Traffic Trace Info
DumpFile: 201111021400.dump
FileSize: 3872.50MB
Id: 201111021400
StartTime: Wed Nov 2 14:00:00 2011
EndTime: Wed Nov 2 14:15:00 2011
TotalTime: 899.73 seconds
TotalCapSize: -1046.75MB CapLen: 96 bytes
# of packets: 53951378 (26229.82MB)
AvgRate: 244.53Mbps stddev:32.96M
IP flow (unique src/dst pair) Information
# of flows: 964643 (avg. 55.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.8% 4.8% 3.5% 1.6% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 394034
Top 10 bandwidth usage (bytes/total in %):
23.6% 17.4% 9.0% 8.1% 7.4% 4.9% 4.5% 3.6% 3.6% 3.3%
# of IPv6 addresses: 4594
Top 10 bandwidth usage (bytes/total in %):
22.7% 22.6% 19.4% 12.5% 11.9% 11.9% 11.7% 11.4% 7.7% 7.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111021400.pktlen.png)
detailed numbers
[ 32- 63]: 19172131
[ 64- 127]: 13979082
[ 128- 255]: 1291799
[ 256- 511]: 711450
[ 512- 1023]: 3405695
[ 1024- 2047]: 15391221
Protocol Breakdown
![[protocol breakdown chart]](201111021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53951378 (100.00%) 27503964890 (100.00%) 509.79
ip 53553675 ( 99.26%) 27202041773 ( 98.90%) 507.94
tcp 48300264 ( 89.53%) 24931179227 ( 90.65%) 516.17
http(s) 15063254 ( 27.92%) 13470190018 ( 48.98%) 894.24
http(c) 14374606 ( 26.64%) 6837570743 ( 24.86%) 475.67
squid 399055 ( 0.74%) 375445950 ( 1.37%) 940.84
smtp 107790 ( 0.20%) 32819920 ( 0.12%) 304.48
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 61951 ( 0.11%) 33577405 ( 0.12%) 542.00
pop3 5942 ( 0.01%) 2606411 ( 0.01%) 438.64
imap 2825 ( 0.01%) 1190395 ( 0.00%) 421.38
telnet 12494 ( 0.02%) 951660 ( 0.00%) 76.17
ssh 60862 ( 0.11%) 12108586 ( 0.04%) 198.95
dns 49426 ( 0.09%) 4473561 ( 0.02%) 90.51
bgp 642 ( 0.00%) 120533 ( 0.00%) 187.75
napster 493 ( 0.00%) 32170 ( 0.00%) 65.25
realaud 242 ( 0.00%) 16141 ( 0.00%) 66.70
rtsp 15125 ( 0.03%) 14086112 ( 0.05%) 931.31
icecast 6027 ( 0.01%) 643420 ( 0.00%) 106.76
hotline 156 ( 0.00%) 10191 ( 0.00%) 65.33
other 18139373 ( 33.62%) 4145335951 ( 15.07%) 228.53
udp 3280808 ( 6.08%) 1135061278 ( 4.13%) 345.97
dns 611759 ( 1.13%) 161588798 ( 0.59%) 264.14
realaud 9 ( 0.00%) 804 ( 0.00%) 89.33
halflif 36 ( 0.00%) 3864 ( 0.00%) 107.33
starcra 35 ( 0.00%) 3777 ( 0.00%) 107.91
everque 2738 ( 0.01%) 2212144 ( 0.01%) 807.94
unreal 14 ( 0.00%) 1917 ( 0.00%) 136.93
quake 18 ( 0.00%) 2011 ( 0.00%) 111.72
cuseeme 6 ( 0.00%) 554 ( 0.00%) 92.33
other 2666065 ( 4.94%) 971201804 ( 3.53%) 364.28
icmp 498543 ( 0.92%) 90256410 ( 0.33%) 181.04
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6299 ( 0.01%) 1728962 ( 0.01%) 274.48
ip6 1451629 ( 2.69%) 1038855164 ( 3.78%) 715.65
other 15947 ( 0.03%) 4941462 ( 0.02%) 309.87
frag 1214 ( 0.00%) 1260512 ( 0.00%) 1038.31
ip6 397703 ( 0.74%) 301923117 ( 1.10%) 759.17
tcp6 263943 ( 0.49%) 241294478 ( 0.88%) 914.19
http(s) 79738 ( 0.15%) 112878642 ( 0.41%) 1415.62
http(c) 30586 ( 0.06%) 2698711 ( 0.01%) 88.23
smtp 881 ( 0.00%) 623776 ( 0.00%) 708.03
ftp 71 ( 0.00%) 6572 ( 0.00%) 92.56
dns 732 ( 0.00%) 122421 ( 0.00%) 167.24
bgp 91 ( 0.00%) 14865 ( 0.00%) 163.35
other 151844 ( 0.28%) 124949491 ( 0.45%) 822.88
udp6 63731 ( 0.12%) 19521868 ( 0.07%) 306.32
dns 60389 ( 0.11%) 18902558 ( 0.07%) 313.01
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
other 3340 ( 0.01%) 619087 ( 0.00%) 185.36
icmp6 15276 ( 0.03%) 2573360 ( 0.01%) 168.46
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 54640 ( 0.10%) 38518019 ( 0.14%) 704.94
tcpdump file: 201111021400.dump.gz (1353.60 MB)