Traffic Trace Info
DumpFile: 201111251400.dump
FileSize: 4505.08MB
Id: 201111251400
StartTime: Fri Nov 25 14:00:01 2011
EndTime: Fri Nov 25 14:15:01 2011
TotalTime: 900.17 seconds
TotalCapSize: -520.67MB CapLen: 96 bytes
# of packets: 60931542 (39112.22MB)
AvgRate: 364.49Mbps stddev:36.46M
IP flow (unique src/dst pair) Information
# of flows: 2080469 (avg. 29.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.2% 2.1% 1.9% 1.9% 1.7% 1.6% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1503698
Top 10 bandwidth usage (bytes/total in %):
23.8% 8.1% 7.7% 4.2% 3.8% 3.6% 3.4% 3.3% 2.9% 2.4%
# of IPv6 addresses: 4391
Top 10 bandwidth usage (bytes/total in %):
81.2% 73.1% 7.1% 7.1% 3.6% 3.6% 2.4% 1.1% 1.1% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111251400.pktlen.png)
detailed numbers
[ 32- 63]: 13491055
[ 64- 127]: 18628235
[ 128- 255]: 1382706
[ 256- 511]: 894100
[ 512- 1023]: 987199
[ 1024- 2047]: 25548247
Protocol Breakdown
![[protocol breakdown chart]](201111251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60931542 (100.00%) 41012137710 (100.00%) 673.09
ip 60354601 ( 99.05%) 40581859119 ( 98.95%) 672.39
tcp 52970406 ( 86.93%) 37422966348 ( 91.25%) 706.49
http(s) 23116960 ( 37.94%) 32202621327 ( 78.52%) 1393.03
http(c) 14469187 ( 23.75%) 1770463785 ( 4.32%) 122.36
squid 184781 ( 0.30%) 158232951 ( 0.39%) 856.33
smtp 136250 ( 0.22%) 79714972 ( 0.19%) 585.06
ftp 25520 ( 0.04%) 18243915 ( 0.04%) 714.89
pop3 6965 ( 0.01%) 3634003 ( 0.01%) 521.75
imap 1634 ( 0.00%) 614750 ( 0.00%) 376.22
telnet 621 ( 0.00%) 74922 ( 0.00%) 120.65
ssh 18951 ( 0.03%) 7368500 ( 0.02%) 388.82
dns 55730 ( 0.09%) 4902733 ( 0.01%) 87.97
bgp 647 ( 0.00%) 104262 ( 0.00%) 161.15
napster 3278 ( 0.01%) 207442 ( 0.00%) 63.28
realaud 185 ( 0.00%) 24790 ( 0.00%) 134.00
rtsp 6237 ( 0.01%) 7670013 ( 0.02%) 1229.76
icecast 20963 ( 0.03%) 1643897 ( 0.00%) 78.42
hotline 132 ( 0.00%) 8276 ( 0.00%) 62.70
other 14922362 ( 24.49%) 3167435048 ( 7.72%) 212.26
udp 4400057 ( 7.22%) 1936369459 ( 4.72%) 440.08
dns 575447 ( 0.94%) 143191259 ( 0.35%) 248.83
realaud 72 ( 0.00%) 14115 ( 0.00%) 196.04
halflif 19 ( 0.00%) 1940 ( 0.00%) 102.11
starcra 96 ( 0.00%) 15035 ( 0.00%) 156.61
everque 1019 ( 0.00%) 322806 ( 0.00%) 316.79
unreal 158 ( 0.00%) 31320 ( 0.00%) 198.23
quake 13 ( 0.00%) 1118 ( 0.00%) 86.00
cuseeme 5 ( 0.00%) 383 ( 0.00%) 76.60
other 3822956 ( 6.27%) 1792732215 ( 4.37%) 468.94
icmp 1716764 ( 2.82%) 164634420 ( 0.40%) 95.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5191 ( 0.01%) 1308218 ( 0.00%) 252.02
ip6 1246472 ( 2.05%) 1053459054 ( 2.57%) 845.15
other 15526 ( 0.03%) 3102350 ( 0.01%) 199.82
frag 971 ( 0.00%) 879236 ( 0.00%) 905.50
ip6 576941 ( 0.95%) 430278591 ( 1.05%) 745.79
tcp6 440413 ( 0.72%) 370508388 ( 0.90%) 841.27
http(s) 24929 ( 0.04%) 31403584 ( 0.08%) 1259.72
http(c) 19401 ( 0.03%) 1692654 ( 0.00%) 87.25
smtp 657 ( 0.00%) 306391 ( 0.00%) 466.35
imap 10 ( 0.00%) 1486 ( 0.00%) 148.60
dns 524 ( 0.00%) 113824 ( 0.00%) 217.22
bgp 92 ( 0.00%) 13459 ( 0.00%) 146.29
other 394800 ( 0.65%) 336976990 ( 0.82%) 853.54
udp6 61948 ( 0.10%) 19222322 ( 0.05%) 310.30
dns 47609 ( 0.08%) 14807383 ( 0.04%) 311.02
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 14337 ( 0.02%) 4414726 ( 0.01%) 307.93
icmp6 21704 ( 0.04%) 3358288 ( 0.01%) 154.73
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 52760 ( 0.09%) 37173815 ( 0.09%) 704.58
tcpdump file: 201111251400.dump.gz (1479.00 MB)