Traffic Trace Info
DumpFile: 201111041400.dump
FileSize: 3065.86MB
Id: 201111041400
StartTime: Fri Nov 4 14:00:00 2011
EndTime: Fri Nov 4 14:15:00 2011
TotalTime: 900.44 seconds
TotalCapSize: -1683.67MB CapLen: 96 bytes
# of packets: 42827036 (21857.59MB)
AvgRate: 203.60Mbps stddev:34.61M
IP flow (unique src/dst pair) Information
# of flows: 2020581 (avg. 21.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.5% 1.3% 1.3% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1430997
Top 10 bandwidth usage (bytes/total in %):
12.2% 11.2% 7.4% 6.2% 3.1% 3.1% 2.9% 2.9% 2.4% 2.2%
# of IPv6 addresses: 4499
Top 10 bandwidth usage (bytes/total in %):
44.9% 44.9% 35.3% 35.3% 2.2% 2.2% 1.8% 1.5% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111041400.pktlen.png)
detailed numbers
[ 32- 63]: 12908035
[ 64- 127]: 13086328
[ 128- 255]: 1479760
[ 256- 511]: 844287
[ 512- 1023]: 818217
[ 1024- 2047]: 13690409
Protocol Breakdown
![[protocol breakdown chart]](201111041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42827036 (100.00%) 22919346017 (100.00%) 535.16
ip 42503941 ( 99.25%) 22619035605 ( 98.69%) 532.16
tcp 35268557 ( 82.35%) 19914052444 ( 86.89%) 564.64
http(s) 11909652 ( 27.81%) 15610057722 ( 68.11%) 1310.71
http(c) 9565276 ( 22.33%) 1517211671 ( 6.62%) 158.62
squid 164887 ( 0.39%) 105143911 ( 0.46%) 637.67
smtp 90678 ( 0.21%) 29684925 ( 0.13%) 327.37
nntp 8 ( 0.00%) 508 ( 0.00%) 63.50
ftp 54546 ( 0.13%) 33780467 ( 0.15%) 619.30
pop3 9635 ( 0.02%) 7314999 ( 0.03%) 759.21
imap 3362 ( 0.01%) 330516 ( 0.00%) 98.31
telnet 463 ( 0.00%) 64126 ( 0.00%) 138.50
ssh 164210 ( 0.38%) 24864305 ( 0.11%) 151.42
dns 45285 ( 0.11%) 3847082 ( 0.02%) 84.95
bgp 688 ( 0.00%) 141611 ( 0.00%) 205.83
napster 698 ( 0.00%) 47089 ( 0.00%) 67.46
realaud 241 ( 0.00%) 17235 ( 0.00%) 71.51
rtsp 6254 ( 0.01%) 7688487 ( 0.03%) 1229.37
icecast 26214 ( 0.06%) 14568980 ( 0.06%) 555.77
hotline 108 ( 0.00%) 8466 ( 0.00%) 78.39
other 13226352 ( 30.88%) 2559280344 ( 11.17%) 193.50
udp 4526909 ( 10.57%) 1821982073 ( 7.95%) 402.48
dns 610073 ( 1.42%) 156928070 ( 0.68%) 257.23
realaud 68 ( 0.00%) 13493 ( 0.00%) 198.43
halflif 219 ( 0.00%) 79734 ( 0.00%) 364.08
starcra 84 ( 0.00%) 9214 ( 0.00%) 109.69
everque 811 ( 0.00%) 124321 ( 0.00%) 153.29
unreal 49 ( 0.00%) 5538 ( 0.00%) 113.02
quake 32 ( 0.00%) 3384 ( 0.00%) 105.75
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 3912040 ( 9.13%) 1664517204 ( 7.26%) 425.49
icmp 1674828 ( 3.91%) 186492831 ( 0.81%) 111.35
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 15264 ( 0.04%) 3786288 ( 0.02%) 248.05
ip6 1003662 ( 2.34%) 688952633 ( 3.01%) 686.44
other 14537 ( 0.03%) 3750176 ( 0.02%) 257.97
frag 10228 ( 0.02%) 7905597 ( 0.03%) 772.94
ip6 323095 ( 0.75%) 300310412 ( 1.31%) 929.48
tcp6 240942 ( 0.56%) 277736101 ( 1.21%) 1152.71
http(s) 105943 ( 0.25%) 154354339 ( 0.67%) 1456.96
http(c) 34082 ( 0.08%) 2940728 ( 0.01%) 86.28
smtp 3654 ( 0.01%) 4323896 ( 0.02%) 1183.33
pop3 73 ( 0.00%) 79992 ( 0.00%) 1095.78
dns 640 ( 0.00%) 124320 ( 0.00%) 194.25
bgp 93 ( 0.00%) 14809 ( 0.00%) 159.24
other 96457 ( 0.23%) 115898017 ( 0.51%) 1201.55
udp6 64401 ( 0.15%) 19118601 ( 0.08%) 296.87
dns 60120 ( 0.14%) 18602874 ( 0.08%) 309.43
other 4281 ( 0.01%) 515727 ( 0.00%) 120.47
icmp6 16949 ( 0.04%) 2847447 ( 0.01%) 168.00
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 688 ( 0.00%) 592635 ( 0.00%) 861.39
tcpdump file: 201111041400.dump.gz (1080.80 MB)