Traffic Trace Info
DumpFile: 201111221400.dump
FileSize: 3541.78MB
Id: 201111221400
StartTime: Tue Nov 22 14:00:01 2011
EndTime: Tue Nov 22 14:15:00 2011
TotalTime: 899.60 seconds
TotalCapSize: -1297.25MB CapLen: 96 bytes
# of packets: 48694271 (25710.28MB)
AvgRate: 239.74Mbps stddev:33.11M
IP flow (unique src/dst pair) Information
# of flows: 1902793 (avg. 25.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.7% 2.6% 1.0% 0.9% 0.9% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1390933
Top 10 bandwidth usage (bytes/total in %):
9.0% 8.0% 6.8% 6.0% 5.6% 4.6% 4.4% 3.7% 2.9% 2.9%
# of IPv6 addresses: 4441
Top 10 bandwidth usage (bytes/total in %):
68.8% 68.7% 22.2% 11.7% 4.4% 3.0% 2.9% 2.5% 1.2% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111221400.pktlen.png)
detailed numbers
[ 32- 63]: 14796246
[ 64- 127]: 14638301
[ 128- 255]: 1258686
[ 256- 511]: 826891
[ 512- 1023]: 792419
[ 1024- 2047]: 16381728
Protocol Breakdown
![[protocol breakdown chart]](201111221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48694271 (100.00%) 26959186942 (100.00%) 553.64
ip 47829132 ( 98.22%) 25938444436 ( 96.21%) 542.31
tcp 41921475 ( 86.09%) 24250240151 ( 89.95%) 578.47
http(s) 13187391 ( 27.08%) 17174738848 ( 63.71%) 1302.36
http(c) 10283026 ( 21.12%) 1729270390 ( 6.41%) 168.17
squid 120064 ( 0.25%) 85634804 ( 0.32%) 713.24
smtp 83053 ( 0.17%) 24082440 ( 0.09%) 289.96
ftp 25251 ( 0.05%) 16302614 ( 0.06%) 645.62
pop3 7262 ( 0.01%) 2958782 ( 0.01%) 407.43
imap 3478 ( 0.01%) 1135949 ( 0.00%) 326.61
telnet 525 ( 0.00%) 92097 ( 0.00%) 175.42
ssh 41302 ( 0.08%) 25040317 ( 0.09%) 606.27
dns 51457 ( 0.11%) 7463837 ( 0.03%) 145.05
bgp 640 ( 0.00%) 113887 ( 0.00%) 177.95
napster 6891 ( 0.01%) 431846 ( 0.00%) 62.67
realaud 248 ( 0.00%) 18961 ( 0.00%) 76.46
rtsp 11468 ( 0.02%) 11952574 ( 0.04%) 1042.25
icecast 12678 ( 0.03%) 1103109 ( 0.00%) 87.01
hotline 91 ( 0.00%) 5712 ( 0.00%) 62.77
other 18086647 ( 37.14%) 5169893192 ( 19.18%) 285.84
udp 3294402 ( 6.77%) 1063667668 ( 3.95%) 322.87
dns 657874 ( 1.35%) 172236602 ( 0.64%) 261.81
realaud 74 ( 0.00%) 13904 ( 0.00%) 187.89
halflif 36 ( 0.00%) 4358 ( 0.00%) 121.06
starcra 27 ( 0.00%) 2641 ( 0.00%) 97.81
everque 455 ( 0.00%) 98901 ( 0.00%) 217.36
unreal 93 ( 0.00%) 15052 ( 0.00%) 161.85
quake 23 ( 0.00%) 2320 ( 0.00%) 100.87
cuseeme 3 ( 0.00%) 558 ( 0.00%) 186.00
other 2634186 ( 5.41%) 891123290 ( 3.31%) 338.29
icmp 1711195 ( 3.51%) 173464123 ( 0.64%) 101.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 28027 ( 0.06%) 7200386 ( 0.03%) 256.91
ip6 858003 ( 1.76%) 439990070 ( 1.63%) 512.81
other 15845 ( 0.03%) 3862768 ( 0.01%) 243.78
frag 6949 ( 0.01%) 5338497 ( 0.02%) 768.24
ip6 865139 ( 1.78%) 1020742506 ( 3.79%) 1179.86
tcp6 575867 ( 1.18%) 781261578 ( 2.90%) 1356.67
http(s) 20092 ( 0.04%) 23712861 ( 0.09%) 1180.21
http(c) 21292 ( 0.04%) 2068852 ( 0.01%) 97.17
smtp 545 ( 0.00%) 234590 ( 0.00%) 430.44
dns 310 ( 0.00%) 70973 ( 0.00%) 228.95
bgp 91 ( 0.00%) 16823 ( 0.00%) 184.87
other 533537 ( 1.10%) 755157479 ( 2.80%) 1415.38
udp6 261172 ( 0.54%) 234611579 ( 0.87%) 898.30
dns 45570 ( 0.09%) 13849771 ( 0.05%) 303.92
starcra 7 ( 0.00%) 989 ( 0.00%) 141.29
other 215595 ( 0.44%) 220760819 ( 0.82%) 1023.96
icmp6 26993 ( 0.06%) 3948916 ( 0.01%) 146.29
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 993 ( 0.00%) 904941 ( 0.00%) 911.32
tcpdump file: 201111221400.dump.gz (1215.78 MB)