Traffic Trace Info
DumpFile: 201111091400.dump
FileSize: 4121.09MB
Id: 201111091400
StartTime: Wed Nov 9 14:00:00 2011
EndTime: Wed Nov 9 14:15:00 2011
TotalTime: 900.15 seconds
TotalCapSize: -837.67MB CapLen: 96 bytes
# of packets: 56541489 (38618.36MB)
AvgRate: 359.83Mbps stddev:57.50M
IP flow (unique src/dst pair) Information
# of flows: 2172789 (avg. 26.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 2.4% 1.9% 1.8% 1.5% 1.1% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1519749
Top 10 bandwidth usage (bytes/total in %):
14.1% 11.0% 10.2% 8.2% 5.3% 4.1% 2.7% 2.5% 2.5% 2.4%
# of IPv6 addresses: 5116
Top 10 bandwidth usage (bytes/total in %):
46.1% 40.0% 27.0% 27.0% 10.5% 7.2% 3.5% 3.5% 2.8% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111091400.pktlen.png)
detailed numbers
[ 32- 63]: 12179976
[ 64- 127]: 15203781
[ 128- 255]: 1605200
[ 256- 511]: 860764
[ 512- 1023]: 1349143
[ 1024- 2047]: 25342625
Protocol Breakdown
![[protocol breakdown chart]](201111091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56541489 (100.00%) 40494285884 (100.00%) 716.19
ip 55260442 ( 97.73%) 39417876285 ( 97.34%) 713.31
tcp 48144385 ( 85.15%) 36241727778 ( 89.50%) 752.77
http(s) 23412394 ( 41.41%) 31951605086 ( 78.90%) 1364.73
http(c) 13321592 ( 23.56%) 1537155494 ( 3.80%) 115.39
squid 659462 ( 1.17%) 565145855 ( 1.40%) 856.98
smtp 90665 ( 0.16%) 42933890 ( 0.11%) 473.54
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 11366 ( 0.02%) 3617739 ( 0.01%) 318.29
pop3 4537 ( 0.01%) 1592230 ( 0.00%) 350.94
imap 2676 ( 0.00%) 337562 ( 0.00%) 126.14
telnet 414 ( 0.00%) 61382 ( 0.00%) 148.27
ssh 1139092 ( 2.01%) 175070158 ( 0.43%) 153.69
dns 52794 ( 0.09%) 4729727 ( 0.01%) 89.59
bgp 656 ( 0.00%) 115622 ( 0.00%) 176.25
napster 1811 ( 0.00%) 111944 ( 0.00%) 61.81
realaud 107 ( 0.00%) 11660 ( 0.00%) 108.97
rtsp 6241 ( 0.01%) 7665927 ( 0.02%) 1228.32
icecast 40846 ( 0.07%) 31685602 ( 0.08%) 775.73
hotline 51 ( 0.00%) 4269 ( 0.00%) 83.71
other 9399674 ( 16.62%) 1919883197 ( 4.74%) 204.25
udp 4036790 ( 7.14%) 1974157941 ( 4.88%) 489.04
dns 633346 ( 1.12%) 167127658 ( 0.41%) 263.88
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 13 ( 0.00%) 1390 ( 0.00%) 106.92
halflif 230 ( 0.00%) 80534 ( 0.00%) 350.15
starcra 392 ( 0.00%) 33511 ( 0.00%) 85.49
everque 756 ( 0.00%) 254080 ( 0.00%) 336.08
unreal 64 ( 0.00%) 8298 ( 0.00%) 129.66
quake 29 ( 0.00%) 3161 ( 0.00%) 109.00
cuseeme 6 ( 0.00%) 447 ( 0.00%) 74.50
other 3401803 ( 6.02%) 1806596363 ( 4.46%) 531.07
icmp 1621933 ( 2.87%) 162453516 ( 0.40%) 100.16
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15551 ( 0.03%) 6782330 ( 0.02%) 436.13
ip6 1425467 ( 2.52%) 1029131417 ( 2.54%) 721.96
other 16131 ( 0.03%) 3604033 ( 0.01%) 223.42
frag 826 ( 0.00%) 800924 ( 0.00%) 969.64
ip6 1281047 ( 2.27%) 1076409599 ( 2.66%) 840.26
tcp6 1060898 ( 1.88%) 952501991 ( 2.35%) 897.83
http(s) 376033 ( 0.67%) 557853503 ( 1.38%) 1483.52
http(c) 86163 ( 0.15%) 7301191 ( 0.02%) 84.74
squid 10 ( 0.00%) 2356 ( 0.00%) 235.60
smtp 711 ( 0.00%) 666998 ( 0.00%) 938.11
ftp 28 ( 0.00%) 2530 ( 0.00%) 90.36
dns 846 ( 0.00%) 151002 ( 0.00%) 178.49
bgp 74 ( 0.00%) 9426 ( 0.00%) 127.38
icecast 3 ( 0.00%) 230 ( 0.00%) 76.67
other 597030 ( 1.06%) 386514755 ( 0.95%) 647.40
udp6 55145 ( 0.10%) 17091544 ( 0.04%) 309.94
dns 52051 ( 0.09%) 16629482 ( 0.04%) 319.48
quake 1 ( 0.00%) 96 ( 0.00%) 96.00
other 3093 ( 0.01%) 461966 ( 0.00%) 149.36
icmp6 17639 ( 0.03%) 3109112 ( 0.01%) 176.26
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 147251 ( 0.26%) 103691460 ( 0.26%) 704.18
tcpdump file: 201111091400.dump.gz (1356.57 MB)