Traffic Trace Info
DumpFile: 201111011400.dump
FileSize: 2926.03MB
Id: 201111011400
StartTime: Tue Nov 1 14:00:01 2011
EndTime: Tue Nov 1 14:15:00 2011
TotalTime: 899.66 seconds
TotalCapSize: -1787.28MB CapLen: 96 bytes
# of packets: 40454023 (20539.89MB)
AvgRate: 191.52Mbps stddev:28.56M
IP flow (unique src/dst pair) Information
# of flows: 872174 (avg. 46.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.9% 1.8% 1.4% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 392727
Top 10 bandwidth usage (bytes/total in %):
15.4% 8.3% 6.2% 4.2% 4.0% 4.0% 2.4% 2.3% 2.2% 2.1%
# of IPv6 addresses: 4573
Top 10 bandwidth usage (bytes/total in %):
67.0% 65.1% 15.1% 15.1% 3.4% 3.3% 2.3% 2.2% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111011400.pktlen.png)
detailed numbers
[ 32- 63]: 11115204
[ 64- 127]: 13278249
[ 128- 255]: 1465969
[ 256- 511]: 871728
[ 512- 1023]: 819822
[ 1024- 2047]: 12903051
Protocol Breakdown
![[protocol breakdown chart]](201111011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40454023 (100.00%) 21537632466 (100.00%) 532.40
ip 39917799 ( 98.67%) 20950167196 ( 97.27%) 524.83
tcp 33837190 ( 83.64%) 18101005570 ( 84.04%) 534.94
http(s) 9900439 ( 24.47%) 11094564159 ( 51.51%) 1120.61
http(c) 9760248 ( 24.13%) 1577984584 ( 7.33%) 161.67
squid 212810 ( 0.53%) 94022750 ( 0.44%) 441.82
smtp 108326 ( 0.27%) 22412057 ( 0.10%) 206.89
ftp 44859 ( 0.11%) 30910723 ( 0.14%) 689.06
pop3 4553 ( 0.01%) 2032525 ( 0.01%) 446.41
imap 3015 ( 0.01%) 592891 ( 0.00%) 196.65
telnet 621 ( 0.00%) 81931 ( 0.00%) 131.93
ssh 46399 ( 0.11%) 7361724 ( 0.03%) 158.66
dns 43807 ( 0.11%) 3685234 ( 0.02%) 84.12
bgp 645 ( 0.00%) 110842 ( 0.00%) 171.85
napster 572 ( 0.00%) 35498 ( 0.00%) 62.06
realaud 96 ( 0.00%) 10854 ( 0.00%) 113.06
rtsp 7493 ( 0.02%) 9183258 ( 0.04%) 1225.58
icecast 39711 ( 0.10%) 23363062 ( 0.11%) 588.33
hotline 57 ( 0.00%) 3542 ( 0.00%) 62.14
other 13663539 ( 33.78%) 5234649936 ( 24.30%) 383.11
udp 4158107 ( 10.28%) 1797378542 ( 8.35%) 432.26
dns 603364 ( 1.49%) 154095674 ( 0.72%) 255.39
realaud 11 ( 0.00%) 1503 ( 0.00%) 136.64
halflif 23 ( 0.00%) 2134 ( 0.00%) 92.78
starcra 49 ( 0.00%) 7285 ( 0.00%) 148.67
everque 1670 ( 0.00%) 1342962 ( 0.01%) 804.17
unreal 108 ( 0.00%) 13618 ( 0.00%) 126.09
quake 16 ( 0.00%) 1598 ( 0.00%) 99.88
cuseeme 4 ( 0.00%) 313 ( 0.00%) 78.25
other 3552458 ( 8.78%) 1641838267 ( 7.62%) 462.17
icmp 500742 ( 1.24%) 88944068 ( 0.41%) 177.62
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5119 ( 0.01%) 2527194 ( 0.01%) 493.69
ip6 1401557 ( 3.46%) 957053408 ( 4.44%) 682.85
other 14899 ( 0.04%) 3239144 ( 0.02%) 217.41
frag 2644 ( 0.01%) 2353201 ( 0.01%) 890.02
ip6 536224 ( 1.33%) 587465270 ( 2.73%) 1095.56
tcp6 440738 ( 1.09%) 554037770 ( 2.57%) 1257.07
http(s) 289350 ( 0.72%) 428267474 ( 1.99%) 1480.10
http(c) 37845 ( 0.09%) 3286621 ( 0.02%) 86.84
smtp 745 ( 0.00%) 349020 ( 0.00%) 468.48
ftp 74 ( 0.00%) 10591 ( 0.00%) 143.12
dns 590 ( 0.00%) 103545 ( 0.00%) 175.50
bgp 83 ( 0.00%) 13173 ( 0.00%) 158.71
other 112051 ( 0.28%) 122007346 ( 0.57%) 1088.86
udp6 72866 ( 0.18%) 25708338 ( 0.12%) 352.82
dns 62879 ( 0.16%) 19016584 ( 0.09%) 302.43
starcra 1 ( 0.00%) 121 ( 0.00%) 121.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
other 9985 ( 0.02%) 6691521 ( 0.03%) 670.16
icmp6 15518 ( 0.04%) 2636668 ( 0.01%) 169.91
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6987 ( 0.02%) 5066866 ( 0.02%) 725.18
tcpdump file: 201111011400.dump.gz (1026.45 MB)