Traffic Trace Info
DumpFile: 201111231400.dump
FileSize: 3113.90MB
Id: 201111231400
StartTime: Wed Nov 23 14:00:00 2011
EndTime: Wed Nov 23 14:15:00 2011
TotalTime: 900.07 seconds
TotalCapSize: -1649.77MB CapLen: 96 bytes
# of packets: 43755954 (23086.82MB)
AvgRate: 215.12Mbps stddev:31.58M
IP flow (unique src/dst pair) Information
# of flows: 1785572 (avg. 24.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.0% 1.2% 1.2% 1.0% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1333306
Top 10 bandwidth usage (bytes/total in %):
9.6% 8.8% 7.6% 6.2% 4.7% 3.8% 3.4% 3.2% 3.1% 3.0%
# of IPv6 addresses: 4209
Top 10 bandwidth usage (bytes/total in %):
43.5% 18.5% 14.0% 13.9% 13.8% 11.1% 9.1% 4.7% 4.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111231400.pktlen.png)
detailed numbers
[ 32- 63]: 15483288
[ 64- 127]: 10831281
[ 128- 255]: 1389565
[ 256- 511]: 656712
[ 512- 1023]: 771519
[ 1024- 2047]: 14623589
Protocol Breakdown
![[protocol breakdown chart]](201111231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43755954 (100.00%) 24208288632 (100.00%) 553.26
ip 43479258 ( 99.37%) 24064918750 ( 99.41%) 553.48
tcp 36594609 ( 83.63%) 21283884409 ( 87.92%) 581.61
http(s) 10152808 ( 23.20%) 13540666335 ( 55.93%) 1333.69
http(c) 4755497 ( 10.87%) 668018455 ( 2.76%) 140.47
squid 74906 ( 0.17%) 47085013 ( 0.19%) 628.59
smtp 54590 ( 0.12%) 13174785 ( 0.05%) 241.34
nntp 1 ( 0.00%) 66 ( 0.00%) 66.00
ftp 32697 ( 0.07%) 16868441 ( 0.07%) 515.90
pop3 3359 ( 0.01%) 2373301 ( 0.01%) 706.55
imap 620 ( 0.00%) 215060 ( 0.00%) 346.87
telnet 1076 ( 0.00%) 102876 ( 0.00%) 95.61
ssh 17322 ( 0.04%) 2892812 ( 0.01%) 167.00
dns 40817 ( 0.09%) 3096534 ( 0.01%) 75.86
bgp 698 ( 0.00%) 156915 ( 0.00%) 224.81
napster 4585 ( 0.01%) 287286 ( 0.00%) 62.66
realaud 160 ( 0.00%) 10008 ( 0.00%) 62.55
icecast 27687 ( 0.06%) 16943980 ( 0.07%) 611.98
hotline 123 ( 0.00%) 7846 ( 0.00%) 63.79
other 21427663 ( 48.97%) 6971984696 ( 28.80%) 325.37
udp 3777916 ( 8.63%) 1610429541 ( 6.65%) 426.27
dns 524516 ( 1.20%) 147416105 ( 0.61%) 281.05
realaud 12 ( 0.00%) 2000 ( 0.00%) 166.67
halflif 19 ( 0.00%) 2499 ( 0.00%) 131.53
starcra 40 ( 0.00%) 4305 ( 0.00%) 107.62
everque 352 ( 0.00%) 87236 ( 0.00%) 247.83
unreal 14 ( 0.00%) 2166 ( 0.00%) 154.71
quake 18 ( 0.00%) 1880 ( 0.00%) 104.44
cuseeme 5 ( 0.00%) 402 ( 0.00%) 80.40
other 3252667 ( 7.43%) 1462857790 ( 6.04%) 449.74
icmp 1702435 ( 3.89%) 193201569 ( 0.80%) 113.49
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2782 ( 0.01%) 703124 ( 0.00%) 252.74
ip6 1384124 ( 3.16%) 973231560 ( 4.02%) 703.14
other 17207 ( 0.04%) 3449277 ( 0.01%) 200.46
frag 991 ( 0.00%) 921390 ( 0.00%) 929.76
ip6 276696 ( 0.63%) 143369882 ( 0.59%) 518.15
tcp6 100400 ( 0.23%) 58758955 ( 0.24%) 585.25
http(s) 19424 ( 0.04%) 18857413 ( 0.08%) 970.83
http(c) 39731 ( 0.09%) 3591604 ( 0.01%) 90.40
smtp 125 ( 0.00%) 41261 ( 0.00%) 330.09
dns 577 ( 0.00%) 110084 ( 0.00%) 190.79
bgp 92 ( 0.00%) 20136 ( 0.00%) 218.87
other 40451 ( 0.09%) 36138457 ( 0.15%) 893.39
udp6 57731 ( 0.13%) 12643781 ( 0.05%) 219.01
dns 34883 ( 0.08%) 9261395 ( 0.04%) 265.50
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 22846 ( 0.05%) 3382162 ( 0.01%) 148.04
icmp6 20829 ( 0.05%) 3288089 ( 0.01%) 157.86
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 97622 ( 0.22%) 68663565 ( 0.28%) 703.36
tcpdump file: 201111231400.dump.gz (1101.51 MB)