Traffic Trace Info
DumpFile: 201112041400.dump
FileSize: 1913.01MB
Id: 201112041400
StartTime: Sun Dec 4 14:00:01 2011
EndTime: Sun Dec 4 14:15:01 2011
TotalTime: 899.89 seconds
TotalCapSize: 1496.33MB CapLen: 96 bytes
# of packets: 27302399 (21353.67MB)
AvgRate: 199.05Mbps stddev:56.36M
IP flow (unique src/dst pair) Information
# of flows: 555832 (avg. 49.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.3% 1.1% 1.1% 1.0% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 342680
Top 10 bandwidth usage (bytes/total in %):
33.9% 17.5% 4.2% 3.3% 3.3% 3.2% 3.1% 2.5% 2.2% 1.9%
# of IPv6 addresses: 4484
Top 10 bandwidth usage (bytes/total in %):
20.3% 19.7% 17.9% 17.0% 16.8% 10.7% 8.3% 7.8% 7.5% 7.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112041400.pktlen.png)
detailed numbers
[ 32- 63]: 5884679
[ 64- 127]: 5288376
[ 128- 255]: 945224
[ 256- 511]: 407089
[ 512- 1023]: 413640
[ 1024- 2047]: 14363391
Protocol Breakdown
![[protocol breakdown chart]](201112041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27302399 (100.00%) 22390941167 (100.00%) 820.11
ip 26908685 ( 98.56%) 22287194637 ( 99.54%) 828.25
tcp 22400464 ( 82.05%) 19815016966 ( 88.50%) 884.58
http(s) 10434896 ( 38.22%) 14513013010 ( 64.82%) 1390.82
http(c) 4475928 ( 16.39%) 408717601 ( 1.83%) 91.31
squid 43624 ( 0.16%) 31648921 ( 0.14%) 725.49
smtp 59278 ( 0.22%) 8760129 ( 0.04%) 147.78
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 32102 ( 0.12%) 19151535 ( 0.09%) 596.58
pop3 3682 ( 0.01%) 255477 ( 0.00%) 69.39
imap 890 ( 0.00%) 123118 ( 0.00%) 138.33
telnet 663 ( 0.00%) 79740 ( 0.00%) 120.27
ssh 115322 ( 0.42%) 8856523 ( 0.04%) 76.80
dns 38547 ( 0.14%) 4576874 ( 0.02%) 118.73
bgp 633 ( 0.00%) 106123 ( 0.00%) 167.65
napster 124 ( 0.00%) 8179 ( 0.00%) 65.96
realaud 18 ( 0.00%) 1110 ( 0.00%) 61.67
rtsp 6244 ( 0.02%) 7670493 ( 0.03%) 1228.46
icecast 2533 ( 0.01%) 851022 ( 0.00%) 335.97
hotline 91 ( 0.00%) 7882 ( 0.00%) 86.62
other 7185888 ( 26.32%) 4811189169 ( 21.49%) 669.53
udp 3066281 ( 11.23%) 1382861193 ( 6.18%) 450.99
dns 323819 ( 1.19%) 72650917 ( 0.32%) 224.36
realaud 2 ( 0.00%) 278 ( 0.00%) 139.00
halflif 17 ( 0.00%) 3041 ( 0.00%) 178.88
starcra 38 ( 0.00%) 5066 ( 0.00%) 133.32
everque 213 ( 0.00%) 39041 ( 0.00%) 183.29
unreal 15 ( 0.00%) 2202 ( 0.00%) 146.80
quake 15 ( 0.00%) 1320 ( 0.00%) 88.00
cuseeme 3 ( 0.00%) 316 ( 0.00%) 105.33
other 2742091 ( 10.04%) 1310121271 ( 5.85%) 477.78
icmp 212687 ( 0.78%) 62229924 ( 0.28%) 292.59
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2818 ( 0.01%) 712316 ( 0.00%) 252.77
ip6 1214922 ( 4.45%) 1022060213 ( 4.56%) 841.26
other 11328 ( 0.04%) 4294755 ( 0.02%) 379.13
frag 312 ( 0.00%) 310828 ( 0.00%) 996.24
ip6 393714 ( 1.44%) 103746530 ( 0.46%) 263.51
tcp6 275014 ( 1.01%) 56628089 ( 0.25%) 205.91
http(s) 2488 ( 0.01%) 2278681 ( 0.01%) 915.87
http(c) 4326 ( 0.02%) 474881 ( 0.00%) 109.77
smtp 102 ( 0.00%) 63519 ( 0.00%) 622.74
ftp 85 ( 0.00%) 10347 ( 0.00%) 121.73
pop3 132 ( 0.00%) 18226 ( 0.00%) 138.08
dns 368 ( 0.00%) 73198 ( 0.00%) 198.91
bgp 88 ( 0.00%) 16518 ( 0.00%) 187.70
other 267425 ( 0.98%) 53692719 ( 0.24%) 200.78
udp6 53013 ( 0.19%) 16464799 ( 0.07%) 310.58
dns 27941 ( 0.10%) 6856546 ( 0.03%) 245.39
starcra 1 ( 0.00%) 112 ( 0.00%) 112.00
other 25071 ( 0.09%) 9608141 ( 0.04%) 383.24
icmp6 27750 ( 0.10%) 3973168 ( 0.02%) 143.18
ip6 60 ( 0.00%) 8630 ( 0.00%) 143.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 37847 ( 0.14%) 26667764 ( 0.12%) 704.62
tcpdump file: 201112041400.dump.gz (613.14 MB)