Traffic Trace Info
DumpFile: 201112071400.dump
FileSize: 4183.21MB
Id: 201112071400
StartTime: Wed Dec 7 14:00:00 2011
EndTime: Wed Dec 7 14:15:01 2011
TotalTime: 900.31 seconds
TotalCapSize: -844.94MB CapLen: 96 bytes
# of packets: 61087672 (31524.95MB)
AvgRate: 293.74Mbps stddev:45.44M
IP flow (unique src/dst pair) Information
# of flows: 12466779 (avg. 4.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 9793226
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.7% 8.0% 3.8% 3.2% 3.2% 3.1% 2.9% 2.9% 2.8%
# of IPv6 addresses: 4704
Top 10 bandwidth usage (bytes/total in %):
28.9% 13.2% 7.0% 6.7% 5.9% 5.4% 5.0% 5.0% 3.8% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112071400.pktlen.png)
detailed numbers
[ 32- 63]: 24630994
[ 64- 127]: 13427470
[ 128- 255]: 1100279
[ 256- 511]: 878220
[ 512- 1023]: 965037
[ 1024- 2047]: 20085672
Protocol Breakdown
![[protocol breakdown chart]](201112071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 61087672 (100.00%) 33056308473 (100.00%) 541.13
ip 60774318 ( 99.49%) 32920550152 ( 99.59%) 541.69
tcp 37746691 ( 61.79%) 28162572305 ( 85.20%) 746.09
http(s) 18150892 ( 29.71%) 24269998238 ( 73.42%) 1337.12
http(c) 11579037 ( 18.95%) 1639001762 ( 4.96%) 141.55
squid 180242 ( 0.30%) 163263358 ( 0.49%) 905.80
smtp 147288 ( 0.24%) 47760127 ( 0.14%) 324.26
nntp 10 ( 0.00%) 600 ( 0.00%) 60.00
ftp 30318 ( 0.05%) 19027251 ( 0.06%) 627.59
pop3 4784 ( 0.01%) 1820992 ( 0.01%) 380.64
imap 1784 ( 0.00%) 317198 ( 0.00%) 177.80
telnet 1279 ( 0.00%) 119638 ( 0.00%) 93.54
ssh 18573 ( 0.03%) 10082086 ( 0.03%) 542.84
dns 49977 ( 0.08%) 4361615 ( 0.01%) 87.27
bgp 649 ( 0.00%) 127158 ( 0.00%) 195.93
napster 111 ( 0.00%) 7038 ( 0.00%) 63.41
realaud 72 ( 0.00%) 7175 ( 0.00%) 99.65
rtsp 16726 ( 0.03%) 13476074 ( 0.04%) 805.70
icecast 31656 ( 0.05%) 20534720 ( 0.06%) 648.68
hotline 51 ( 0.00%) 4464 ( 0.00%) 87.53
other 7533242 ( 12.33%) 1972662811 ( 5.97%) 261.86
udp 4524168 ( 7.41%) 2426092899 ( 7.34%) 536.25
dns 585220 ( 0.96%) 141111883 ( 0.43%) 241.13
realaud 1794 ( 0.00%) 108411 ( 0.00%) 60.43
halflif 28 ( 0.00%) 4069 ( 0.00%) 145.32
starcra 242 ( 0.00%) 41115 ( 0.00%) 169.90
everque 884 ( 0.00%) 186926 ( 0.00%) 211.45
unreal 20 ( 0.00%) 3029 ( 0.00%) 151.45
quake 85 ( 0.00%) 6985 ( 0.00%) 82.18
cuseeme 5 ( 0.00%) 884 ( 0.00%) 176.80
other 3807598 ( 6.23%) 2276801584 ( 6.89%) 597.96
icmp 17134006 ( 28.05%) 1094931060 ( 3.31%) 63.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 29880 ( 0.05%) 4106992 ( 0.01%) 137.45
ip6 1327190 ( 2.17%) 1228210584 ( 3.72%) 925.42
other 12198 ( 0.02%) 4617042 ( 0.01%) 378.51
frag 264978 ( 0.43%) 201929407 ( 0.61%) 762.06
ip6 313354 ( 0.51%) 135758321 ( 0.41%) 433.24
tcp6 214757 ( 0.35%) 96731512 ( 0.29%) 450.42
http(s) 31928 ( 0.05%) 38168924 ( 0.12%) 1195.47
http(c) 22747 ( 0.04%) 2153635 ( 0.01%) 94.68
smtp 65 ( 0.00%) 22951 ( 0.00%) 353.09
ftp 44 ( 0.00%) 4012 ( 0.00%) 91.18
dns 639 ( 0.00%) 110838 ( 0.00%) 173.46
bgp 81 ( 0.00%) 12365 ( 0.00%) 152.65
other 159253 ( 0.26%) 56258787 ( 0.17%) 353.27
udp6 68424 ( 0.11%) 29805987 ( 0.09%) 435.61
dns 52100 ( 0.09%) 15005896 ( 0.05%) 288.02
starcra 1 ( 0.00%) 96 ( 0.00%) 96.00
other 16323 ( 0.03%) 14799995 ( 0.04%) 906.70
icmp6 21905 ( 0.04%) 3309596 ( 0.01%) 151.09
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8150 ( 0.01%) 5895194 ( 0.02%) 723.34
tcpdump file: 201112071400.dump.gz (1388.95 MB)