Traffic Trace Info
DumpFile: 201111281400.dump
FileSize: 3275.36MB
Id: 201111281400
StartTime: Mon Nov 28 14:00:00 2011
EndTime: Mon Nov 28 14:15:00 2011
TotalTime: 899.65 seconds
TotalCapSize: -1524.08MB CapLen: 96 bytes
# of packets: 46100157 (31848.89MB)
AvgRate: 297.01Mbps stddev:49.44M
IP flow (unique src/dst pair) Information
# of flows: 1893134 (avg. 24.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.0% 2.4% 2.1% 1.5% 1.5% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1398119
Top 10 bandwidth usage (bytes/total in %):
20.2% 13.4% 10.5% 5.5% 5.5% 4.1% 3.6% 3.1% 3.1% 3.0%
# of IPv6 addresses: 4715
Top 10 bandwidth usage (bytes/total in %):
30.2% 30.2% 12.0% 12.0% 8.5% 8.5% 7.1% 7.0% 6.2% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111281400.pktlen.png)
detailed numbers
[ 32- 63]: 9802553
[ 64- 127]: 11945096
[ 128- 255]: 1346807
[ 256- 511]: 861798
[ 512- 1023]: 891519
[ 1024- 2047]: 21252384
Protocol Breakdown
![[protocol breakdown chart]](201111281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46100157 (100.00%) 33395976660 (100.00%) 724.42
ip 44992515 ( 97.60%) 33192470134 ( 99.39%) 737.73
tcp 36978579 ( 80.21%) 29152801178 ( 87.29%) 788.37
http(s) 14263069 ( 30.94%) 18958429515 ( 56.77%) 1329.20
http(c) 8974092 ( 19.47%) 1538188013 ( 4.61%) 171.40
squid 75039 ( 0.16%) 40322938 ( 0.12%) 537.36
smtp 129927 ( 0.28%) 105645678 ( 0.32%) 813.12
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 27412 ( 0.06%) 19483500 ( 0.06%) 710.77
pop3 5236 ( 0.01%) 1796954 ( 0.01%) 343.19
imap 2573 ( 0.01%) 908277 ( 0.00%) 353.00
telnet 708 ( 0.00%) 84497 ( 0.00%) 119.35
ssh 174489 ( 0.38%) 24286292 ( 0.07%) 139.19
dns 54345 ( 0.12%) 4572508 ( 0.01%) 84.14
bgp 612 ( 0.00%) 85102 ( 0.00%) 139.06
napster 418 ( 0.00%) 32473 ( 0.00%) 77.69
realaud 130 ( 0.00%) 13180 ( 0.00%) 101.38
rtsp 6239 ( 0.01%) 7677010 ( 0.02%) 1230.49
icecast 31103 ( 0.07%) 11651156 ( 0.03%) 374.60
hotline 54 ( 0.00%) 3400 ( 0.00%) 62.96
other 13233127 ( 28.71%) 8439620311 ( 25.27%) 637.76
udp 5338113 ( 11.58%) 2753030984 ( 8.24%) 515.73
dns 551780 ( 1.20%) 137519043 ( 0.41%) 249.23
rip 13 ( 0.00%) 1009 ( 0.00%) 77.62
realaud 73 ( 0.00%) 14784 ( 0.00%) 202.52
halflif 40 ( 0.00%) 6336 ( 0.00%) 158.40
starcra 57 ( 0.00%) 12129 ( 0.00%) 212.79
everque 679 ( 0.00%) 160677 ( 0.00%) 236.64
unreal 20 ( 0.00%) 2079 ( 0.00%) 103.95
quake 84 ( 0.00%) 8259 ( 0.00%) 98.32
cuseeme 4 ( 0.00%) 417 ( 0.00%) 104.25
other 4724549 ( 10.25%) 2611385761 ( 7.82%) 552.73
icmp 1452827 ( 3.15%) 144369778 ( 0.43%) 99.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14175 ( 0.03%) 1960378 ( 0.01%) 138.30
ip6 1194377 ( 2.59%) 1136252855 ( 3.40%) 951.34
other 14259 ( 0.03%) 4035691 ( 0.01%) 283.03
frag 126370 ( 0.27%) 95391033 ( 0.29%) 754.86
ip6 1107642 ( 2.40%) 203506526 ( 0.61%) 183.73
tcp6 1009418 ( 2.19%) 166654820 ( 0.50%) 165.10
http(s) 20364 ( 0.04%) 20709672 ( 0.06%) 1016.97
http(c) 861228 ( 1.87%) 64306780 ( 0.19%) 74.67
smtp 380 ( 0.00%) 272898 ( 0.00%) 718.15
dns 537 ( 0.00%) 90511 ( 0.00%) 168.55
bgp 91 ( 0.00%) 16128 ( 0.00%) 177.23
other 126818 ( 0.28%) 81258831 ( 0.24%) 640.75
udp6 71117 ( 0.15%) 31490100 ( 0.09%) 442.79
dns 48877 ( 0.11%) 14505080 ( 0.04%) 296.77
everque 2 ( 0.00%) 230 ( 0.00%) 115.00
quake 1 ( 0.00%) 96 ( 0.00%) 96.00
other 22237 ( 0.05%) 16984694 ( 0.05%) 763.80
icmp6 24844 ( 0.05%) 3708411 ( 0.01%) 149.27
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2150 ( 0.00%) 1637771 ( 0.00%) 761.75
tcpdump file: 201111281400.dump.gz (1082.95 MB)