Traffic Trace Info
DumpFile: 201111191400.dump
FileSize: 3892.71MB
Id: 201111191400
StartTime: Sat Nov 19 14:00:00 2011
EndTime: Sat Nov 19 14:15:00 2011
TotalTime: 900.02 seconds
TotalCapSize: -1027.72MB CapLen: 96 bytes
# of packets: 54029167 (30690.51MB)
AvgRate: 286.04Mbps stddev:60.82M
IP flow (unique src/dst pair) Information
# of flows: 2032957 (avg. 26.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 4.4% 2.7% 2.3% 1.3% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1508272
Top 10 bandwidth usage (bytes/total in %):
19.2% 11.2% 10.4% 8.6% 7.0% 4.6% 4.2% 3.0% 2.9% 2.7%
# of IPv6 addresses: 3716
Top 10 bandwidth usage (bytes/total in %):
19.2% 19.2% 18.6% 15.1% 10.7% 8.2% 8.2% 5.8% 5.3% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111191400.pktlen.png)
detailed numbers
[ 32- 63]: 16348075
[ 64- 127]: 14854527
[ 128- 255]: 1338875
[ 256- 511]: 887410
[ 512- 1023]: 1085999
[ 1024- 2047]: 19514281
Protocol Breakdown
![[protocol breakdown chart]](201111191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54029167 (100.00%) 32181331514 (100.00%) 595.63
ip 53814187 ( 99.60%) 32055813601 ( 99.61%) 595.68
tcp 44783520 ( 82.89%) 29329619208 ( 91.14%) 654.92
http(s) 15155563 ( 28.05%) 20628532400 ( 64.10%) 1361.12
http(c) 7406001 ( 13.71%) 835864874 ( 2.60%) 112.86
squid 1031822 ( 1.91%) 1113429552 ( 3.46%) 1079.09
smtp 53164 ( 0.10%) 11603980 ( 0.04%) 218.27
ftp 22573 ( 0.04%) 13399539 ( 0.04%) 593.61
pop3 2161 ( 0.00%) 390881 ( 0.00%) 180.88
imap 2274 ( 0.00%) 271979 ( 0.00%) 119.60
telnet 460 ( 0.00%) 64478 ( 0.00%) 140.17
ssh 94992 ( 0.18%) 10300578 ( 0.03%) 108.44
dns 45418 ( 0.08%) 5180439 ( 0.02%) 114.06
bgp 606 ( 0.00%) 104845 ( 0.00%) 173.01
napster 8358 ( 0.02%) 521582 ( 0.00%) 62.41
realaud 123 ( 0.00%) 7844 ( 0.00%) 63.77
rtsp 7143 ( 0.01%) 7747006 ( 0.02%) 1084.56
icecast 17411 ( 0.03%) 4205518 ( 0.01%) 241.54
hotline 139 ( 0.00%) 10568 ( 0.00%) 76.03
other 20935312 ( 38.75%) 6697983145 ( 20.81%) 319.94
udp 4715683 ( 8.73%) 1594373189 ( 4.95%) 338.10
dns 449155 ( 0.83%) 112243653 ( 0.35%) 249.90
realaud 10 ( 0.00%) 1162 ( 0.00%) 116.20
halflif 24 ( 0.00%) 3280 ( 0.00%) 136.67
starcra 47 ( 0.00%) 4090 ( 0.00%) 87.02
everque 1610 ( 0.00%) 347707 ( 0.00%) 215.97
unreal 77 ( 0.00%) 14279 ( 0.00%) 185.44
quake 44 ( 0.00%) 5732 ( 0.00%) 130.27
cuseeme 4 ( 0.00%) 362 ( 0.00%) 90.50
other 4264443 ( 7.89%) 1481696435 ( 4.60%) 347.45
icmp 1745805 ( 3.23%) 187424956 ( 0.58%) 107.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2796 ( 0.01%) 705512 ( 0.00%) 252.33
ip6 2549080 ( 4.72%) 939832973 ( 2.92%) 368.69
other 17118 ( 0.03%) 3838493 ( 0.01%) 224.24
frag 1362 ( 0.00%) 1059018 ( 0.00%) 777.55
ip6 214980 ( 0.40%) 125517913 ( 0.39%) 583.86
tcp6 120566 ( 0.22%) 90505590 ( 0.28%) 750.67
http(s) 15022 ( 0.03%) 14470040 ( 0.04%) 963.26
http(c) 11808 ( 0.02%) 1429324 ( 0.00%) 121.05
smtp 69 ( 0.00%) 22516 ( 0.00%) 326.32
ftp 29 ( 0.00%) 2749 ( 0.00%) 94.79
pop3 54 ( 0.00%) 12057 ( 0.00%) 223.28
dns 531 ( 0.00%) 87645 ( 0.00%) 165.06
bgp 88 ( 0.00%) 18565 ( 0.00%) 210.97
realaud 7 ( 0.00%) 1112 ( 0.00%) 158.86
other 92958 ( 0.17%) 74461582 ( 0.23%) 801.02
udp6 48394 ( 0.09%) 15767086 ( 0.05%) 325.81
dns 40014 ( 0.07%) 10395047 ( 0.03%) 259.79
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 8377 ( 0.02%) 5371711 ( 0.02%) 641.25
icmp6 23552 ( 0.04%) 3389065 ( 0.01%) 143.90
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22352 ( 0.04%) 15840444 ( 0.05%) 708.68
tcpdump file: 201111191400.dump.gz (1356.40 MB)