Traffic Trace Info
DumpFile: 201111291400.dump
FileSize: 5122.10MB
Id: 201111291400
StartTime: Tue Nov 29 14:00:00 2011
EndTime: Tue Nov 29 14:15:01 2011
TotalTime: 900.27 seconds
TotalCapSize: -103.26MB CapLen: 96 bytes
# of packets: 74013443 (39111.95MB)
AvgRate: 364.46Mbps stddev:52.23M
IP flow (unique src/dst pair) Information
# of flows: 2267443 (avg. 32.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 4.4% 2.6% 2.4% 2.2% 2.0% 1.6% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1517989
Top 10 bandwidth usage (bytes/total in %):
8.8% 6.9% 6.8% 6.5% 6.1% 5.9% 5.7% 5.3% 4.6% 4.6%
# of IPv6 addresses: 4960
Top 10 bandwidth usage (bytes/total in %):
23.3% 9.7% 9.5% 9.4% 9.2% 9.1% 9.1% 7.9% 7.0% 7.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111291400.pktlen.png)
detailed numbers
[ 32- 63]: 28317532
[ 64- 127]: 16365832
[ 128- 255]: 1431770
[ 256- 511]: 1021056
[ 512- 1023]: 2353370
[ 1024- 2047]: 24523883
Protocol Breakdown
![[protocol breakdown chart]](201111291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 74013443 (100.00%) 41011853725 (100.00%) 554.11
ip 73598546 ( 99.44%) 40718835417 ( 99.29%) 553.26
tcp 54839822 ( 74.09%) 34781460598 ( 84.81%) 634.24
http(s) 19572437 ( 26.44%) 24504051058 ( 59.75%) 1251.97
http(c) 14018597 ( 18.94%) 4914736504 ( 11.98%) 350.59
squid 116055 ( 0.16%) 48745297 ( 0.12%) 420.02
smtp 97486 ( 0.13%) 57568827 ( 0.14%) 590.53
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 24731 ( 0.03%) 18179815 ( 0.04%) 735.10
pop3 16526 ( 0.02%) 1447978 ( 0.00%) 87.62
imap 2224 ( 0.00%) 308178 ( 0.00%) 138.57
telnet 783 ( 0.00%) 102381 ( 0.00%) 130.75
ssh 251398 ( 0.34%) 29078985 ( 0.07%) 115.67
dns 54118 ( 0.07%) 4489529 ( 0.01%) 82.96
bgp 649 ( 0.00%) 113821 ( 0.00%) 175.38
napster 2517 ( 0.00%) 160459 ( 0.00%) 63.75
realaud 172 ( 0.00%) 12510 ( 0.00%) 72.73
icecast 69385 ( 0.09%) 56660315 ( 0.14%) 816.61
hotline 137 ( 0.00%) 8914 ( 0.00%) 65.07
other 20612604 ( 27.85%) 5145795841 ( 12.55%) 249.64
udp 15943341 ( 21.54%) 4769078811 ( 11.63%) 299.13
dns 588231 ( 0.79%) 157499633 ( 0.38%) 267.75
realaud 42 ( 0.00%) 8736 ( 0.00%) 208.00
halflif 32 ( 0.00%) 4775 ( 0.00%) 149.22
starcra 138 ( 0.00%) 14541 ( 0.00%) 105.37
everque 668 ( 0.00%) 114173 ( 0.00%) 170.92
unreal 22 ( 0.00%) 3664 ( 0.00%) 166.55
quake 44 ( 0.00%) 4181 ( 0.00%) 95.02
cuseeme 7 ( 0.00%) 835 ( 0.00%) 119.29
other 14275730 ( 19.29%) 4546245576 ( 11.09%) 318.46
icmp 1525833 ( 2.06%) 148190307 ( 0.36%) 97.12
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 17766 ( 0.02%) 3527588 ( 0.01%) 198.56
ip6 1255378 ( 1.70%) 1012872787 ( 2.47%) 806.83
other 16222 ( 0.02%) 3686154 ( 0.01%) 227.23
frag 2223089 ( 3.00%) 1698248937 ( 4.14%) 763.91
ip6 414897 ( 0.56%) 293018308 ( 0.71%) 706.24
tcp6 282331 ( 0.38%) 237435323 ( 0.58%) 840.98
http(s) 67546 ( 0.09%) 91875369 ( 0.22%) 1360.19
http(c) 35779 ( 0.05%) 3070174 ( 0.01%) 85.81
squid 28 ( 0.00%) 3320 ( 0.00%) 118.57
smtp 1127 ( 0.00%) 183464 ( 0.00%) 162.79
pop3 36 ( 0.00%) 8908 ( 0.00%) 247.44
dns 702 ( 0.00%) 126692 ( 0.00%) 180.47
bgp 86 ( 0.00%) 15826 ( 0.00%) 184.02
other 177027 ( 0.24%) 142151570 ( 0.35%) 802.99
udp6 56074 ( 0.08%) 16037457 ( 0.04%) 286.01
dns 47101 ( 0.06%) 14337908 ( 0.03%) 304.41
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
cuseeme 1 ( 0.00%) 122 ( 0.00%) 122.00
other 8970 ( 0.01%) 1699212 ( 0.00%) 189.43
icmp6 25923 ( 0.04%) 3944207 ( 0.01%) 152.15
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 50457 ( 0.07%) 35586065 ( 0.09%) 705.28
tcpdump file: 201111291400.dump.gz (1663.85 MB)