Traffic Trace Info
DumpFile: 201112021400.dump
FileSize: 3110.56MB
Id: 201112021400
StartTime: Fri Dec 2 14:00:00 2011
EndTime: Fri Dec 2 14:15:00 2011
TotalTime: 899.37 seconds
TotalCapSize: -1637.05MB CapLen: 96 bytes
# of packets: 42703064 (26393.91MB)
AvgRate: 246.18Mbps stddev:40.12M
IP flow (unique src/dst pair) Information
# of flows: 2111339 (avg. 20.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.2% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1548960
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.9% 6.5% 5.0% 4.5% 4.0% 3.6% 3.2% 2.9% 2.8%
# of IPv6 addresses: 4898
Top 10 bandwidth usage (bytes/total in %):
76.3% 76.3% 7.7% 7.7% 2.5% 1.8% 1.6% 1.6% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112021400.pktlen.png)
detailed numbers
[ 32- 63]: 10207814
[ 64- 127]: 12373923
[ 128- 255]: 1302517
[ 256- 511]: 801356
[ 512- 1023]: 884445
[ 1024- 2047]: 17133009
Protocol Breakdown
![[protocol breakdown chart]](201112021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42703064 (100.00%) 27676023153 (100.00%) 648.10
ip 42279281 ( 99.01%) 27262052474 ( 98.50%) 644.81
tcp 35111453 ( 82.22%) 24046376462 ( 86.89%) 684.86
http(s) 15013499 ( 35.16%) 20037868626 ( 72.40%) 1334.66
http(c) 10493361 ( 24.57%) 1608705257 ( 5.81%) 153.31
squid 71299 ( 0.17%) 53480264 ( 0.19%) 750.08
smtp 84922 ( 0.20%) 41416174 ( 0.15%) 487.70
nntp 34 ( 0.00%) 2118 ( 0.00%) 62.29
ftp 4573 ( 0.01%) 410261 ( 0.00%) 89.71
pop3 7999 ( 0.02%) 5582680 ( 0.02%) 697.92
imap 2660 ( 0.01%) 1594706 ( 0.01%) 599.51
telnet 1973 ( 0.00%) 166628 ( 0.00%) 84.45
ssh 164252 ( 0.38%) 26183754 ( 0.09%) 159.41
dns 54419 ( 0.13%) 6389905 ( 0.02%) 117.42
bgp 654 ( 0.00%) 132839 ( 0.00%) 203.12
napster 2323 ( 0.01%) 149338 ( 0.00%) 64.29
realaud 86 ( 0.00%) 6140 ( 0.00%) 71.40
rtsp 11994 ( 0.03%) 15336780 ( 0.06%) 1278.70
icecast 25259 ( 0.06%) 8129060 ( 0.03%) 321.83
hotline 27 ( 0.00%) 1666 ( 0.00%) 61.70
other 9171859 ( 21.48%) 2240784386 ( 8.10%) 244.31
udp 3866615 ( 9.05%) 1547090653 ( 5.59%) 400.11
dns 630882 ( 1.48%) 147817911 ( 0.53%) 234.30
rip 3 ( 0.00%) 208 ( 0.00%) 69.33
realaud 68 ( 0.00%) 7504 ( 0.00%) 110.35
halflif 45 ( 0.00%) 4200 ( 0.00%) 93.33
starcra 29 ( 0.00%) 3601 ( 0.00%) 124.17
everque 711 ( 0.00%) 151125 ( 0.00%) 212.55
unreal 21 ( 0.00%) 2485 ( 0.00%) 118.33
quake 28 ( 0.00%) 6377 ( 0.00%) 227.75
other 3129669 ( 7.33%) 1392223542 ( 5.03%) 444.85
icmp 1515788 ( 3.55%) 159760018 ( 0.58%) 105.40
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 32002 ( 0.07%) 6611244 ( 0.02%) 206.59
ip6 1737064 ( 4.07%) 1497023475 ( 5.41%) 861.81
other 16175 ( 0.04%) 5171462 ( 0.02%) 319.72
frag 222197 ( 0.52%) 169890656 ( 0.61%) 764.59
ip6 423783 ( 0.99%) 413970679 ( 1.50%) 976.85
tcp6 324641 ( 0.76%) 385997571 ( 1.39%) 1189.00
http(s) 224797 ( 0.53%) 335743698 ( 1.21%) 1493.54
http(c) 34724 ( 0.08%) 3111300 ( 0.01%) 89.60
smtp 31 ( 0.00%) 10002 ( 0.00%) 322.65
ftp 68 ( 0.00%) 6214 ( 0.00%) 91.38
pop3 77 ( 0.00%) 6867 ( 0.00%) 89.18
dns 725 ( 0.00%) 119465 ( 0.00%) 164.78
bgp 80 ( 0.00%) 11981 ( 0.00%) 149.76
other 64139 ( 0.15%) 46988044 ( 0.17%) 732.60
udp6 69914 ( 0.16%) 19834767 ( 0.07%) 283.70
dns 45335 ( 0.11%) 14101522 ( 0.05%) 311.05
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 24577 ( 0.06%) 5733044 ( 0.02%) 233.27
icmp6 22808 ( 0.05%) 3508002 ( 0.01%) 153.81
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6304 ( 0.01%) 4614561 ( 0.02%) 732.01
tcpdump file: 201112021400.dump.gz (1031.89 MB)