Traffic Trace Info
DumpFile: 201111201400.dump
FileSize: 2922.74MB
Id: 201111201400
StartTime: Sun Nov 20 14:00:01 2011
EndTime: Sun Nov 20 14:15:00 2011
TotalTime: 899.53 seconds
TotalCapSize: -1795.40MB CapLen: 96 bytes
# of packets: 40772004 (22974.14MB)
AvgRate: 214.25Mbps stddev:53.28M
IP flow (unique src/dst pair) Information
# of flows: 1972487 (avg. 20.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.8% 2.5% 1.7% 1.7% 1.5% 1.3% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1477068
Top 10 bandwidth usage (bytes/total in %):
34.2% 5.2% 4.6% 3.6% 3.5% 3.4% 3.0% 2.9% 2.9% 2.7%
# of IPv6 addresses: 3723
Top 10 bandwidth usage (bytes/total in %):
50.4% 50.4% 16.4% 9.6% 6.7% 5.9% 5.9% 5.6% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111201400.pktlen.png)
detailed numbers
[ 32- 63]: 12222811
[ 64- 127]: 11419009
[ 128- 255]: 1312270
[ 256- 511]: 623556
[ 512- 1023]: 665334
[ 1024- 2047]: 14529024
Protocol Breakdown
![[protocol breakdown chart]](201111201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40772004 (100.00%) 24090136391 (100.00%) 590.85
ip 40539080 ( 99.43%) 23923020340 ( 99.31%) 590.12
tcp 31530745 ( 77.33%) 21482008068 ( 89.17%) 681.30
http(s) 12657751 ( 31.05%) 17316977532 ( 71.88%) 1368.09
http(c) 5878892 ( 14.42%) 827942632 ( 3.44%) 140.83
squid 74022 ( 0.18%) 49920778 ( 0.21%) 674.40
smtp 32324 ( 0.08%) 6303668 ( 0.03%) 195.02
ftp 31490 ( 0.08%) 18764813 ( 0.08%) 595.90
pop3 2816 ( 0.01%) 2208466 ( 0.01%) 784.26
imap 943 ( 0.00%) 168354 ( 0.00%) 178.53
telnet 417 ( 0.00%) 61412 ( 0.00%) 147.27
ssh 23933 ( 0.06%) 4461784 ( 0.02%) 186.43
dns 38113 ( 0.09%) 3045263 ( 0.01%) 79.90
bgp 633 ( 0.00%) 102172 ( 0.00%) 161.41
napster 6268 ( 0.02%) 398163 ( 0.00%) 63.52
realaud 122 ( 0.00%) 7644 ( 0.00%) 62.66
rtsp 177 ( 0.00%) 18824 ( 0.00%) 106.35
icecast 34506 ( 0.08%) 17809555 ( 0.07%) 516.13
hotline 102 ( 0.00%) 6486 ( 0.00%) 63.59
other 12748235 ( 31.27%) 3233810462 ( 13.42%) 253.67
udp 4063614 ( 9.97%) 1118107765 ( 4.64%) 275.15
dns 399688 ( 0.98%) 92203155 ( 0.38%) 230.69
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 6 ( 0.00%) 570 ( 0.00%) 95.00
halflif 172 ( 0.00%) 11150 ( 0.00%) 64.83
starcra 18 ( 0.00%) 1442 ( 0.00%) 80.11
everque 376 ( 0.00%) 96221 ( 0.00%) 255.91
unreal 75 ( 0.00%) 14456 ( 0.00%) 192.75
quake 16 ( 0.00%) 2221 ( 0.00%) 138.81
cuseeme 2 ( 0.00%) 178 ( 0.00%) 89.00
other 3663023 ( 8.98%) 1025743712 ( 4.26%) 280.03
icmp 1767484 ( 4.34%) 195953729 ( 0.81%) 110.87
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2612 ( 0.01%) 633224 ( 0.00%) 242.43
ip6 3158963 ( 7.75%) 1122975798 ( 4.66%) 355.49
other 15477 ( 0.04%) 3322486 ( 0.01%) 214.67
frag 1036 ( 0.00%) 1000638 ( 0.00%) 965.87
ip6 232924 ( 0.57%) 167116051 ( 0.69%) 717.47
tcp6 118354 ( 0.29%) 122545665 ( 0.51%) 1035.42
http(s) 9138 ( 0.02%) 8662852 ( 0.04%) 948.00
http(c) 5294 ( 0.01%) 692326 ( 0.00%) 130.78
squid 11 ( 0.00%) 9507 ( 0.00%) 864.27
smtp 241 ( 0.00%) 236906 ( 0.00%) 983.01
dns 531 ( 0.00%) 84575 ( 0.00%) 159.27
bgp 92 ( 0.00%) 16053 ( 0.00%) 174.49
other 103047 ( 0.25%) 112843446 ( 0.47%) 1095.07
udp6 50080 ( 0.12%) 13261630 ( 0.06%) 264.81
dns 42532 ( 0.10%) 10510780 ( 0.04%) 247.13
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 114 ( 0.00%) 114.00
other 7546 ( 0.02%) 2750629 ( 0.01%) 364.51
icmp6 25144 ( 0.06%) 3614875 ( 0.02%) 143.77
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 39231 ( 0.10%) 27678221 ( 0.11%) 705.52
tcpdump file: 201111201400.dump.gz (1034.12 MB)