pop3 7583 ( 0.02%) 5386585 ( 0.03%) 710.35
imap 2789 ( 0.01%) 700746 ( 0.00%) 251.25
telnet 603 ( 0.00%) 74270 ( 0.00%) 123.17
ssh 72924 ( 0.21%) 12285423 ( 0.06%) 168.47
dns 37268 ( 0.11%) 2864527 ( 0.02%) 76.86
bgp 610 ( 0.00%) 96712 ( 0.00%) 158.54
napster 2141 ( 0.01%) 136726 ( 0.00%) 63.86
realaud 76 ( 0.00%) 10397 ( 0.00%) 136.80
rtsp 8531 ( 0.02%) 10333072 ( 0.05%) 1211.24
icecast 9898 ( 0.03%) 1472074 ( 0.01%) 148.72
hotline 52 ( 0.00%) 3272 ( 0.00%) 62.92
other 11776482 ( 33.92%) 2299903697 ( 12.12%) 195.30
udp 3267091 ( 9.41%) 1339218261 ( 7.06%) 409.91
dns 609783 ( 1.76%) 153173836 ( 0.81%) 251.19
realaud 1809 ( 0.01%) 109127 ( 0.00%) 60.32
halflif 77 ( 0.00%) 8109 ( 0.00%) 105.31
starcra 81 ( 0.00%) 9867 ( 0.00%) 121.81
everque 695 ( 0.00%) 125483 ( 0.00%) 180.55
unreal 69 ( 0.00%) 6097 ( 0.00%) 88.36
quake 32 ( 0.00%) 3533 ( 0.00%) 110.41
cuseeme 4 ( 0.00%) 342 ( 0.00%) 85.50
other 2649800 ( 7.63%) 1185475716 ( 6.25%) 447.38
icmp 504893 ( 1.45%) 104308761 ( 0.55%) 206.60
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 16255 ( 0.05%) 8996618 ( 0.05%) 553.47
ip6 981109 ( 2.83%) 669331569 ( 3.53%) 682.22
other 14421 ( 0.04%) 3916899 ( 0.02%) 271.61
frag 29533 ( 0.09%) 22638249 ( 0.12%) 766.54
ip6 316872 ( 0.91%) 216652430 ( 1.14%) 683.72
tcp6 232249 ( 0.67%) 193288297 ( 1.02%) 832.25
http(s) 67782 ( 0.20%) 88757192 ( 0.47%) 1309.45
http(c) 31013 ( 0.09%) 2802550 ( 0.01%) 90.37
squid 11 ( 0.00%) 1658 ( 0.00%) 150.73
smtp 552 ( 0.00%) 355046 ( 0.00%) 643.20
ftp 52 ( 0.00%) 4462 ( 0.00%) 85.81
dns 715 ( 0.00%) 123196 ( 0.00%) 172.30
bgp 92 ( 0.00%) 13666 ( 0.00%) 148.54
other 132032 ( 0.38%) 101230527 ( 0.53%) 766.71
udp6 63538 ( 0.18%) 19532292 ( 0.10%) 307.41
dns 61365 ( 0.18%) 19257224 ( 0.10%) 313.81
everque 2 ( 0.00%) 220 ( 0.00%) 110.00
other 2171 ( 0.01%) 274848 ( 0.00%) 126.60
icmp6 20326 ( 0.06%) 3188319 ( 0.02%) 156.86
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 645 ( 0.00%) 628030 ( 0.00%) 973.69
tcpdump file: 201110311400.dump.gz (884.58 MB)