Traffic Trace Info
DumpFile: 201111121400.dump
FileSize: 2531.98MB
Id: 201111121400
StartTime: Sat Nov 12 14:00:01 2011
EndTime: Sat Nov 12 14:15:00 2011
TotalTime: 899.59 seconds
TotalCapSize: 1988.99MB CapLen: 96 bytes
# of packets: 35585242 (24846.38MB)
AvgRate: 231.67Mbps stddev:40.35M
IP flow (unique src/dst pair) Information
# of flows: 1825734 (avg. 19.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.4% 3.7% 1.7% 1.6% 1.5% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1377828
Top 10 bandwidth usage (bytes/total in %):
17.6% 13.2% 6.3% 6.3% 6.3% 5.9% 4.4% 3.8% 3.8% 3.7%
# of IPv6 addresses: 3983
Top 10 bandwidth usage (bytes/total in %):
48.0% 48.0% 11.3% 11.3% 9.8% 6.7% 4.3% 4.3% 4.2% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111121400.pktlen.png)
detailed numbers
[ 32- 63]: 8328419
[ 64- 127]: 8197949
[ 128- 255]: 1516715
[ 256- 511]: 517415
[ 512- 1023]: 524057
[ 1024- 2047]: 16500687
Protocol Breakdown
![[protocol breakdown chart]](201111121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35585242 (100.00%) 26053317779 (100.00%) 732.14
ip 35303831 ( 99.21%) 25860525139 ( 99.26%) 732.51
tcp 28419693 ( 79.86%) 23096127129 ( 88.65%) 812.68
http(s) 11732140 ( 32.97%) 16122633956 ( 61.88%) 1374.23
http(c) 5719147 ( 16.07%) 582894315 ( 2.24%) 101.92
squid 49669 ( 0.14%) 21465306 ( 0.08%) 432.17
smtp 48640 ( 0.14%) 10672689 ( 0.04%) 219.42
nntp 2 ( 0.00%) 148 ( 0.00%) 74.00
ftp 43154 ( 0.12%) 25871141 ( 0.10%) 599.51
pop3 1671 ( 0.00%) 137015 ( 0.00%) 82.00
imap 2808 ( 0.01%) 376159 ( 0.00%) 133.96
telnet 588 ( 0.00%) 72284 ( 0.00%) 122.93
ssh 92920 ( 0.26%) 16714924 ( 0.06%) 179.89
dns 45417 ( 0.13%) 3634062 ( 0.01%) 80.02
bgp 622 ( 0.00%) 103691 ( 0.00%) 166.71
napster 180 ( 0.00%) 38046 ( 0.00%) 211.37
realaud 68 ( 0.00%) 5141 ( 0.00%) 75.60
icecast 9121 ( 0.03%) 6323315 ( 0.02%) 693.27
hotline 45 ( 0.00%) 2798 ( 0.00%) 62.18
other 10673500 ( 29.99%) 6305182079 ( 24.20%) 590.73
udp 3874807 ( 10.89%) 1472412388 ( 5.65%) 380.00
dns 398478 ( 1.12%) 96646851 ( 0.37%) 242.54
realaud 6 ( 0.00%) 729 ( 0.00%) 121.50
halflif 192 ( 0.00%) 29342 ( 0.00%) 152.82
starcra 288 ( 0.00%) 26816 ( 0.00%) 93.11
everque 353 ( 0.00%) 59252 ( 0.00%) 167.85
unreal 62 ( 0.00%) 4687 ( 0.00%) 75.60
quake 12 ( 0.00%) 1098 ( 0.00%) 91.50
cuseeme 5 ( 0.00%) 769 ( 0.00%) 153.80
other 3475340 ( 9.77%) 1375602877 ( 5.28%) 395.82
icmp 1600709 ( 4.50%) 174590223 ( 0.67%) 109.07
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 322 ( 0.00%) 134172 ( 0.00%) 416.68
ip6 1392827 ( 3.91%) 1113319405 ( 4.27%) 799.32
other 15290 ( 0.04%) 3922760 ( 0.02%) 256.56
frag 428 ( 0.00%) 430777 ( 0.00%) 1006.49
ip6 281411 ( 0.79%) 192792640 ( 0.74%) 685.09
tcp6 192708 ( 0.54%) 160627617 ( 0.62%) 833.53
http(s) 18486 ( 0.05%) 20469513 ( 0.08%) 1107.30
http(c) 60097 ( 0.17%) 5499606 ( 0.02%) 91.51
ftp 26 ( 0.00%) 2414 ( 0.00%) 92.85
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 544 ( 0.00%) 86159 ( 0.00%) 158.38
bgp 87 ( 0.00%) 15033 ( 0.00%) 172.79
other 113457 ( 0.32%) 134553911 ( 0.52%) 1185.95
udp6 58316 ( 0.16%) 22417258 ( 0.09%) 384.41
dns 31830 ( 0.09%) 9083191 ( 0.03%) 285.37
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 117 ( 0.00%) 117.00
other 26484 ( 0.07%) 13333843 ( 0.05%) 503.47
icmp6 21139 ( 0.06%) 3217175 ( 0.01%) 152.19
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9133 ( 0.03%) 6514962 ( 0.03%) 713.34
tcpdump file: 201111121400.dump.gz (834.25 MB)