Traffic Trace Info
DumpFile: 201111051400.dump
FileSize: 4177.61MB
Id: 201111051400
StartTime: Sat Nov 5 14:00:00 2011
EndTime: Sat Nov 5 14:15:00 2011
TotalTime: 899.88 seconds
TotalCapSize: -820.26MB CapLen: 96 bytes
# of packets: 59100978 (39300.29MB)
AvgRate: 366.32Mbps stddev:65.40M
IP flow (unique src/dst pair) Information
# of flows: 2041943 (avg. 28.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 4.3% 2.3% 1.5% 1.3% 1.2% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1446648
Top 10 bandwidth usage (bytes/total in %):
23.1% 13.2% 8.6% 7.0% 4.7% 4.4% 3.8% 3.3% 3.1% 2.4%
# of IPv6 addresses: 4578
Top 10 bandwidth usage (bytes/total in %):
50.6% 50.6% 10.8% 8.9% 8.3% 6.5% 5.4% 4.5% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111051400.pktlen.png)
detailed numbers
[ 32- 63]: 18780154
[ 64- 127]: 11737353
[ 128- 255]: 1263313
[ 256- 511]: 837621
[ 512- 1023]: 723373
[ 1024- 2047]: 25759164
Protocol Breakdown
![[protocol breakdown chart]](201111051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59100978 (100.00%) 41209341813 (100.00%) 697.27
ip 58478636 ( 98.95%) 40894089931 ( 99.23%) 699.30
tcp 51570848 ( 87.26%) 38096821324 ( 92.45%) 738.73
http(s) 22373673 ( 37.86%) 31081386290 ( 75.42%) 1389.19
http(c) 10324439 ( 17.47%) 1231594954 ( 2.99%) 119.29
squid 241953 ( 0.41%) 202134479 ( 0.49%) 835.43
smtp 84741 ( 0.14%) 26232279 ( 0.06%) 309.56
ftp 30862 ( 0.05%) 18331852 ( 0.04%) 593.99
pop3 6077 ( 0.01%) 3444907 ( 0.01%) 566.88
imap 1112 ( 0.00%) 110047 ( 0.00%) 98.96
telnet 465 ( 0.00%) 64847 ( 0.00%) 139.46
ssh 45195 ( 0.08%) 7613809 ( 0.02%) 168.47
dns 44048 ( 0.07%) 5108433 ( 0.01%) 115.97
bgp 614 ( 0.00%) 97138 ( 0.00%) 158.21
napster 628 ( 0.00%) 39946 ( 0.00%) 63.61
realaud 82 ( 0.00%) 5122 ( 0.00%) 62.46
rtsp 20841 ( 0.04%) 28247591 ( 0.07%) 1355.39
icecast 7120 ( 0.01%) 1377130 ( 0.00%) 193.42
hotline 64 ( 0.00%) 4032 ( 0.00%) 63.00
other 18388934 ( 31.11%) 5491028468 ( 13.32%) 298.61
udp 3779298 ( 6.39%) 1402760260 ( 3.40%) 371.17
dns 442975 ( 0.75%) 99612411 ( 0.24%) 224.87
realaud 14 ( 0.00%) 2261 ( 0.00%) 161.50
halflif 26 ( 0.00%) 4971 ( 0.00%) 191.19
starcra 22 ( 0.00%) 3425 ( 0.00%) 155.68
everque 379 ( 0.00%) 83650 ( 0.00%) 220.71
unreal 106 ( 0.00%) 8957 ( 0.00%) 84.50
quake 14 ( 0.00%) 1315 ( 0.00%) 93.93
cuseeme 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3335546 ( 5.64%) 1302974676 ( 3.16%) 390.63
icmp 1649708 ( 2.79%) 179083429 ( 0.43%) 108.55
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2866 ( 0.00%) 789596 ( 0.00%) 275.50
ip6 1460912 ( 2.47%) 1211173352 ( 2.94%) 829.05
other 14820 ( 0.03%) 3442810 ( 0.01%) 232.31
frag 1010 ( 0.00%) 931519 ( 0.00%) 922.30
ip6 622342 ( 1.05%) 315251882 ( 0.77%) 506.56
tcp6 553785 ( 0.94%) 294324515 ( 0.71%) 531.48
http(s) 15675 ( 0.03%) 18943980 ( 0.05%) 1208.55
http(c) 28314 ( 0.05%) 2678562 ( 0.01%) 94.60
smtp 37 ( 0.00%) 15732 ( 0.00%) 425.19
imap 7 ( 0.00%) 915 ( 0.00%) 130.71
dns 584 ( 0.00%) 94475 ( 0.00%) 161.77
bgp 83 ( 0.00%) 10673 ( 0.00%) 128.59
other 509085 ( 0.86%) 272580178 ( 0.66%) 535.43
udp6 41339 ( 0.07%) 11248992 ( 0.03%) 272.12
dns 39162 ( 0.07%) 10959448 ( 0.03%) 279.85
everque 2 ( 0.00%) 214 ( 0.00%) 107.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 2174 ( 0.00%) 289218 ( 0.00%) 133.03
icmp6 21469 ( 0.04%) 3104086 ( 0.01%) 144.58
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5636 ( 0.01%) 6558865 ( 0.02%) 1163.74
tcpdump file: 201111051400.dump.gz (1409.46 MB)