Traffic Trace Info
DumpFile: 201111161400.dump
FileSize: 4999.52MB
Id: 201111161400
StartTime: Wed Nov 16 14:00:00 2011
EndTime: Wed Nov 16 14:15:00 2011
TotalTime: 900.04 seconds
TotalCapSize: -146.05MB CapLen: 96 bytes
# of packets: 68784381 (37440.34MB)
AvgRate: 348.98Mbps stddev:46.30M
IP flow (unique src/dst pair) Information
# of flows: 2080440 (avg. 33.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.2% 3.3% 2.5% 1.8% 1.7% 1.7% 1.5% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1520399
Top 10 bandwidth usage (bytes/total in %):
10.8% 9.9% 9.3% 6.9% 6.7% 5.8% 5.3% 4.8% 4.4% 3.4%
# of IPv6 addresses: 4424
Top 10 bandwidth usage (bytes/total in %):
33.2% 32.7% 21.1% 11.6% 11.5% 11.3% 9.3% 6.9% 4.3% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111161400.pktlen.png)
detailed numbers
[ 32- 63]: 20786981
[ 64- 127]: 19598602
[ 128- 255]: 1557726
[ 256- 511]: 1003153
[ 512- 1023]: 2526081
[ 1024- 2047]: 23311838
Protocol Breakdown
![[protocol breakdown chart]](201111161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 68784381 (100.00%) 39259044953 (100.00%) 570.76
ip 68519979 ( 99.62%) 39062170721 ( 99.50%) 570.08
tcp 59039464 ( 85.83%) 36208297251 ( 92.23%) 613.29
http(s) 19538105 ( 28.40%) 24947417368 ( 63.55%) 1276.86
http(c) 14341877 ( 20.85%) 4197528984 ( 10.69%) 292.68
squid 110415 ( 0.16%) 75014844 ( 0.19%) 679.39
smtp 95168 ( 0.14%) 63637691 ( 0.16%) 668.69
ftp 52274 ( 0.08%) 32634910 ( 0.08%) 624.30
pop3 5516 ( 0.01%) 996969 ( 0.00%) 180.74
imap 2473 ( 0.00%) 838331 ( 0.00%) 338.99
telnet 400 ( 0.00%) 60318 ( 0.00%) 150.79
ssh 61595 ( 0.09%) 12002304 ( 0.03%) 194.86
dns 55904 ( 0.08%) 7808578 ( 0.02%) 139.68
bgp 704 ( 0.00%) 182412 ( 0.00%) 259.11
napster 1388 ( 0.00%) 88368 ( 0.00%) 63.67
realaud 277 ( 0.00%) 26037 ( 0.00%) 94.00
rtsp 9182 ( 0.01%) 9045121 ( 0.02%) 985.09
icecast 56146 ( 0.08%) 45012873 ( 0.11%) 801.71
hotline 155 ( 0.00%) 9772 ( 0.00%) 63.05
other 24707885 ( 35.92%) 6815992371 ( 17.36%) 275.86
udp 4773730 ( 6.94%) 1580314376 ( 4.03%) 331.04
dns 654450 ( 0.95%) 171480069 ( 0.44%) 262.02
realaud 12 ( 0.00%) 1817 ( 0.00%) 151.42
halflif 132 ( 0.00%) 9610 ( 0.00%) 72.80
starcra 17 ( 0.00%) 1898 ( 0.00%) 111.65
everque 606 ( 0.00%) 153047 ( 0.00%) 252.55
unreal 321 ( 0.00%) 48186 ( 0.00%) 150.11
quake 21 ( 0.00%) 2767 ( 0.00%) 131.76
cuseeme 13 ( 0.00%) 1354 ( 0.00%) 104.15
other 4118034 ( 5.99%) 1408544333 ( 3.59%) 342.04
icmp 1691299 ( 2.46%) 188664126 ( 0.48%) 111.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 21373 ( 0.03%) 5850782 ( 0.01%) 273.75
ip6 2947268 ( 4.28%) 1028327980 ( 2.62%) 348.91
other 46660 ( 0.07%) 50696936 ( 0.13%) 1086.52
frag 829 ( 0.00%) 839872 ( 0.00%) 1013.11
ip6 264402 ( 0.38%) 196874232 ( 0.50%) 744.60
tcp6 188388 ( 0.27%) 176696797 ( 0.45%) 937.94
http(s) 68556 ( 0.10%) 91203332 ( 0.23%) 1330.35
http(c) 39159 ( 0.06%) 3569900 ( 0.01%) 91.16
smtp 624 ( 0.00%) 424695 ( 0.00%) 680.60
ftp 284 ( 0.00%) 37866 ( 0.00%) 133.33
pop3 77 ( 0.00%) 6867 ( 0.00%) 89.18
imap 17 ( 0.00%) 2486 ( 0.00%) 146.24
dns 837 ( 0.00%) 154576 ( 0.00%) 184.68
bgp 81 ( 0.00%) 11460 ( 0.00%) 141.48
other 78753 ( 0.11%) 81285615 ( 0.21%) 1032.16
udp6 56986 ( 0.08%) 16328653 ( 0.04%) 286.54
dns 53670 ( 0.08%) 15711574 ( 0.04%) 292.74
realaud 1 ( 0.00%) 123 ( 0.00%) 123.00
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3312 ( 0.00%) 616640 ( 0.00%) 186.18
icmp6 17833 ( 0.03%) 2925270 ( 0.01%) 164.04
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1078 ( 0.00%) 907648 ( 0.00%) 841.97
tcpdump file: 201111161400.dump.gz (1739.22 MB)