Traffic Trace Info
DumpFile: 201111171400.dump
FileSize: 4615.46MB
Id: 201111171400
StartTime: Thu Nov 17 14:00:00 2011
EndTime: Thu Nov 17 14:15:00 2011
TotalTime: 900.35 seconds
TotalCapSize: -447.92MB CapLen: 96 bytes
# of packets: 63398070 (31169.17MB)
AvgRate: 290.45Mbps stddev:39.20M
IP flow (unique src/dst pair) Information
# of flows: 1992721 (avg. 31.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.4% 2.4% 2.3% 2.2% 1.7% 1.4% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1466892
Top 10 bandwidth usage (bytes/total in %):
13.3% 9.8% 7.9% 6.3% 5.3% 4.1% 3.4% 2.7% 2.7% 2.4%
# of IPv6 addresses: 4248
Top 10 bandwidth usage (bytes/total in %):
25.1% 14.0% 10.4% 10.4% 8.8% 6.1% 5.8% 5.1% 5.0% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111171400.pktlen.png)
detailed numbers
[ 32- 63]: 20510550
[ 64- 127]: 19947833
[ 128- 255]: 1532599
[ 256- 511]: 952415
[ 512- 1023]: 872775
[ 1024- 2047]: 19581898
Protocol Breakdown
![[protocol breakdown chart]](201111171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 63398070 (100.00%) 32683245992 (100.00%) 515.52
ip 63135761 ( 99.59%) 32573358870 ( 99.66%) 515.93
tcp 52581186 ( 82.94%) 29206724906 ( 89.36%) 555.46
http(s) 15372980 ( 24.25%) 20792594894 ( 63.62%) 1352.54
http(c) 10213822 ( 16.11%) 1190321526 ( 3.64%) 116.54
squid 504724 ( 0.80%) 556858793 ( 1.70%) 1103.29
smtp 70751 ( 0.11%) 24218658 ( 0.07%) 342.31
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 55124 ( 0.09%) 35255048 ( 0.11%) 639.56
pop3 7422 ( 0.01%) 4455282 ( 0.01%) 600.28
imap 6225 ( 0.01%) 3811149 ( 0.01%) 612.23
telnet 475 ( 0.00%) 64494 ( 0.00%) 135.78
ssh 59173 ( 0.09%) 11362902 ( 0.03%) 192.03
dns 48528 ( 0.08%) 5802833 ( 0.02%) 119.58
bgp 636 ( 0.00%) 118882 ( 0.00%) 186.92
napster 8901 ( 0.01%) 559126 ( 0.00%) 62.82
realaud 322 ( 0.00%) 26241 ( 0.00%) 81.49
rtsp 12379 ( 0.02%) 15343199 ( 0.05%) 1239.45
icecast 24339 ( 0.04%) 2453541 ( 0.01%) 100.81
hotline 183 ( 0.00%) 11909 ( 0.00%) 65.08
other 26195199 ( 41.32%) 6563466243 ( 20.08%) 250.56
udp 5795722 ( 9.14%) 2040634430 ( 6.24%) 352.09
dns 650135 ( 1.03%) 164693097 ( 0.50%) 253.32
realaud 15 ( 0.00%) 2250 ( 0.00%) 150.00
halflif 14 ( 0.00%) 1470 ( 0.00%) 105.00
starcra 16 ( 0.00%) 2675 ( 0.00%) 167.19
everque 911 ( 0.00%) 155822 ( 0.00%) 171.05
unreal 223 ( 0.00%) 36807 ( 0.00%) 165.05
quake 25 ( 0.00%) 2429 ( 0.00%) 97.16
cuseeme 3 ( 0.00%) 283 ( 0.00%) 94.33
other 5144106 ( 8.11%) 1875655240 ( 5.74%) 364.62
icmp 1654666 ( 2.61%) 173984452 ( 0.53%) 105.15
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26189 ( 0.04%) 5959278 ( 0.02%) 227.55
ip6 2844226 ( 4.49%) 934414628 ( 2.86%) 328.53
other 233587 ( 0.37%) 211621906 ( 0.65%) 905.97
frag 1079 ( 0.00%) 984878 ( 0.00%) 912.77
ip6 262309 ( 0.41%) 109887122 ( 0.34%) 418.92
tcp6 173780 ( 0.27%) 83056227 ( 0.25%) 477.94
http(s) 30453 ( 0.05%) 36245892 ( 0.11%) 1190.22
http(c) 84284 ( 0.13%) 6740366 ( 0.02%) 79.97
smtp 437 ( 0.00%) 222437 ( 0.00%) 509.01
ftp 99 ( 0.00%) 9019 ( 0.00%) 91.10
pop3 7640 ( 0.01%) 11421879 ( 0.03%) 1495.01
imap 72 ( 0.00%) 15466 ( 0.00%) 214.81
ssh 3983 ( 0.01%) 390791 ( 0.00%) 98.11
dns 616 ( 0.00%) 103244 ( 0.00%) 167.60
bgp 89 ( 0.00%) 16364 ( 0.00%) 183.87
other 46107 ( 0.07%) 27890769 ( 0.09%) 604.91
udp6 63105 ( 0.10%) 17872709 ( 0.05%) 283.22
dns 58963 ( 0.09%) 17407349 ( 0.05%) 295.22
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 1 ( 0.00%) 95 ( 0.00%) 95.00
unreal 1 ( 0.00%) 117 ( 0.00%) 117.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 4136 ( 0.01%) 464708 ( 0.00%) 112.36
icmp6 16799 ( 0.03%) 2797657 ( 0.01%) 166.54
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8512 ( 0.01%) 6145155 ( 0.02%) 721.94
tcpdump file: 201111171400.dump.gz (1627.17 MB)