Traffic Trace Info
DumpFile: 201111211400.dump
FileSize: 3380.93MB
Id: 201111211400
StartTime: Mon Nov 21 14:00:00 2011
EndTime: Mon Nov 21 14:15:01 2011
TotalTime: 900.75 seconds
TotalCapSize: -1430.70MB CapLen: 96 bytes
# of packets: 46899496 (25010.65MB)
AvgRate: 232.87Mbps stddev:39.41M
IP flow (unique src/dst pair) Information
# of flows: 1989021 (avg. 23.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 4.4% 1.4% 1.3% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 1445454
Top 10 bandwidth usage (bytes/total in %):
10.1% 10.1% 8.6% 6.0% 5.3% 4.6% 4.5% 4.0% 3.7% 3.3%
# of IPv6 addresses: 5157
Top 10 bandwidth usage (bytes/total in %):
23.7% 16.7% 12.6% 9.1% 7.7% 7.6% 5.7% 5.2% 5.0% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111211400.pktlen.png)
detailed numbers
[ 32- 63]: 14143433
[ 64- 127]: 13496234
[ 128- 255]: 1547775
[ 256- 511]: 911651
[ 512- 1023]: 800644
[ 1024- 2047]: 15999759
Protocol Breakdown
![[protocol breakdown chart]](201111211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46899496 (100.00%) 26225567394 (100.00%) 559.19
ip 46712646 ( 99.60%) 26133420175 ( 99.65%) 559.45
tcp 39756283 ( 84.77%) 23427861759 ( 89.33%) 589.29
http(s) 12587800 ( 26.84%) 16424235458 ( 62.63%) 1304.77
http(c) 8120341 ( 17.31%) 1351187448 ( 5.15%) 166.40
squid 229610 ( 0.49%) 47523293 ( 0.18%) 206.97
smtp 131488 ( 0.28%) 106745456 ( 0.41%) 811.83
ftp 32416 ( 0.07%) 19167122 ( 0.07%) 591.29
pop3 8125 ( 0.02%) 3025388 ( 0.01%) 372.36
imap 4194 ( 0.01%) 800270 ( 0.00%) 190.81
telnet 655 ( 0.00%) 76628 ( 0.00%) 116.99
ssh 15113 ( 0.03%) 2852910 ( 0.01%) 188.77
dns 47172 ( 0.10%) 5549226 ( 0.02%) 117.64
bgp 609 ( 0.00%) 95565 ( 0.00%) 156.92
napster 2330 ( 0.00%) 147432 ( 0.00%) 63.28
realaud 3894 ( 0.01%) 245580 ( 0.00%) 63.07
rtsp 12096 ( 0.03%) 14654484 ( 0.06%) 1211.51
icecast 13487 ( 0.03%) 1598499 ( 0.01%) 118.52
hotline 134 ( 0.00%) 11206 ( 0.00%) 83.63
other 18546818 ( 39.55%) 5449945734 ( 20.78%) 293.85
udp 4301572 ( 9.17%) 1876102772 ( 7.15%) 436.14
dns 625506 ( 1.33%) 163354763 ( 0.62%) 261.16
realaud 20 ( 0.00%) 1934 ( 0.00%) 96.70
halflif 31 ( 0.00%) 2556 ( 0.00%) 82.45
starcra 62 ( 0.00%) 4966 ( 0.00%) 80.10
everque 3486 ( 0.01%) 3137639 ( 0.01%) 900.07
unreal 101 ( 0.00%) 18319 ( 0.00%) 181.38
quake 18 ( 0.00%) 1833 ( 0.00%) 101.83
cuseeme 5 ( 0.00%) 427 ( 0.00%) 85.40
other 3672050 ( 7.83%) 1709509137 ( 6.52%) 465.55
icmp 1699355 ( 3.62%) 191164281 ( 0.73%) 112.49
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 43115 ( 0.09%) 10203090 ( 0.04%) 236.65
ip6 897257 ( 1.91%) 624965887 ( 2.38%) 696.53
other 14880 ( 0.03%) 3103214 ( 0.01%) 208.55
frag 1085 ( 0.00%) 995836 ( 0.00%) 917.82
ip6 186850 ( 0.40%) 92147219 ( 0.35%) 493.16
tcp6 77649 ( 0.17%) 60548228 ( 0.23%) 779.77
http(s) 5989 ( 0.01%) 5798408 ( 0.02%) 968.18
http(c) 6791 ( 0.01%) 1368391 ( 0.01%) 201.50
smtp 557 ( 0.00%) 195652 ( 0.00%) 351.26
ftp 33 ( 0.00%) 2886 ( 0.00%) 87.45
ssh 1287 ( 0.00%) 1150777 ( 0.00%) 894.15
dns 811 ( 0.00%) 121848 ( 0.00%) 150.24
bgp 92 ( 0.00%) 16075 ( 0.00%) 174.73
other 62089 ( 0.13%) 51894191 ( 0.20%) 835.80
udp6 71697 ( 0.15%) 19547627 ( 0.07%) 272.64
dns 61538 ( 0.13%) 15338695 ( 0.06%) 249.26
realaud 1 ( 0.00%) 90 ( 0.00%) 90.00
halflif 2 ( 0.00%) 227 ( 0.00%) 113.50
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 6 ( 0.00%) 652 ( 0.00%) 108.67
cuseeme 2 ( 0.00%) 210 ( 0.00%) 105.00
other 10145 ( 0.02%) 4207432 ( 0.02%) 414.73
icmp6 26330 ( 0.06%) 4084177 ( 0.02%) 155.11
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11143 ( 0.02%) 7962971 ( 0.03%) 714.62
tcpdump file: 201111211400.dump.gz (1163.21 MB)