Traffic Trace Info
DumpFile: 201112051400.dump
FileSize: 2926.37MB
Id: 201112051400
StartTime: Mon Dec 5 14:00:01 2011
EndTime: Mon Dec 5 14:15:00 2011
TotalTime: 899.32 seconds
TotalCapSize: -1796.07MB CapLen: 96 bytes
# of packets: 41053147 (30646.53MB)
AvgRate: 285.85Mbps stddev:47.61M
IP flow (unique src/dst pair) Information
# of flows: 863789 (avg. 47.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.5% 1.5% 1.4% 1.4% 1.3% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 472671
Top 10 bandwidth usage (bytes/total in %):
15.6% 7.4% 6.2% 5.0% 3.3% 3.2% 2.7% 2.5% 2.2% 2.1%
# of IPv6 addresses: 4970
Top 10 bandwidth usage (bytes/total in %):
18.5% 14.5% 11.8% 11.6% 11.6% 6.5% 6.1% 4.8% 4.5% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112051400.pktlen.png)
detailed numbers
[ 32- 63]: 7936968
[ 64- 127]: 9482708
[ 128- 255]: 1355202
[ 256- 511]: 1155760
[ 512- 1023]: 902667
[ 1024- 2047]: 20219842
Protocol Breakdown
![[protocol breakdown chart]](201112051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41053147 (100.00%) 32135218696 (100.00%) 782.77
ip 40753355 ( 99.27%) 31944763975 ( 99.41%) 783.86
tcp 34104754 ( 83.07%) 28746024733 ( 89.45%) 842.87
http(s) 17337130 ( 42.23%) 23620757894 ( 73.50%) 1362.44
http(c) 10849864 ( 26.43%) 2255152757 ( 7.02%) 207.85
squid 180737 ( 0.44%) 157104565 ( 0.49%) 869.24
smtp 135887 ( 0.33%) 70291363 ( 0.22%) 517.28
ftp 26033 ( 0.06%) 19024086 ( 0.06%) 730.77
pop3 4222 ( 0.01%) 545279 ( 0.00%) 129.15
imap 2588 ( 0.01%) 469582 ( 0.00%) 181.45
telnet 692 ( 0.00%) 78920 ( 0.00%) 114.05
ssh 10823 ( 0.03%) 2289203 ( 0.01%) 211.51
dns 50493 ( 0.12%) 5823446 ( 0.02%) 115.33
bgp 606 ( 0.00%) 102516 ( 0.00%) 169.17
napster 4223 ( 0.01%) 266254 ( 0.00%) 63.05
realaud 103 ( 0.00%) 7968 ( 0.00%) 77.36
rtsp 9805 ( 0.02%) 9222355 ( 0.03%) 940.58
icecast 15077 ( 0.04%) 6841329 ( 0.02%) 453.76
hotline 34 ( 0.00%) 2500 ( 0.00%) 73.53
other 5476437 ( 13.34%) 2598044716 ( 8.08%) 474.40
udp 5043266 ( 12.28%) 2215157087 ( 6.89%) 439.23
dns 572272 ( 1.39%) 139959857 ( 0.44%) 244.57
realaud 18 ( 0.00%) 3382 ( 0.00%) 187.89
halflif 14 ( 0.00%) 1294 ( 0.00%) 92.43
starcra 19 ( 0.00%) 3439 ( 0.00%) 181.00
everque 16544 ( 0.04%) 14787087 ( 0.05%) 893.80
unreal 16 ( 0.00%) 2430 ( 0.00%) 151.88
quake 39 ( 0.00%) 3653 ( 0.00%) 93.67
cuseeme 2 ( 0.00%) 195 ( 0.00%) 97.50
other 4338839 ( 10.57%) 2053403020 ( 6.39%) 473.26
icmp 330768 ( 0.81%) 73884227 ( 0.23%) 223.37
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 8134 ( 0.02%) 2212756 ( 0.01%) 272.04
ip6 1250961 ( 3.05%) 902583339 ( 2.81%) 721.51
other 15288 ( 0.04%) 4882673 ( 0.02%) 319.38
frag 245465 ( 0.60%) 187464578 ( 0.58%) 763.71
ip6 299792 ( 0.73%) 190454721 ( 0.59%) 635.29
tcp6 163066 ( 0.40%) 127560597 ( 0.40%) 782.26
http(s) 25144 ( 0.06%) 23723791 ( 0.07%) 943.52
http(c) 35749 ( 0.09%) 3252096 ( 0.01%) 90.97
squid 1 ( 0.00%) 94 ( 0.00%) 94.00
smtp 95 ( 0.00%) 34141 ( 0.00%) 359.38
ftp 43 ( 0.00%) 3918 ( 0.00%) 91.12
pop3 10 ( 0.00%) 828 ( 0.00%) 82.80
ssh 228 ( 0.00%) 31115 ( 0.00%) 136.47
dns 696 ( 0.00%) 113286 ( 0.00%) 162.77
bgp 87 ( 0.00%) 14448 ( 0.00%) 166.07
other 101013 ( 0.25%) 100386880 ( 0.31%) 993.80
udp6 87572 ( 0.21%) 42193255 ( 0.13%) 481.81
dns 48766 ( 0.12%) 14106168 ( 0.04%) 289.26
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 4 ( 0.00%) 427 ( 0.00%) 106.75
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 38799 ( 0.09%) 28086331 ( 0.09%) 723.89
icmp6 25029 ( 0.06%) 3729691 ( 0.01%) 149.01
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24010 ( 0.06%) 16955568 ( 0.05%) 706.19
tcpdump file: 201112051400.dump.gz (952.23 MB)