Traffic Trace Info
DumpFile: 201112061400.dump
FileSize: 3999.86MB
Id: 201112061400
StartTime: Tue Dec 6 14:00:00 2011
EndTime: Tue Dec 6 14:15:01 2011
TotalTime: 900.69 seconds
TotalCapSize: -999.46MB CapLen: 96 bytes
# of packets: 59197350 (32055.92MB)
AvgRate: 298.55Mbps stddev:48.44M
IP flow (unique src/dst pair) Information
# of flows: 12362245 (avg. 4.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.8% 1.5% 1.4% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 9745700
Top 10 bandwidth usage (bytes/total in %):
13.4% 8.3% 4.9% 4.2% 3.5% 3.4% 3.4% 3.1% 2.8% 2.7%
# of IPv6 addresses: 5199
Top 10 bandwidth usage (bytes/total in %):
39.0% 39.0% 25.0% 12.4% 10.7% 9.9% 4.9% 3.8% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112061400.pktlen.png)
detailed numbers
[ 32- 63]: 23396322
[ 64- 127]: 11903810
[ 128- 255]: 1387515
[ 256- 511]: 915533
[ 512- 1023]: 1030103
[ 1024- 2047]: 20564067
Protocol Breakdown
![[protocol breakdown chart]](201112061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59197350 (100.00%) 33613069949 (100.00%) 567.81
ip 58838373 ( 99.39%) 33301295278 ( 99.07%) 565.98
tcp 35445856 ( 59.88%) 28145831764 ( 83.73%) 794.05
http(s) 17520071 ( 29.60%) 23681971017 ( 70.45%) 1351.71
http(c) 10884673 ( 18.39%) 2160133081 ( 6.43%) 198.46
squid 284301 ( 0.48%) 278816963 ( 0.83%) 980.71
smtp 96084 ( 0.16%) 46553556 ( 0.14%) 484.51
nntp 5 ( 0.00%) 370 ( 0.00%) 74.00
ftp 142212 ( 0.24%) 128983581 ( 0.38%) 906.98
pop3 8919 ( 0.02%) 5300195 ( 0.02%) 594.26
imap 2927 ( 0.00%) 329683 ( 0.00%) 112.64
telnet 7817 ( 0.01%) 697864 ( 0.00%) 89.28
ssh 65841 ( 0.11%) 9331505 ( 0.03%) 141.73
dns 44639 ( 0.08%) 3780787 ( 0.01%) 84.70
bgp 631 ( 0.00%) 107211 ( 0.00%) 169.91
napster 146 ( 0.00%) 10088 ( 0.00%) 69.10
realaud 520 ( 0.00%) 44773 ( 0.00%) 86.10
rtsp 10299 ( 0.02%) 9425823 ( 0.03%) 915.22
icecast 49199 ( 0.08%) 37781720 ( 0.11%) 767.94
hotline 51 ( 0.00%) 3188 ( 0.00%) 62.51
other 6327521 ( 10.69%) 1782560359 ( 5.30%) 281.72
udp 5902719 ( 9.97%) 3200303622 ( 9.52%) 542.17
dns 638247 ( 1.08%) 154207962 ( 0.46%) 241.61
realaud 19 ( 0.00%) 2557 ( 0.00%) 134.58
halflif 26 ( 0.00%) 4215 ( 0.00%) 162.12
starcra 277 ( 0.00%) 47629 ( 0.00%) 171.95
everque 977 ( 0.00%) 342926 ( 0.00%) 351.00
unreal 16 ( 0.00%) 3084 ( 0.00%) 192.75
quake 24 ( 0.00%) 3829 ( 0.00%) 159.54
cuseeme 8 ( 0.00%) 1318 ( 0.00%) 164.75
other 5225218 ( 8.83%) 3043337486 ( 9.05%) 582.43
icmp 16282748 ( 27.51%) 1042615416 ( 3.10%) 64.03
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4481 ( 0.01%) 964342 ( 0.00%) 215.21
ip6 1188890 ( 2.01%) 906734856 ( 2.70%) 762.67
other 13495 ( 0.02%) 4826118 ( 0.01%) 357.62
frag 466151 ( 0.79%) 356812925 ( 1.06%) 765.44
ip6 358977 ( 0.61%) 311774671 ( 0.93%) 868.51
tcp6 242752 ( 0.41%) 267631526 ( 0.80%) 1102.49
http(s) 104507 ( 0.18%) 148163803 ( 0.44%) 1417.74
http(c) 35646 ( 0.06%) 3202421 ( 0.01%) 89.84
smtp 373 ( 0.00%) 256162 ( 0.00%) 686.76
ftp 61 ( 0.00%) 5322 ( 0.00%) 87.25
dns 605 ( 0.00%) 99731 ( 0.00%) 164.84
bgp 88 ( 0.00%) 14850 ( 0.00%) 168.75
other 101472 ( 0.17%) 115889237 ( 0.34%) 1142.08
udp6 61035 ( 0.10%) 17643453 ( 0.05%) 289.07
dns 52910 ( 0.09%) 14496864 ( 0.04%) 273.99
other 8125 ( 0.01%) 3146589 ( 0.01%) 387.27
icmp6 22628 ( 0.04%) 3444127 ( 0.01%) 152.21
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 32447 ( 0.05%) 23039937 ( 0.07%) 710.08
tcpdump file: 201112061400.dump.gz (1347.12 MB)