Traffic Trace Info
DumpFile: 201112081400.dump
FileSize: 3701.97MB
Id: 201112081400
StartTime: Thu Dec 8 14:00:00 2011
EndTime: Thu Dec 8 14:15:01 2011
TotalTime: 900.73 seconds
TotalCapSize: -1223.42MB CapLen: 96 bytes
# of packets: 54354122 (26441.06MB)
AvgRate: 246.27Mbps stddev:47.23M
IP flow (unique src/dst pair) Information
# of flows: 12503727 (avg. 4.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.4% 1.3% 1.2% 1.1% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 9845891
Top 10 bandwidth usage (bytes/total in %):
13.4% 7.0% 5.3% 4.8% 4.3% 3.6% 3.3% 3.2% 3.0% 2.9%
# of IPv6 addresses: 4895
Top 10 bandwidth usage (bytes/total in %):
70.5% 69.7% 7.6% 4.6% 4.3% 3.3% 2.4% 1.6% 1.6% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112081400.pktlen.png)
detailed numbers
[ 32- 63]: 23225489
[ 64- 127]: 11675989
[ 128- 255]: 1112151
[ 256- 511]: 835032
[ 512- 1023]: 883371
[ 1024- 2047]: 16622090
Protocol Breakdown
![[protocol breakdown chart]](201112081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54354122 (100.00%) 27725460694 (100.00%) 510.09
ip 53842195 ( 99.06%) 27214446871 ( 98.16%) 505.45
tcp 32083328 ( 59.03%) 23280159600 ( 83.97%) 725.62
http(s) 15056847 ( 27.70%) 20149549603 ( 72.68%) 1338.23
http(c) 9615061 ( 17.69%) 1447467353 ( 5.22%) 150.54
squid 68519 ( 0.13%) 40994152 ( 0.15%) 598.29
smtp 83091 ( 0.15%) 33606033 ( 0.12%) 404.45
ftp 39426 ( 0.07%) 21071182 ( 0.08%) 534.45
pop3 9018 ( 0.02%) 7198672 ( 0.03%) 798.26
imap 3260 ( 0.01%) 856266 ( 0.00%) 262.66
telnet 1238 ( 0.00%) 116507 ( 0.00%) 94.11
ssh 11576 ( 0.02%) 3052506 ( 0.01%) 263.69
dns 49562 ( 0.09%) 4269189 ( 0.02%) 86.14
bgp 619 ( 0.00%) 104550 ( 0.00%) 168.90
napster 153 ( 0.00%) 15986 ( 0.00%) 104.48
realaud 58 ( 0.00%) 4040 ( 0.00%) 69.66
rtsp 11275 ( 0.02%) 11714988 ( 0.04%) 1039.02
icecast 39836 ( 0.07%) 24298277 ( 0.09%) 609.96
hotline 46 ( 0.00%) 2872 ( 0.00%) 62.43
other 7093742 ( 13.05%) 1535837364 ( 5.54%) 216.51
udp 3702794 ( 6.81%) 1396609338 ( 5.04%) 377.18
dns 654879 ( 1.20%) 169261456 ( 0.61%) 258.46
realaud 27 ( 0.00%) 3818 ( 0.00%) 141.41
halflif 24 ( 0.00%) 3059 ( 0.00%) 127.46
starcra 68 ( 0.00%) 9773 ( 0.00%) 143.72
everque 999 ( 0.00%) 475401 ( 0.00%) 475.88
unreal 18 ( 0.00%) 3079 ( 0.00%) 171.06
quake 63 ( 0.00%) 5284 ( 0.00%) 83.87
cuseeme 10 ( 0.00%) 784 ( 0.00%) 78.40
other 3046585 ( 5.61%) 1226810973 ( 4.42%) 402.68
icmp 16383844 ( 30.14%) 1061549794 ( 3.83%) 64.79
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5061 ( 0.01%) 894414 ( 0.00%) 176.73
ip6 1656848 ( 3.05%) 1470987364 ( 5.31%) 887.82
other 10136 ( 0.02%) 4227201 ( 0.02%) 417.05
frag 616 ( 0.00%) 576794 ( 0.00%) 936.35
ip6 511925 ( 0.94%) 511013703 ( 1.84%) 998.22
tcp6 360311 ( 0.66%) 443327992 ( 1.60%) 1230.40
http(s) 41745 ( 0.08%) 48413126 ( 0.17%) 1159.73
http(c) 37673 ( 0.07%) 3383628 ( 0.01%) 89.82
squid 6 ( 0.00%) 729 ( 0.00%) 121.50
smtp 1078 ( 0.00%) 1215753 ( 0.00%) 1127.79
ftp 23 ( 0.00%) 2079 ( 0.00%) 90.39
imap 5 ( 0.00%) 743 ( 0.00%) 148.60
dns 984 ( 0.00%) 179286 ( 0.00%) 182.20
bgp 90 ( 0.00%) 16572 ( 0.00%) 184.13
other 278707 ( 0.51%) 390116076 ( 1.41%) 1399.74
udp6 80138 ( 0.15%) 30849360 ( 0.11%) 384.95
dns 54717 ( 0.10%) 15052260 ( 0.05%) 275.09
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 25420 ( 0.05%) 15796999 ( 0.06%) 621.44
icmp6 24376 ( 0.04%) 3617971 ( 0.01%) 148.42
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 46987 ( 0.09%) 33202956 ( 0.12%) 706.64
tcpdump file: 201112081400.dump.gz (1254.59 MB)