Traffic Trace Info
DumpFile: 201111031400.dump
FileSize: 3769.61MB
Id: 201111031400
StartTime: Thu Nov 3 14:00:00 2011
EndTime: Thu Nov 3 14:15:01 2011
TotalTime: 900.46 seconds
TotalCapSize: -1132.74MB CapLen: 96 bytes
# of packets: 52844394 (26293.36MB)
AvgRate: 244.95Mbps stddev:45.46M
IP flow (unique src/dst pair) Information
# of flows: 1882914 (avg. 28.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.7% 6.6% 3.3% 2.2% 2.1% 1.4% 1.4% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1346748
Top 10 bandwidth usage (bytes/total in %):
22.4% 11.2% 9.9% 9.4% 9.2% 6.9% 4.1% 2.7% 2.7% 2.3%
# of IPv6 addresses: 4579
Top 10 bandwidth usage (bytes/total in %):
88.3% 87.6% 5.0% 2.7% 2.3% 2.1% 1.2% 0.7% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111031400.pktlen.png)
detailed numbers
[ 32- 63]: 21029340
[ 64- 127]: 12662944
[ 128- 255]: 1228885
[ 256- 511]: 649619
[ 512- 1023]: 703978
[ 1024- 2047]: 16569628
Protocol Breakdown
![[protocol breakdown chart]](201111031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52844394 (100.00%) 27570588456 (100.00%) 521.73
ip 51996687 ( 98.40%) 26522474100 ( 96.20%) 510.08
tcp 45432555 ( 85.97%) 24097915257 ( 87.40%) 530.41
http(s) 14877939 ( 28.15%) 17790336348 ( 64.53%) 1195.75
http(c) 5899286 ( 11.16%) 687027212 ( 2.49%) 116.46
squid 388364 ( 0.73%) 403191648 ( 1.46%) 1038.18
smtp 75747 ( 0.14%) 15298265 ( 0.06%) 201.97
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 79175 ( 0.15%) 37800231 ( 0.14%) 477.43
pop3 3234 ( 0.01%) 2318022 ( 0.01%) 716.77
imap 1698 ( 0.00%) 166200 ( 0.00%) 97.88
telnet 1360 ( 0.00%) 121194 ( 0.00%) 89.11
ssh 1104690 ( 2.09%) 177734700 ( 0.64%) 160.89
dns 37489 ( 0.07%) 2868476 ( 0.01%) 76.52
bgp 647 ( 0.00%) 119639 ( 0.00%) 184.91
napster 1427 ( 0.00%) 90180 ( 0.00%) 63.20
realaud 1577 ( 0.00%) 99146 ( 0.00%) 62.87
rtsp 20714 ( 0.04%) 26124078 ( 0.09%) 1261.18
icecast 42525 ( 0.08%) 28199769 ( 0.10%) 663.13
hotline 157 ( 0.00%) 9880 ( 0.00%) 62.93
other 22896442 ( 43.33%) 4926405229 ( 17.87%) 215.16
udp 3546153 ( 6.71%) 1408821782 ( 5.11%) 397.28
dns 462547 ( 0.88%) 129423014 ( 0.47%) 279.81
realaud 1819 ( 0.00%) 110282 ( 0.00%) 60.63
halflif 33 ( 0.00%) 4136 ( 0.00%) 125.33
starcra 17 ( 0.00%) 2429 ( 0.00%) 142.88
everque 660 ( 0.00%) 270670 ( 0.00%) 410.11
unreal 50 ( 0.00%) 5085 ( 0.00%) 101.70
quake 13 ( 0.00%) 1575 ( 0.00%) 121.15
cuseeme 15 ( 0.00%) 1828 ( 0.00%) 121.87
other 3080669 ( 5.83%) 1278801529 ( 4.64%) 415.11
icmp 1624584 ( 3.07%) 158249705 ( 0.57%) 97.41
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4116 ( 0.01%) 1938696 ( 0.01%) 471.01
ip6 1375032 ( 2.60%) 852204388 ( 3.09%) 619.77
other 14062 ( 0.03%) 3325002 ( 0.01%) 236.45
frag 2956 ( 0.01%) 3108534 ( 0.01%) 1051.60
ip6 847707 ( 1.60%) 1048114356 ( 3.80%) 1236.41
tcp6 745086 ( 1.41%) 1000370076 ( 3.63%) 1342.62
http(s) 12901 ( 0.02%) 12535722 ( 0.05%) 971.69
http(c) 15578 ( 0.03%) 1432347 ( 0.01%) 91.95
smtp 977 ( 0.00%) 1043246 ( 0.00%) 1067.81
ftp 25 ( 0.00%) 2235 ( 0.00%) 89.40
imap 19 ( 0.00%) 1785 ( 0.00%) 93.95
dns 648 ( 0.00%) 112374 ( 0.00%) 173.42
bgp 92 ( 0.00%) 19807 ( 0.00%) 215.29
other 714846 ( 1.35%) 985222560 ( 3.57%) 1378.23
udp6 62169 ( 0.12%) 28849363 ( 0.10%) 464.05
dns 46134 ( 0.09%) 12980600 ( 0.05%) 281.37
starcra 1 ( 0.00%) 114 ( 0.00%) 114.00
everque 2 ( 0.00%) 226 ( 0.00%) 113.00
other 16032 ( 0.03%) 15868423 ( 0.06%) 989.80
icmp6 17574 ( 0.03%) 2746125 ( 0.01%) 156.26
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22766 ( 0.04%) 16133536 ( 0.06%) 708.67
tcpdump file: 201111031400.dump.gz (1351.58 MB)