Traffic Trace Info
DumpFile: 201111131400.dump
FileSize: 2247.64MB
Id: 201111131400
StartTime: Sun Nov 13 14:00:00 2011
EndTime: Sun Nov 13 14:15:01 2011
TotalTime: 900.48 seconds
TotalCapSize: 1754.14MB CapLen: 96 bytes
# of packets: 32341616 (22425.20MB)
AvgRate: 208.93Mbps stddev:67.05M
IP flow (unique src/dst pair) Information
# of flows: 1720557 (avg. 18.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.5% 2.6% 2.5% 1.6% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1350865
Top 10 bandwidth usage (bytes/total in %):
27.3% 11.8% 11.8% 10.4% 7.9% 5.8% 5.5% 2.9% 2.8% 2.7%
# of IPv6 addresses: 3648
Top 10 bandwidth usage (bytes/total in %):
47.8% 47.2% 22.5% 18.2% 11.6% 10.9% 9.4% 3.4% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111131400.pktlen.png)
detailed numbers
[ 32- 63]: 8083079
[ 64- 127]: 6865588
[ 128- 255]: 960315
[ 256- 511]: 427221
[ 512- 1023]: 542667
[ 1024- 2047]: 15462746
Protocol Breakdown
![[protocol breakdown chart]](201111131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32341616 (100.00%) 23514528261 (100.00%) 727.07
ip 31788320 ( 98.29%) 22967244227 ( 97.67%) 722.51
tcp 23028895 ( 71.21%) 18308998051 ( 77.86%) 795.04
http(s) 10704127 ( 33.10%) 14606328890 ( 62.12%) 1364.55
http(c) 4622576 ( 14.29%) 450637541 ( 1.92%) 97.49
squid 37150 ( 0.11%) 23219008 ( 0.10%) 625.01
smtp 36460 ( 0.11%) 7149496 ( 0.03%) 196.09
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 48345 ( 0.15%) 36804448 ( 0.16%) 761.29
pop3 715 ( 0.00%) 85917 ( 0.00%) 120.16
imap 1806 ( 0.01%) 184574 ( 0.00%) 102.20
telnet 434 ( 0.00%) 62782 ( 0.00%) 144.66
ssh 47303 ( 0.15%) 35960571 ( 0.15%) 760.22
dns 40839 ( 0.13%) 3062279 ( 0.01%) 74.98
bgp 661 ( 0.00%) 130983 ( 0.00%) 198.16
napster 222 ( 0.00%) 75092 ( 0.00%) 338.25
realaud 39 ( 0.00%) 3021 ( 0.00%) 77.46
rtsp 18 ( 0.00%) 21958 ( 0.00%) 1219.89
icecast 1460 ( 0.00%) 497797 ( 0.00%) 340.96
hotline 76 ( 0.00%) 5558 ( 0.00%) 73.13
other 7486662 ( 23.15%) 3144768016 ( 13.37%) 420.05
udp 5580958 ( 17.26%) 3764758240 ( 16.01%) 674.57
dns 337346 ( 1.04%) 77653326 ( 0.33%) 230.19
realaud 5 ( 0.00%) 498 ( 0.00%) 99.60
halflif 652 ( 0.00%) 39469 ( 0.00%) 60.54
starcra 34 ( 0.00%) 3157 ( 0.00%) 92.85
everque 260 ( 0.00%) 47407 ( 0.00%) 182.33
unreal 11 ( 0.00%) 1318 ( 0.00%) 119.82
quake 15 ( 0.00%) 1356 ( 0.00%) 90.40
cuseeme 3 ( 0.00%) 210 ( 0.00%) 70.00
other 5242475 ( 16.21%) 3686961780 ( 15.68%) 703.29
icmp 1980407 ( 6.12%) 175681248 ( 0.75%) 88.71
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 316 ( 0.00%) 134760 ( 0.00%) 426.46
ip6 1180775 ( 3.65%) 712871819 ( 3.03%) 603.73
other 16784 ( 0.05%) 4780839 ( 0.02%) 284.85
frag 716 ( 0.00%) 664130 ( 0.00%) 927.56
ip6 553296 ( 1.71%) 547284034 ( 2.33%) 989.13
tcp6 363892 ( 1.13%) 444366748 ( 1.89%) 1221.15
http(s) 4916 ( 0.02%) 4266412 ( 0.02%) 867.86
http(c) 20665 ( 0.06%) 1755471 ( 0.01%) 84.95
smtp 10945 ( 0.03%) 989836 ( 0.00%) 90.44
ftp 160 ( 0.00%) 14158 ( 0.00%) 88.49
pop3 382 ( 0.00%) 532495 ( 0.00%) 1393.97
dns 612 ( 0.00%) 106814 ( 0.00%) 174.53
bgp 91 ( 0.00%) 14244 ( 0.00%) 156.53
other 326121 ( 1.01%) 436687318 ( 1.86%) 1339.03
udp6 42559 ( 0.13%) 13808224 ( 0.06%) 324.45
dns 30115 ( 0.09%) 8248712 ( 0.04%) 273.91
everque 74 ( 0.00%) 9308 ( 0.00%) 125.78
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 12368 ( 0.04%) 5549980 ( 0.02%) 448.74
icmp6 25246 ( 0.08%) 3791223 ( 0.02%) 150.17
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 121484 ( 0.38%) 85302211 ( 0.36%) 702.17
tcpdump file: 201111131400.dump.gz (729.74 MB)