Traffic Trace Info
DumpFile: 201111141400.dump
FileSize: 4016.32MB
Id: 201111141400
StartTime: Mon Nov 14 14:00:00 2011
EndTime: Mon Nov 14 14:15:01 2011
TotalTime: 900.16 seconds
TotalCapSize: -926.11MB CapLen: 96 bytes
# of packets: 55470807 (26652.77MB)
AvgRate: 248.38Mbps stddev:42.10M
IP flow (unique src/dst pair) Information
# of flows: 2223231 (avg. 24.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.3% 1.8% 1.7% 1.6% 1.2% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1487674
Top 10 bandwidth usage (bytes/total in %):
11.3% 7.7% 5.6% 4.8% 4.3% 4.1% 3.5% 3.4% 2.8% 2.5%
# of IPv6 addresses: 4501
Top 10 bandwidth usage (bytes/total in %):
68.6% 68.4% 16.9% 9.3% 7.5% 4.6% 2.6% 2.0% 1.9% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111141400.pktlen.png)
detailed numbers
[ 32- 63]: 19047344
[ 64- 127]: 16263481
[ 128- 255]: 1705566
[ 256- 511]: 860741
[ 512- 1023]: 901448
[ 1024- 2047]: 16692227
Protocol Breakdown
![[protocol breakdown chart]](201111141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55470807 (100.00%) 27947455252 (100.00%) 503.82
ip 54753452 ( 98.71%) 27001088059 ( 96.61%) 493.14
tcp 46403856 ( 83.65%) 23347854948 ( 83.54%) 503.14
http(s) 13885688 ( 25.03%) 17989542448 ( 64.37%) 1295.55
http(c) 11262162 ( 20.30%) 1946463566 ( 6.96%) 172.83
squid 221616 ( 0.40%) 110002773 ( 0.39%) 496.37
smtp 55817 ( 0.10%) 19519212 ( 0.07%) 349.70
nntp 2 ( 0.00%) 122 ( 0.00%) 61.00
ftp 20090 ( 0.04%) 2083303 ( 0.01%) 103.70
pop3 6687 ( 0.01%) 4611561 ( 0.02%) 689.63
imap 936 ( 0.00%) 145856 ( 0.00%) 155.83
telnet 718 ( 0.00%) 81358 ( 0.00%) 113.31
ssh 58798 ( 0.11%) 11708725 ( 0.04%) 199.13
dns 51192 ( 0.09%) 5283700 ( 0.02%) 103.21
bgp 672 ( 0.00%) 150078 ( 0.00%) 223.33
napster 4150 ( 0.01%) 260850 ( 0.00%) 62.86
realaud 1129 ( 0.00%) 70814 ( 0.00%) 62.72
rtsp 6235 ( 0.01%) 7669923 ( 0.03%) 1230.14
icecast 35394 ( 0.06%) 15168577 ( 0.05%) 428.56
hotline 134 ( 0.00%) 8350 ( 0.00%) 62.31
other 20792436 ( 37.48%) 3235083732 ( 11.58%) 155.59
udp 4540959 ( 8.19%) 1900617996 ( 6.80%) 418.55
dns 614209 ( 1.11%) 156846957 ( 0.56%) 255.36
realaud 10 ( 0.00%) 1264 ( 0.00%) 126.40
halflif 45 ( 0.00%) 6665 ( 0.00%) 148.11
starcra 215 ( 0.00%) 21389 ( 0.00%) 99.48
everque 2022 ( 0.00%) 1196018 ( 0.00%) 591.50
unreal 23 ( 0.00%) 2025 ( 0.00%) 88.04
quake 12 ( 0.00%) 1337 ( 0.00%) 111.42
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 3922329 ( 7.07%) 1742386261 ( 6.23%) 444.22
icmp 1782172 ( 3.21%) 182443798 ( 0.65%) 102.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15919 ( 0.03%) 2626218 ( 0.01%) 164.97
ip6 1993833 ( 3.59%) 1563863157 ( 5.60%) 784.35
other 16528 ( 0.03%) 3662672 ( 0.01%) 221.60
frag 7941 ( 0.01%) 6183740 ( 0.02%) 778.71
ip6 717355 ( 1.29%) 946367193 ( 3.39%) 1319.25
tcp6 630747 ( 1.14%) 908519103 ( 3.25%) 1440.39
http(s) 154658 ( 0.28%) 215099076 ( 0.77%) 1390.80
http(c) 12850 ( 0.02%) 1291672 ( 0.00%) 100.52
smtp 260 ( 0.00%) 198298 ( 0.00%) 762.68
ftp 39 ( 0.00%) 3931 ( 0.00%) 100.79
pop3 171 ( 0.00%) 104243 ( 0.00%) 609.61
dns 613 ( 0.00%) 104476 ( 0.00%) 170.43
bgp 82 ( 0.00%) 11607 ( 0.00%) 141.55
other 462074 ( 0.83%) 691705800 ( 2.48%) 1496.96
udp6 68072 ( 0.12%) 34165379 ( 0.12%) 501.90
dns 51790 ( 0.09%) 17052273 ( 0.06%) 329.26
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 16280 ( 0.03%) 17112886 ( 0.06%) 1051.16
icmp6 17616 ( 0.03%) 2881262 ( 0.01%) 163.56
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 805 ( 0.00%) 785789 ( 0.00%) 976.14
tcpdump file: 201111141400.dump.gz (1409.11 MB)