Traffic Trace Info
DumpFile: 201112031400.dump
FileSize: 2555.59MB
Id: 201112031400
StartTime: Sat Dec 3 14:00:00 2011
EndTime: Sat Dec 3 14:15:00 2011
TotalTime: 899.93 seconds
TotalCapSize: 2010.72MB CapLen: 96 bytes
# of packets: 35706086 (24020.77MB)
AvgRate: 223.91Mbps stddev:61.44M
IP flow (unique src/dst pair) Information
# of flows: 860931 (avg. 41.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.2% 1.3% 1.3% 1.2% 1.2% 1.2% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 453684
Top 10 bandwidth usage (bytes/total in %):
25.2% 12.6% 10.1% 4.9% 4.4% 3.3% 3.2% 3.1% 3.0% 2.2%
# of IPv6 addresses: 4018
Top 10 bandwidth usage (bytes/total in %):
27.8% 21.0% 20.9% 20.2% 15.0% 9.4% 9.4% 5.4% 3.9% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112031400.pktlen.png)
detailed numbers
[ 32- 63]: 8860726
[ 64- 127]: 8876088
[ 128- 255]: 927017
[ 256- 511]: 649458
[ 512- 1023]: 524752
[ 1024- 2047]: 15868045
Protocol Breakdown
![[protocol breakdown chart]](201112031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35706086 (100.00%) 25187597776 (100.00%) 705.41
ip 35478615 ( 99.36%) 25066568432 ( 99.52%) 706.53
tcp 30531858 ( 85.51%) 22922290361 ( 91.01%) 750.77
http(s) 11814734 ( 33.09%) 16145481628 ( 64.10%) 1366.55
http(c) 6839754 ( 19.16%) 877846631 ( 3.49%) 128.34
squid 73227 ( 0.21%) 43392342 ( 0.17%) 592.57
smtp 86122 ( 0.24%) 31468125 ( 0.12%) 365.39
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 49054 ( 0.14%) 19418751 ( 0.08%) 395.86
pop3 1852 ( 0.01%) 172610 ( 0.00%) 93.20
imap 979 ( 0.00%) 199109 ( 0.00%) 203.38
telnet 756 ( 0.00%) 83447 ( 0.00%) 110.38
ssh 45566 ( 0.13%) 5127655 ( 0.02%) 112.53
dns 48564 ( 0.14%) 3778566 ( 0.02%) 77.81
bgp 700 ( 0.00%) 124478 ( 0.00%) 177.83
napster 173 ( 0.00%) 12154 ( 0.00%) 70.25
realaud 174 ( 0.00%) 11891 ( 0.00%) 68.34
rtsp 136483 ( 0.38%) 200362050 ( 0.80%) 1468.04
icecast 32856 ( 0.09%) 17600240 ( 0.07%) 535.68
hotline 50 ( 0.00%) 3470 ( 0.00%) 69.40
other 11400810 ( 31.93%) 5577206960 ( 22.14%) 489.19
udp 3403557 ( 9.53%) 1263082459 ( 5.01%) 371.11
dns 476356 ( 1.33%) 110179304 ( 0.44%) 231.30
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 23 ( 0.00%) 1856 ( 0.00%) 80.70
halflif 30 ( 0.00%) 3864 ( 0.00%) 128.80
starcra 80 ( 0.00%) 15129 ( 0.00%) 189.11
everque 495 ( 0.00%) 101866 ( 0.00%) 205.79
unreal 9 ( 0.00%) 1387 ( 0.00%) 154.11
quake 13 ( 0.00%) 998 ( 0.00%) 76.77
cuseeme 13 ( 0.00%) 1149 ( 0.00%) 88.38
other 2926101 ( 8.19%) 1152549710 ( 4.58%) 393.89
icmp 388642 ( 1.09%) 90100074 ( 0.36%) 231.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3061 ( 0.01%) 792078 ( 0.00%) 258.76
ip6 1139653 ( 3.19%) 785171644 ( 3.12%) 688.96
other 11659 ( 0.03%) 5112546 ( 0.02%) 438.51
frag 2757 ( 0.01%) 2691145 ( 0.01%) 976.11
ip6 227471 ( 0.64%) 121029344 ( 0.48%) 532.06
tcp6 132283 ( 0.37%) 88067239 ( 0.35%) 665.75
http(s) 8206 ( 0.02%) 9496793 ( 0.04%) 1157.30
http(c) 8873 ( 0.02%) 937375 ( 0.00%) 105.64
smtp 115 ( 0.00%) 48847 ( 0.00%) 424.76
ftp 43 ( 0.00%) 3918 ( 0.00%) 91.12
pop3 77 ( 0.00%) 6867 ( 0.00%) 89.18
dns 230 ( 0.00%) 52586 ( 0.00%) 228.63
bgp 85 ( 0.00%) 11504 ( 0.00%) 135.34
other 114654 ( 0.32%) 77509349 ( 0.31%) 676.03
udp6 52707 ( 0.15%) 17972068 ( 0.07%) 340.98
dns 31065 ( 0.09%) 8006671 ( 0.03%) 257.74
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 3 ( 0.00%) 313 ( 0.00%) 104.33
other 21638 ( 0.06%) 9964983 ( 0.04%) 460.53
icmp6 26790 ( 0.08%) 3931738 ( 0.02%) 146.76
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 15578 ( 0.04%) 11042907 ( 0.04%) 708.88
tcpdump file: 201112031400.dump.gz (851.14 MB)