Traffic Trace Info
DumpFile: 201112091400.dump
FileSize: 4167.59MB
Id: 201112091400
StartTime: Fri Dec 9 14:00:01 2011
EndTime: Fri Dec 9 14:15:00 2011
TotalTime: 899.47 seconds
TotalCapSize: -866.71MB CapLen: 96 bytes
# of packets: 61490884 (35006.11MB)
AvgRate: 326.49Mbps stddev:50.79M
IP flow (unique src/dst pair) Information
# of flows: 11273420 (avg. 5.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.8% 1.6% 1.3% 1.2% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 8768760
Top 10 bandwidth usage (bytes/total in %):
15.6% 9.6% 5.4% 5.3% 4.7% 4.0% 3.2% 3.1% 2.5% 2.5%
# of IPv6 addresses: 4775
Top 10 bandwidth usage (bytes/total in %):
38.7% 27.9% 10.7% 9.2% 8.7% 8.7% 7.3% 3.3% 3.3% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112091400.pktlen.png)
detailed numbers
[ 32- 63]: 23693455
[ 64- 127]: 11612397
[ 128- 255]: 1237048
[ 256- 511]: 874328
[ 512- 1023]: 1690452
[ 1024- 2047]: 22383204
Protocol Breakdown
![[protocol breakdown chart]](201112091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 61490884 (100.00%) 36706562395 (100.00%) 596.94
ip 61295491 ( 99.68%) 36581563094 ( 99.66%) 596.81
tcp 40034685 ( 65.11%) 32331337307 ( 88.08%) 807.58
http(s) 18591058 ( 30.23%) 24141746917 ( 65.77%) 1298.57
http(c) 11342393 ( 18.45%) 3194092472 ( 8.70%) 281.61
squid 267588 ( 0.44%) 249469973 ( 0.68%) 932.29
smtp 93143 ( 0.15%) 53064195 ( 0.14%) 569.71
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 14325 ( 0.02%) 5163959 ( 0.01%) 360.49
pop3 9559 ( 0.02%) 5860666 ( 0.02%) 613.10
imap 2506 ( 0.00%) 765897 ( 0.00%) 305.63
telnet 15504 ( 0.03%) 1174229 ( 0.00%) 75.74
ssh 18303 ( 0.03%) 3566648 ( 0.01%) 194.87
dns 48277 ( 0.08%) 4127500 ( 0.01%) 85.50
bgp 662 ( 0.00%) 123199 ( 0.00%) 186.10
napster 253 ( 0.00%) 17603 ( 0.00%) 69.58
realaud 24 ( 0.00%) 1488 ( 0.00%) 62.00
rtsp 11233 ( 0.02%) 11682725 ( 0.03%) 1040.04
icecast 22051 ( 0.04%) 16018559 ( 0.04%) 726.43
hotline 71 ( 0.00%) 7506 ( 0.00%) 105.72
other 9597733 ( 15.61%) 4644453637 ( 12.65%) 483.91
udp 4531712 ( 7.37%) 2378905280 ( 6.48%) 524.95
dns 580125 ( 0.94%) 137422633 ( 0.37%) 236.88
realaud 8 ( 0.00%) 1153 ( 0.00%) 144.12
halflif 66 ( 0.00%) 8570 ( 0.00%) 129.85
starcra 65 ( 0.00%) 10361 ( 0.00%) 159.40
everque 508 ( 0.00%) 114296 ( 0.00%) 224.99
unreal 58 ( 0.00%) 5883 ( 0.00%) 101.43
quake 15 ( 0.00%) 1309 ( 0.00%) 87.27
cuseeme 3 ( 0.00%) 271 ( 0.00%) 90.33
other 3950539 ( 6.42%) 2241281131 ( 6.11%) 567.34
icmp 15666153 ( 25.48%) 1025586106 ( 2.79%) 65.47
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26993 ( 0.04%) 7507558 ( 0.02%) 278.13
ip6 1024137 ( 1.67%) 833951372 ( 2.27%) 814.30
other 11626 ( 0.02%) 4256201 ( 0.01%) 366.09
frag 971 ( 0.00%) 832105 ( 0.00%) 856.96
ip6 195391 ( 0.32%) 124999181 ( 0.34%) 639.74
tcp6 69606 ( 0.11%) 57744963 ( 0.16%) 829.60
http(s) 27631 ( 0.04%) 32188215 ( 0.09%) 1164.93
http(c) 14329 ( 0.02%) 1331819 ( 0.00%) 92.95
squid 15 ( 0.00%) 1150 ( 0.00%) 76.67
smtp 74 ( 0.00%) 15334 ( 0.00%) 207.22
ftp 76 ( 0.00%) 7081 ( 0.00%) 93.17
dns 804 ( 0.00%) 140495 ( 0.00%) 174.75
bgp 87 ( 0.00%) 15070 ( 0.00%) 173.22
other 26590 ( 0.04%) 24045799 ( 0.07%) 904.32
udp6 96955 ( 0.16%) 62246661 ( 0.17%) 642.02
dns 50863 ( 0.08%) 14975251 ( 0.04%) 294.42
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 46090 ( 0.07%) 47271201 ( 0.13%) 1025.63
icmp6 27392 ( 0.04%) 3903938 ( 0.01%) 142.52
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1324 ( 0.00%) 1088127 ( 0.00%) 821.85
tcpdump file: 201112091400.dump.gz (1400.00 MB)