Traffic Trace Info
DumpFile: 201111241400.dump
FileSize: 3600.24MB
Id: 201111241400
StartTime: Thu Nov 24 14:00:01 2011
EndTime: Thu Nov 24 14:15:00 2011
TotalTime: 899.39 seconds
TotalCapSize: -1259.83MB CapLen: 96 bytes
# of packets: 50073368 (31931.23MB)
AvgRate: 297.78Mbps stddev:36.99M
IP flow (unique src/dst pair) Information
# of flows: 1905787 (avg. 26.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.6% 1.2% 1.1% 1.1% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1384871
Top 10 bandwidth usage (bytes/total in %):
13.3% 9.2% 8.3% 7.7% 4.2% 4.2% 4.0% 3.9% 3.4% 3.2%
# of IPv6 addresses: 4218
Top 10 bandwidth usage (bytes/total in %):
34.9% 34.9% 22.9% 12.5% 3.9% 3.2% 3.2% 3.0% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111241400.pktlen.png)
detailed numbers
[ 32- 63]: 13167915
[ 64- 127]: 13041891
[ 128- 255]: 1289114
[ 256- 511]: 698784
[ 512- 1023]: 804202
[ 1024- 2047]: 21071462
Protocol Breakdown
![[protocol breakdown chart]](201111241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50073368 (100.00%) 33482326649 (100.00%) 668.67
ip 49897777 ( 99.65%) 33414840193 ( 99.80%) 669.67
tcp 42725115 ( 85.33%) 30401169884 ( 90.80%) 711.55
http(s) 15820038 ( 31.59%) 21410899252 ( 63.95%) 1353.40
http(c) 9157561 ( 18.29%) 1130081701 ( 3.38%) 123.40
squid 298119 ( 0.60%) 201010106 ( 0.60%) 674.26
smtp 91747 ( 0.18%) 37814825 ( 0.11%) 412.16
ftp 25842 ( 0.05%) 17649223 ( 0.05%) 682.97
pop3 8117 ( 0.02%) 4958341 ( 0.01%) 610.86
imap 3566 ( 0.01%) 1737025 ( 0.01%) 487.11
telnet 943 ( 0.00%) 95107 ( 0.00%) 100.86
ssh 45516 ( 0.09%) 7372079 ( 0.02%) 161.97
dns 51870 ( 0.10%) 4272010 ( 0.01%) 82.36
bgp 655 ( 0.00%) 118103 ( 0.00%) 180.31
napster 7750 ( 0.02%) 487146 ( 0.00%) 62.86
realaud 108 ( 0.00%) 8007 ( 0.00%) 74.14
rtsp 6236 ( 0.01%) 7661688 ( 0.02%) 1228.62
icecast 12974 ( 0.03%) 1170601 ( 0.00%) 90.23
hotline 79 ( 0.00%) 5586 ( 0.00%) 70.71
other 17193993 ( 34.34%) 7575829024 ( 22.63%) 440.61
udp 4626362 ( 9.24%) 1978787069 ( 5.91%) 427.72
dns 588097 ( 1.17%) 152083559 ( 0.45%) 258.60
realaud 6 ( 0.00%) 568 ( 0.00%) 94.67
halflif 15 ( 0.00%) 1310 ( 0.00%) 87.33
starcra 97 ( 0.00%) 17714 ( 0.00%) 182.62
everque 433 ( 0.00%) 77623 ( 0.00%) 179.27
unreal 70 ( 0.00%) 6872 ( 0.00%) 98.17
quake 18 ( 0.00%) 1980 ( 0.00%) 110.00
cuseeme 24 ( 0.00%) 1546 ( 0.00%) 64.42
other 4033422 ( 8.06%) 1826282884 ( 5.45%) 452.79
icmp 1467093 ( 2.93%) 142450858 ( 0.43%) 97.10
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 379 ( 0.00%) 143714 ( 0.00%) 379.19
ip6 1062619 ( 2.12%) 887250031 ( 2.65%) 834.97
other 16025 ( 0.03%) 5019477 ( 0.01%) 313.23
frag 12351 ( 0.02%) 10324754 ( 0.03%) 835.94
ip6 175591 ( 0.35%) 67486456 ( 0.20%) 384.34
tcp6 107679 ( 0.22%) 48848206 ( 0.15%) 453.65
http(s) 31387 ( 0.06%) 40399374 ( 0.12%) 1287.14
http(c) 71455 ( 0.14%) 6152382 ( 0.02%) 86.10
smtp 1976 ( 0.00%) 567622 ( 0.00%) 287.26
pop3 18 ( 0.00%) 4069 ( 0.00%) 226.06
dns 473 ( 0.00%) 106438 ( 0.00%) 225.03
bgp 114 ( 0.00%) 35822 ( 0.00%) 314.23
other 2256 ( 0.00%) 1582499 ( 0.00%) 701.46
udp6 44745 ( 0.09%) 14614202 ( 0.04%) 326.61
dns 43629 ( 0.09%) 14454259 ( 0.04%) 331.30
realaud 2 ( 0.00%) 215 ( 0.00%) 107.50
unreal 1 ( 0.00%) 93 ( 0.00%) 93.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1112 ( 0.00%) 159528 ( 0.00%) 143.46
icmp6 22606 ( 0.05%) 3579869 ( 0.01%) 158.36
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 447 ( 0.00%) 428687 ( 0.00%) 959.03
tcpdump file: 201111241400.dump.gz (1207.78 MB)