Traffic Trace Info
DumpFile: 201111081400.dump
FileSize: 3298.80MB
Id: 201111081400
StartTime: Tue Nov 8 14:00:01 2011
EndTime: Tue Nov 8 14:15:00 2011
TotalTime: 899.06 seconds
TotalCapSize: -1492.84MB CapLen: 96 bytes
# of packets: 45589067 (29485.85MB)
AvgRate: 275.06Mbps stddev:35.80M
IP flow (unique src/dst pair) Information
# of flows: 1944145 (avg. 23.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 1.6% 1.3% 1.0% 0.9% 0.9% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 1375496
Top 10 bandwidth usage (bytes/total in %):
7.6% 7.3% 6.9% 6.2% 6.2% 5.1% 3.6% 3.5% 3.5% 3.4%
# of IPv6 addresses: 4410
Top 10 bandwidth usage (bytes/total in %):
67.3% 42.9% 24.4% 10.3% 10.3% 4.9% 4.9% 2.2% 1.1% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111081400.pktlen.png)
detailed numbers
[ 32- 63]: 10815023
[ 64- 127]: 12297889
[ 128- 255]: 1422057
[ 256- 511]: 821437
[ 512- 1023]: 936575
[ 1024- 2047]: 19296086
Protocol Breakdown
![[protocol breakdown chart]](201111081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45589067 (100.00%) 30918153385 (100.00%) 678.19
ip 45293134 ( 99.35%) 30673331321 ( 99.21%) 677.22
tcp 38743719 ( 84.98%) 27898791342 ( 90.23%) 720.09
http(s) 16903920 ( 37.08%) 22573530678 ( 73.01%) 1335.40
http(c) 10108441 ( 22.17%) 1315215975 ( 4.25%) 130.11
squid 918752 ( 2.02%) 1053192654 ( 3.41%) 1146.33
smtp 89671 ( 0.20%) 34822662 ( 0.11%) 388.34
ftp 48587 ( 0.11%) 30860242 ( 0.10%) 635.15
pop3 3666 ( 0.01%) 888511 ( 0.00%) 242.37
imap 1382 ( 0.00%) 172581 ( 0.00%) 124.88
telnet 724 ( 0.00%) 105551 ( 0.00%) 145.79
ssh 33448 ( 0.07%) 5778409 ( 0.02%) 172.76
dns 46820 ( 0.10%) 3859064 ( 0.01%) 82.42
bgp 665 ( 0.00%) 131200 ( 0.00%) 197.29
napster 1362 ( 0.00%) 93446 ( 0.00%) 68.61
realaud 107 ( 0.00%) 10072 ( 0.00%) 94.13
rtsp 15145 ( 0.03%) 17829067 ( 0.06%) 1177.22
icecast 42130 ( 0.09%) 31709429 ( 0.10%) 752.66
hotline 71 ( 0.00%) 4892 ( 0.00%) 68.90
other 10528828 ( 23.10%) 2830586909 ( 9.16%) 268.84
udp 3523619 ( 7.73%) 1439273505 ( 4.66%) 408.46
dns 647911 ( 1.42%) 174512499 ( 0.56%) 269.35
realaud 28 ( 0.00%) 3572 ( 0.00%) 127.57
halflif 52 ( 0.00%) 4282 ( 0.00%) 82.35
starcra 111666 ( 0.24%) 113766240 ( 0.37%) 1018.81
everque 869 ( 0.00%) 162719 ( 0.00%) 187.25
unreal 41 ( 0.00%) 6080 ( 0.00%) 148.29
quake 10 ( 0.00%) 1272 ( 0.00%) 127.20
cuseeme 9 ( 0.00%) 929 ( 0.00%) 103.22
other 2759100 ( 6.05%) 1150382857 ( 3.72%) 416.94
icmp 1544771 ( 3.39%) 163460080 ( 0.53%) 105.82
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2717 ( 0.01%) 769166 ( 0.00%) 283.09
ip6 1460021 ( 3.20%) 1166446212 ( 3.77%) 798.92
other 18103 ( 0.04%) 4571856 ( 0.01%) 252.55
frag 17648 ( 0.04%) 13930168 ( 0.05%) 789.33
ip6 295933 ( 0.65%) 244822064 ( 0.79%) 827.29
tcp6 215342 ( 0.47%) 223312465 ( 0.72%) 1037.01
http(s) 30450 ( 0.07%) 37841365 ( 0.12%) 1242.74
http(c) 31055 ( 0.07%) 2743039 ( 0.01%) 88.33
smtp 119 ( 0.00%) 46300 ( 0.00%) 389.08
ftp 133 ( 0.00%) 12375 ( 0.00%) 93.05
dns 733 ( 0.00%) 118720 ( 0.00%) 161.96
bgp 85 ( 0.00%) 12334 ( 0.00%) 145.11
other 152767 ( 0.34%) 182538332 ( 0.59%) 1194.88
udp6 62667 ( 0.14%) 17764939 ( 0.06%) 283.48
dns 53986 ( 0.12%) 16951632 ( 0.05%) 314.00
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 9 ( 0.00%) 847 ( 0.00%) 94.11
unreal 2 ( 0.00%) 214 ( 0.00%) 107.00
quake 2 ( 0.00%) 219 ( 0.00%) 109.50
other 8667 ( 0.02%) 811926 ( 0.00%) 93.68
icmp6 16928 ( 0.04%) 2876614 ( 0.01%) 169.93
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 883 ( 0.00%) 852672 ( 0.00%) 965.65
tcpdump file: 201111081400.dump.gz (1117.89 MB)