Traffic Trace Info
DumpFile: 201112011400.dump
FileSize: 3347.20MB
Id: 201112011400
StartTime: Thu Dec 1 14:00:00 2011
EndTime: Thu Dec 1 14:15:00 2011
TotalTime: 899.82 seconds
TotalCapSize: -1452.29MB CapLen: 96 bytes
# of packets: 46103423 (28507.98MB)
AvgRate: 265.76Mbps stddev:41.98M
IP flow (unique src/dst pair) Information
# of flows: 2100500 (avg. 21.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.6% 3.0% 2.9% 2.2% 1.4% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1471712
Top 10 bandwidth usage (bytes/total in %):
13.3% 8.7% 8.2% 4.9% 4.8% 4.8% 4.8% 4.2% 3.7% 3.2%
# of IPv6 addresses: 4669
Top 10 bandwidth usage (bytes/total in %):
23.2% 23.1% 15.4% 9.5% 7.5% 7.5% 7.0% 6.9% 5.5% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112011400.pktlen.png)
detailed numbers
[ 32- 63]: 11847287
[ 64- 127]: 13003134
[ 128- 255]: 1158386
[ 256- 511]: 756561
[ 512- 1023]: 804380
[ 1024- 2047]: 18533675
Protocol Breakdown
![[protocol breakdown chart]](201112011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46103423 (100.00%) 29892784516 (100.00%) 648.39
ip 45866925 ( 99.49%) 29735751842 ( 99.47%) 648.30
tcp 38663219 ( 83.86%) 26549387595 ( 88.82%) 686.68
http(s) 16622877 ( 36.06%) 22401755614 ( 74.94%) 1347.65
http(c) 9970067 ( 21.63%) 1213665627 ( 4.06%) 121.73
squid 155596 ( 0.34%) 133943030 ( 0.45%) 860.84
smtp 80252 ( 0.17%) 39637888 ( 0.13%) 493.92
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 31403 ( 0.07%) 21237518 ( 0.07%) 676.29
pop3 4058 ( 0.01%) 1164411 ( 0.00%) 286.94
imap 1520 ( 0.00%) 340962 ( 0.00%) 224.32
telnet 441 ( 0.00%) 62848 ( 0.00%) 142.51
ssh 110522 ( 0.24%) 87953927 ( 0.29%) 795.80
dns 48009 ( 0.10%) 3947559 ( 0.01%) 82.23
bgp 650 ( 0.00%) 125985 ( 0.00%) 193.82
napster 9300 ( 0.02%) 584585 ( 0.00%) 62.86
realaud 55 ( 0.00%) 3937 ( 0.00%) 71.58
rtsp 11296 ( 0.02%) 13797086 ( 0.05%) 1221.41
icecast 46867 ( 0.10%) 30644380 ( 0.10%) 653.86
hotline 56 ( 0.00%) 3634 ( 0.00%) 64.89
other 11570232 ( 25.10%) 2600517482 ( 8.70%) 224.76
udp 4594126 ( 9.96%) 2049593178 ( 6.86%) 446.13
dns 671651 ( 1.46%) 155878800 ( 0.52%) 232.08
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 50 ( 0.00%) 5112 ( 0.00%) 102.24
halflif 26 ( 0.00%) 2694 ( 0.00%) 103.62
starcra 26 ( 0.00%) 2388 ( 0.00%) 91.85
everque 781 ( 0.00%) 177766 ( 0.00%) 227.61
unreal 19 ( 0.00%) 1843 ( 0.00%) 97.00
quake 11 ( 0.00%) 1641 ( 0.00%) 149.18
cuseeme 7 ( 0.00%) 1192 ( 0.00%) 170.29
other 3920601 ( 8.50%) 1893311564 ( 6.33%) 482.91
icmp 1439779 ( 3.12%) 143349276 ( 0.48%) 99.56
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8105 ( 0.02%) 2159030 ( 0.01%) 266.38
ip6 1145001 ( 2.48%) 985527880 ( 3.30%) 860.72
other 16510 ( 0.04%) 5715613 ( 0.02%) 346.19
frag 5632 ( 0.01%) 4944120 ( 0.02%) 877.86
ip6 236498 ( 0.51%) 157032674 ( 0.53%) 663.99
tcp6 137739 ( 0.30%) 122676277 ( 0.41%) 890.64
http(s) 36016 ( 0.08%) 41589559 ( 0.14%) 1154.75
http(c) 18188 ( 0.04%) 1864372 ( 0.01%) 102.51
smtp 424 ( 0.00%) 133514 ( 0.00%) 314.89
ftp 110 ( 0.00%) 10735 ( 0.00%) 97.59
imap 18 ( 0.00%) 2361 ( 0.00%) 131.17
dns 731 ( 0.00%) 130047 ( 0.00%) 177.90
bgp 97 ( 0.00%) 21323 ( 0.00%) 219.82
other 82155 ( 0.18%) 78924366 ( 0.26%) 960.68
udp6 54173 ( 0.12%) 15424972 ( 0.05%) 284.74
dns 51581 ( 0.11%) 15112434 ( 0.05%) 292.98
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
other 2591 ( 0.01%) 312425 ( 0.00%) 120.58
icmp6 22886 ( 0.05%) 3609556 ( 0.01%) 157.72
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 21585 ( 0.05%) 15306241 ( 0.05%) 709.11
tcpdump file: 201112011400.dump.gz (1131.48 MB)