Traffic Trace Info
DumpFile: 201111071400.dump
FileSize: 3392.11MB
Id: 201111071400
StartTime: Mon Nov 7 14:00:00 2011
EndTime: Mon Nov 7 14:15:00 2011
TotalTime: 899.51 seconds
TotalCapSize: -1428.75MB CapLen: 96 bytes
# of packets: 47503656 (24244.30MB)
AvgRate: 226.11Mbps stddev:37.76M
IP flow (unique src/dst pair) Information
# of flows: 1996425 (avg. 23.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.5% 1.5% 1.3% 1.3% 1.2% 1.2% 1.1% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 1417864
Top 10 bandwidth usage (bytes/total in %):
7.8% 7.8% 7.2% 6.2% 4.8% 4.6% 4.2% 3.3% 3.1% 2.7%
# of IPv6 addresses: 4321
Top 10 bandwidth usage (bytes/total in %):
25.0% 23.5% 21.0% 10.5% 5.9% 4.2% 3.9% 3.0% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111071400.pktlen.png)
detailed numbers
[ 32- 63]: 14667285
[ 64- 127]: 14151865
[ 128- 255]: 1595156
[ 256- 511]: 932011
[ 512- 1023]: 926193
[ 1024- 2047]: 15231146
Protocol Breakdown
![[protocol breakdown chart]](201111071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47503656 (100.00%) 25421988708 (100.00%) 535.16
ip 47326099 ( 99.63%) 25328516795 ( 99.63%) 535.19
tcp 38621573 ( 81.30%) 20682159582 ( 81.36%) 535.51
http(s) 11413423 ( 24.03%) 14840967377 ( 58.38%) 1300.31
http(c) 10611426 ( 22.34%) 1801928664 ( 7.09%) 169.81
squid 526037 ( 1.11%) 495737470 ( 1.95%) 942.40
smtp 66017 ( 0.14%) 32477745 ( 0.13%) 491.96
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 46396 ( 0.10%) 32251436 ( 0.13%) 695.13
pop3 10173 ( 0.02%) 7337934 ( 0.03%) 721.31
imap 1596 ( 0.00%) 394133 ( 0.00%) 246.95
telnet 610 ( 0.00%) 74252 ( 0.00%) 121.72
ssh 104346 ( 0.22%) 17124101 ( 0.07%) 164.11
dns 44569 ( 0.09%) 3725800 ( 0.01%) 83.60
bgp 623 ( 0.00%) 91158 ( 0.00%) 146.32
napster 1357 ( 0.00%) 84936 ( 0.00%) 62.59
realaud 2656 ( 0.01%) 167132 ( 0.00%) 62.93
rtsp 6240 ( 0.01%) 7678524 ( 0.03%) 1230.53
icecast 3361 ( 0.01%) 605307 ( 0.00%) 180.10
hotline 123 ( 0.00%) 7712 ( 0.00%) 62.70
other 15782618 ( 33.22%) 3441505779 ( 13.54%) 218.06
udp 5654549 ( 11.90%) 3295500103 ( 12.96%) 582.81
dns 626769 ( 1.32%) 169380784 ( 0.67%) 270.24
realaud 26 ( 0.00%) 3183 ( 0.00%) 122.42
halflif 54 ( 0.00%) 7997 ( 0.00%) 148.09
starcra 54 ( 0.00%) 11175 ( 0.00%) 206.94
everque 790 ( 0.00%) 159614 ( 0.00%) 202.04
unreal 35 ( 0.00%) 4017 ( 0.00%) 114.77
quake 79 ( 0.00%) 6084 ( 0.00%) 77.01
cuseeme 1 ( 0.00%) 98 ( 0.00%) 98.00
other 5025687 ( 10.58%) 3125817036 ( 12.30%) 621.97
icmp 1578877 ( 3.32%) 158698166 ( 0.62%) 100.51
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 21064 ( 0.04%) 6112372 ( 0.02%) 290.18
ip6 1434582 ( 3.02%) 1182728105 ( 4.65%) 824.44
other 15269 ( 0.03%) 3299197 ( 0.01%) 216.07
frag 32725 ( 0.07%) 25678826 ( 0.10%) 784.69
ip6 177557 ( 0.37%) 93471913 ( 0.37%) 526.43
tcp6 72538 ( 0.15%) 52836440 ( 0.21%) 728.40
http(s) 39287 ( 0.08%) 48318298 ( 0.19%) 1229.88
http(c) 26957 ( 0.06%) 2316767 ( 0.01%) 85.94
squid 6 ( 0.00%) 444 ( 0.00%) 74.00
smtp 90 ( 0.00%) 29120 ( 0.00%) 323.56
ftp 61 ( 0.00%) 5806 ( 0.00%) 95.18
dns 731 ( 0.00%) 127758 ( 0.00%) 174.77
bgp 85 ( 0.00%) 13559 ( 0.00%) 159.52
other 5321 ( 0.01%) 2024688 ( 0.01%) 380.51
udp6 69882 ( 0.15%) 27114883 ( 0.11%) 388.01
dns 56607 ( 0.12%) 18342375 ( 0.07%) 324.03
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 13272 ( 0.03%) 8772181 ( 0.03%) 660.95
icmp6 20519 ( 0.04%) 3219166 ( 0.01%) 156.89
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 14505 ( 0.03%) 10286032 ( 0.04%) 709.14
tcpdump file: 201111071400.dump.gz (1187.81 MB)