Traffic Trace Info
DumpFile: 201111301400.dump
FileSize: 4348.28MB
Id: 201111301400
StartTime: Wed Nov 30 14:00:01 2011
EndTime: Wed Nov 30 14:15:00 2011
TotalTime: 899.60 seconds
TotalCapSize: -673.01MB CapLen: 96 bytes
# of packets: 60638467 (28989.74MB)
AvgRate: 270.34Mbps stddev:48.56M
IP flow (unique src/dst pair) Information
# of flows: 2168201 (avg. 27.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.9% 1.2% 1.2% 1.1% 1.1% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 1432709
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.0% 5.4% 5.2% 4.9% 3.6% 3.5% 3.5% 3.1% 3.1%
# of IPv6 addresses: 4787
Top 10 bandwidth usage (bytes/total in %):
15.8% 15.2% 14.6% 14.5% 10.6% 10.6% 10.1% 5.8% 5.0% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111301400.pktlen.png)
detailed numbers
[ 32- 63]: 21963950
[ 64- 127]: 17238485
[ 128- 255]: 1323962
[ 256- 511]: 790444
[ 512- 1023]: 1029230
[ 1024- 2047]: 18292396
Protocol Breakdown
![[protocol breakdown chart]](201111301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60638467 (100.00%) 30397949713 (100.00%) 501.30
ip 60279895 ( 99.41%) 30195443350 ( 99.33%) 500.92
tcp 53427097 ( 88.11%) 27456947230 ( 90.32%) 513.91
http(s) 15716055 ( 25.92%) 20904058666 ( 68.77%) 1330.11
http(c) 11154762 ( 18.40%) 1550095241 ( 5.10%) 138.96
squid 85496 ( 0.14%) 52316111 ( 0.17%) 611.91
smtp 97270 ( 0.16%) 62141464 ( 0.20%) 638.86
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 26136 ( 0.04%) 19299965 ( 0.06%) 738.44
pop3 6171 ( 0.01%) 848479 ( 0.00%) 137.49
imap 1337 ( 0.00%) 244724 ( 0.00%) 183.04
telnet 431 ( 0.00%) 62246 ( 0.00%) 144.42
ssh 13166 ( 0.02%) 2564387 ( 0.01%) 194.77
dns 60974 ( 0.10%) 5463453 ( 0.02%) 89.60
bgp 637 ( 0.00%) 106211 ( 0.00%) 166.74
napster 1093 ( 0.00%) 70378 ( 0.00%) 64.39
realaud 176 ( 0.00%) 11863 ( 0.00%) 67.40
rtsp 12961 ( 0.02%) 15359959 ( 0.05%) 1185.09
icecast 80668 ( 0.13%) 60262967 ( 0.20%) 747.05
hotline 195 ( 0.00%) 12244 ( 0.00%) 62.79
other 26169560 ( 43.16%) 4784028326 ( 15.74%) 182.81
udp 4450475 ( 7.34%) 1975916778 ( 6.50%) 443.98
dns 619509 ( 1.02%) 151591215 ( 0.50%) 244.70
realaud 14 ( 0.00%) 2038 ( 0.00%) 145.57
halflif 19 ( 0.00%) 2603 ( 0.00%) 137.00
starcra 82 ( 0.00%) 8417 ( 0.00%) 102.65
everque 3154 ( 0.01%) 2605325 ( 0.01%) 826.04
unreal 38 ( 0.00%) 3232 ( 0.00%) 85.05
quake 10 ( 0.00%) 1181 ( 0.00%) 118.10
cuseeme 4 ( 0.00%) 337 ( 0.00%) 84.25
other 3823152 ( 6.30%) 1821368445 ( 5.99%) 476.40
icmp 1558804 ( 2.57%) 153466322 ( 0.50%) 98.45
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 34815 ( 0.06%) 8221386 ( 0.03%) 236.14
ip6 793300 ( 1.31%) 597310504 ( 1.96%) 752.94
other 15219 ( 0.03%) 3561860 ( 0.01%) 234.04
frag 9574 ( 0.02%) 7387873 ( 0.02%) 771.66
ip6 358572 ( 0.59%) 202506363 ( 0.67%) 564.76
tcp6 193405 ( 0.32%) 119454383 ( 0.39%) 617.64
http(s) 22150 ( 0.04%) 24269690 ( 0.08%) 1095.70
http(c) 70197 ( 0.12%) 6183158 ( 0.02%) 88.08
squid 59 ( 0.00%) 6174 ( 0.00%) 104.64
smtp 359 ( 0.00%) 142375 ( 0.00%) 396.59
ftp 25 ( 0.00%) 2233 ( 0.00%) 89.32
dns 628 ( 0.00%) 108628 ( 0.00%) 172.97
bgp 165 ( 0.00%) 100026 ( 0.00%) 606.22
other 99822 ( 0.16%) 88642099 ( 0.29%) 888.00
udp6 86521 ( 0.14%) 44145214 ( 0.15%) 510.23
dns 47954 ( 0.08%) 14059124 ( 0.05%) 293.18
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
other 38564 ( 0.06%) 30085773 ( 0.10%) 780.15
icmp6 29555 ( 0.05%) 4329563 ( 0.01%) 146.49
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48979 ( 0.08%) 34561947 ( 0.11%) 705.65
tcpdump file: 201111301400.dump.gz (1552.15 MB)