Traffic Trace Info
DumpFile: 201111101400.dump
FileSize: 3566.14MB
Id: 201111101400
StartTime: Thu Nov 10 14:00:00 2011
EndTime: Thu Nov 10 14:15:00 2011
TotalTime: 900.02 seconds
TotalCapSize: -1300.79MB CapLen: 96 bytes
# of packets: 50522880 (35098.86MB)
AvgRate: 327.16Mbps stddev:44.51M
IP flow (unique src/dst pair) Information
# of flows: 2000658 (avg. 25.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 4.9% 3.3% 2.5% 1.4% 1.1% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 1403446
Top 10 bandwidth usage (bytes/total in %):
13.2% 11.2% 9.8% 8.9% 7.6% 5.9% 5.1% 3.4% 2.7% 2.6%
# of IPv6 addresses: 4590
Top 10 bandwidth usage (bytes/total in %):
44.0% 24.2% 19.8% 13.1% 12.7% 11.4% 10.9% 4.4% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111101400.pktlen.png)
detailed numbers
[ 32- 63]: 12141542
[ 64- 127]: 11702011
[ 128- 255]: 1419936
[ 256- 511]: 717358
[ 512- 1023]: 1602119
[ 1024- 2047]: 22939914
Protocol Breakdown
![[protocol breakdown chart]](201111101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50522880 (100.00%) 36803824131 (100.00%) 728.46
ip 50080824 ( 99.13%) 36487891364 ( 99.14%) 728.58
tcp 43275045 ( 85.65%) 33829156899 ( 91.92%) 781.72
http(s) 18074704 ( 35.78%) 23385056850 ( 63.54%) 1293.80
http(c) 13412636 ( 26.55%) 3204743605 ( 8.71%) 238.93
squid 2500451 ( 4.95%) 3582773723 ( 9.73%) 1432.85
smtp 79358 ( 0.16%) 31059936 ( 0.08%) 391.39
ftp 45097 ( 0.09%) 31634201 ( 0.09%) 701.47
pop3 5717 ( 0.01%) 2194475 ( 0.01%) 383.85
imap 2700 ( 0.01%) 1174647 ( 0.00%) 435.05
telnet 426 ( 0.00%) 65922 ( 0.00%) 154.75
ssh 6749 ( 0.01%) 1419060 ( 0.00%) 210.26
dns 52321 ( 0.10%) 6009426 ( 0.02%) 114.86
bgp 660 ( 0.00%) 142974 ( 0.00%) 216.63
napster 123 ( 0.00%) 8358 ( 0.00%) 67.95
realaud 61 ( 0.00%) 5285 ( 0.00%) 86.64
rtsp 10305 ( 0.02%) 8107661 ( 0.02%) 786.77
icecast 4758 ( 0.01%) 761606 ( 0.00%) 160.07
hotline 56 ( 0.00%) 3932 ( 0.00%) 70.21
other 9078923 ( 17.97%) 3573995238 ( 9.71%) 393.66
udp 4359363 ( 8.63%) 1854558511 ( 5.04%) 425.42
dns 625103 ( 1.24%) 162779115 ( 0.44%) 260.40
realaud 72 ( 0.00%) 13933 ( 0.00%) 193.51
halflif 493 ( 0.00%) 117013 ( 0.00%) 237.35
starcra 100 ( 0.00%) 14049 ( 0.00%) 140.49
everque 440 ( 0.00%) 99478 ( 0.00%) 226.09
unreal 57 ( 0.00%) 8551 ( 0.00%) 150.02
quake 23 ( 0.00%) 2130 ( 0.00%) 92.61
cuseeme 5 ( 0.00%) 999 ( 0.00%) 199.80
other 3732901 ( 7.39%) 1691463466 ( 4.60%) 453.12
icmp 1592458 ( 3.15%) 176136862 ( 0.48%) 110.61
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 39067 ( 0.08%) 10932914 ( 0.03%) 279.85
ip6 798145 ( 1.58%) 613649306 ( 1.67%) 768.84
other 16562 ( 0.03%) 3437712 ( 0.01%) 207.57
frag 837 ( 0.00%) 811475 ( 0.00%) 969.50
ip6 442056 ( 0.87%) 315932767 ( 0.86%) 714.69
tcp6 261708 ( 0.52%) 226121723 ( 0.61%) 864.02
http(s) 43665 ( 0.09%) 53841470 ( 0.15%) 1233.06
http(c) 93284 ( 0.18%) 7843968 ( 0.02%) 84.09
smtp 369 ( 0.00%) 183983 ( 0.00%) 498.60
imap 4 ( 0.00%) 5176 ( 0.00%) 1294.00
dns 688 ( 0.00%) 115165 ( 0.00%) 167.39
bgp 91 ( 0.00%) 15069 ( 0.00%) 165.59
other 123607 ( 0.24%) 164116892 ( 0.45%) 1327.73
udp6 61298 ( 0.12%) 19135188 ( 0.05%) 312.17
dns 49728 ( 0.10%) 15758989 ( 0.04%) 316.90
realaud 2 ( 0.00%) 205 ( 0.00%) 102.50
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 3 ( 0.00%) 308 ( 0.00%) 102.67
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 11563 ( 0.02%) 3375474 ( 0.01%) 291.92
icmp6 24112 ( 0.05%) 3954267 ( 0.01%) 164.00
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 94824 ( 0.19%) 66706097 ( 0.18%) 703.47
tcpdump file: 201111101400.dump.gz (1170.28 MB)