Traffic Trace Info
DumpFile: 201111181400.dump
FileSize: 3975.48MB
Id: 201111181400
StartTime: Fri Nov 18 14:00:00 2011
EndTime: Fri Nov 18 14:15:00 2011
TotalTime: 899.94 seconds
TotalCapSize: -945.33MB CapLen: 96 bytes
# of packets: 54053747 (31567.11MB)
AvgRate: 294.22Mbps stddev:40.27M
IP flow (unique src/dst pair) Information
# of flows: 2096753 (avg. 25.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.8% 2.8% 2.6% 1.9% 1.5% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1589224
Top 10 bandwidth usage (bytes/total in %):
9.6% 8.6% 7.0% 6.9% 6.9% 5.2% 4.1% 3.0% 2.9% 2.9%
# of IPv6 addresses: 4348
Top 10 bandwidth usage (bytes/total in %):
77.3% 72.1% 8.6% 4.9% 3.0% 2.5% 2.5% 2.2% 2.2% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111181400.pktlen.png)
detailed numbers
[ 32- 63]: 13668186
[ 64- 127]: 16610662
[ 128- 255]: 1652752
[ 256- 511]: 871010
[ 512- 1023]: 909743
[ 1024- 2047]: 20341394
Protocol Breakdown
![[protocol breakdown chart]](201111181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54053747 (100.00%) 33100518834 (100.00%) 612.36
ip 53233227 ( 98.48%) 32535398184 ( 98.29%) 611.19
tcp 43343172 ( 80.19%) 29531861558 ( 89.22%) 681.35
http(s) 17213873 ( 31.85%) 23230116269 ( 70.18%) 1349.50
http(c) 10491544 ( 19.41%) 1694565542 ( 5.12%) 161.52
squid 751089 ( 1.39%) 834218272 ( 2.52%) 1110.68
smtp 96892 ( 0.18%) 63198926 ( 0.19%) 652.26
ftp 32206 ( 0.06%) 18036858 ( 0.05%) 560.05
pop3 8091 ( 0.01%) 5694847 ( 0.02%) 703.85
imap 1762 ( 0.00%) 251781 ( 0.00%) 142.90
telnet 1070 ( 0.00%) 106624 ( 0.00%) 99.65
ssh 25987 ( 0.05%) 4305747 ( 0.01%) 165.69
dns 49966 ( 0.09%) 4179080 ( 0.01%) 83.64
bgp 661 ( 0.00%) 134793 ( 0.00%) 203.92
napster 604 ( 0.00%) 39286 ( 0.00%) 65.04
realaud 521 ( 0.00%) 41572 ( 0.00%) 79.79
rtsp 7057 ( 0.01%) 7706610 ( 0.02%) 1092.05
icecast 20323 ( 0.04%) 4073045 ( 0.01%) 200.42
hotline 145 ( 0.00%) 12096 ( 0.00%) 83.42
other 14641381 ( 27.09%) 3665180210 ( 11.07%) 250.33
udp 4759129 ( 8.80%) 1471649550 ( 4.45%) 309.23
dns 612156 ( 1.13%) 156470778 ( 0.47%) 255.61
realaud 26 ( 0.00%) 3597 ( 0.00%) 138.35
halflif 15 ( 0.00%) 1827 ( 0.00%) 121.80
starcra 74 ( 0.00%) 6858 ( 0.00%) 92.68
everque 659 ( 0.00%) 138592 ( 0.00%) 210.31
unreal 69 ( 0.00%) 15228 ( 0.00%) 220.70
quake 42 ( 0.00%) 4886 ( 0.00%) 116.33
cuseeme 2 ( 0.00%) 160 ( 0.00%) 80.00
other 4145741 ( 7.67%) 1314909704 ( 3.97%) 317.17
icmp 1884225 ( 3.49%) 229317325 ( 0.69%) 121.70
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9263 ( 0.02%) 1529258 ( 0.00%) 165.09
ip6 3221029 ( 5.96%) 1297285306 ( 3.92%) 402.75
other 16224 ( 0.03%) 3735917 ( 0.01%) 230.27
frag 1191 ( 0.00%) 1122478 ( 0.00%) 942.47
ip6 820520 ( 1.52%) 565120650 ( 1.71%) 688.73
tcp6 648614 ( 1.20%) 479347942 ( 1.45%) 739.03
http(s) 26799 ( 0.05%) 33118626 ( 0.10%) 1235.82
http(c) 16411 ( 0.03%) 1775129 ( 0.01%) 108.17
smtp 845 ( 0.00%) 438903 ( 0.00%) 519.41
pop3 71 ( 0.00%) 6320 ( 0.00%) 89.01
ssh 10338 ( 0.02%) 957906 ( 0.00%) 92.66
dns 654 ( 0.00%) 108985 ( 0.00%) 166.64
bgp 90 ( 0.00%) 15688 ( 0.00%) 174.31
other 593406 ( 1.10%) 442926385 ( 1.34%) 746.41
udp6 87034 ( 0.16%) 39337827 ( 0.12%) 451.98
dns 59958 ( 0.11%) 16424229 ( 0.05%) 273.93
quake 1 ( 0.00%) 94 ( 0.00%) 94.00
cuseeme 1 ( 0.00%) 119 ( 0.00%) 119.00
other 27074 ( 0.05%) 22913385 ( 0.07%) 846.32
icmp6 23777 ( 0.04%) 3552844 ( 0.01%) 149.42
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 60982 ( 0.11%) 42866613 ( 0.13%) 702.94
tcpdump file: 201111181400.dump.gz (1334.58 MB)