Traffic Trace Info
DumpFile: 201111151400.dump
FileSize: 4241.42MB
Id: 201111151400
StartTime: Tue Nov 15 14:00:00 2011
EndTime: Tue Nov 15 14:15:00 2011
TotalTime: 900.04 seconds
TotalCapSize: -753.02MB CapLen: 96 bytes
# of packets: 58879459 (30139.56MB)
AvgRate: 280.90Mbps stddev:36.61M
IP flow (unique src/dst pair) Information
# of flows: 2115368 (avg. 27.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.8% 2.5% 2.2% 2.2% 2.2% 1.8% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1531459
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.7% 10.7% 5.3% 4.3% 4.2% 4.0% 3.3% 3.1% 2.8%
# of IPv6 addresses: 4303
Top 10 bandwidth usage (bytes/total in %):
33.3% 18.8% 14.5% 12.8% 12.7% 9.3% 6.4% 6.0% 5.4% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111151400.pktlen.png)
detailed numbers
[ 32- 63]: 18257832
[ 64- 127]: 16979540
[ 128- 255]: 1738031
[ 256- 511]: 1193910
[ 512- 1023]: 2233558
[ 1024- 2047]: 18476588
Protocol Breakdown
![[protocol breakdown chart]](201111151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58879459 (100.00%) 31603614462 (100.00%) 536.75
ip 58667782 ( 99.64%) 31485918578 ( 99.63%) 536.68
tcp 48950451 ( 83.14%) 28789040737 ( 91.09%) 588.13
http(s) 14325623 ( 24.33%) 17031181045 ( 53.89%) 1188.86
http(c) 13319754 ( 22.62%) 4486152085 ( 14.20%) 336.80
squid 115960 ( 0.20%) 94961368 ( 0.30%) 818.91
smtp 89996 ( 0.15%) 43529175 ( 0.14%) 483.68
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 63545 ( 0.11%) 31575532 ( 0.10%) 496.90
pop3 5565 ( 0.01%) 3146750 ( 0.01%) 565.45
imap 4652 ( 0.01%) 2213770 ( 0.01%) 475.87
telnet 718 ( 0.00%) 80764 ( 0.00%) 112.48
ssh 78907 ( 0.13%) 14402393 ( 0.05%) 182.52
dns 48880 ( 0.08%) 4053937 ( 0.01%) 82.94
bgp 636 ( 0.00%) 110834 ( 0.00%) 174.27
napster 5879 ( 0.01%) 367321 ( 0.00%) 62.48
realaud 115 ( 0.00%) 7236 ( 0.00%) 62.92
rtsp 11321 ( 0.02%) 11297871 ( 0.04%) 997.96
icecast 12721 ( 0.02%) 886740 ( 0.00%) 69.71
hotline 136 ( 0.00%) 9586 ( 0.00%) 70.49
other 20866042 ( 35.44%) 7065064268 ( 22.36%) 338.59
udp 5032632 ( 8.55%) 1477381154 ( 4.67%) 293.56
dns 633628 ( 1.08%) 164838165 ( 0.52%) 260.15
realaud 66 ( 0.00%) 12286 ( 0.00%) 186.15
halflif 42 ( 0.00%) 7360 ( 0.00%) 175.24
starcra 41 ( 0.00%) 5208 ( 0.00%) 127.02
everque 9371 ( 0.02%) 8864145 ( 0.03%) 945.91
unreal 46 ( 0.00%) 7673 ( 0.00%) 166.80
quake 16 ( 0.00%) 2510 ( 0.00%) 156.88
cuseeme 2 ( 0.00%) 152 ( 0.00%) 76.00
other 4387388 ( 7.45%) 1303409823 ( 4.12%) 297.08
icmp 1864612 ( 3.17%) 204800650 ( 0.65%) 109.84
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 50461 ( 0.09%) 14111358 ( 0.04%) 279.65
ip6 2753504 ( 4.68%) 997110414 ( 3.16%) 362.12
other 15938 ( 0.03%) 3455105 ( 0.01%) 216.78
frag 19814 ( 0.03%) 14976610 ( 0.05%) 755.86
ip6 211677 ( 0.36%) 117695884 ( 0.37%) 556.02
tcp6 141491 ( 0.24%) 97938883 ( 0.31%) 692.19
http(s) 22251 ( 0.04%) 20100920 ( 0.06%) 903.37
http(c) 42152 ( 0.07%) 3613372 ( 0.01%) 85.72
smtp 11883 ( 0.02%) 15176132 ( 0.05%) 1277.13
ftp 25 ( 0.00%) 2223 ( 0.00%) 88.92
pop3 199 ( 0.00%) 107464 ( 0.00%) 540.02
ssh 322 ( 0.00%) 39033 ( 0.00%) 121.22
dns 630 ( 0.00%) 103926 ( 0.00%) 164.96
bgp 82 ( 0.00%) 11511 ( 0.00%) 140.38
other 63947 ( 0.11%) 58784302 ( 0.19%) 919.27
udp6 52469 ( 0.09%) 16240338 ( 0.05%) 309.52
dns 49139 ( 0.08%) 15720934 ( 0.05%) 319.93
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
starcra 1 ( 0.00%) 102 ( 0.00%) 102.00
cuseeme 2 ( 0.00%) 228 ( 0.00%) 114.00
other 3326 ( 0.01%) 518957 ( 0.00%) 156.03
icmp6 16732 ( 0.03%) 2688288 ( 0.01%) 160.67
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 873 ( 0.00%) 813119 ( 0.00%) 931.41
tcpdump file: 201111151400.dump.gz (1493.96 MB)