Traffic Trace Info
DumpFile: 201112101400.dump
FileSize: 3431.82MB
Id: 201112101400
StartTime: Sat Dec 10 14:00:01 2011
EndTime: Sat Dec 10 14:15:00 2011
TotalTime: 899.13 seconds
TotalCapSize: -1439.21MB CapLen: 96 bytes
# of packets: 50791985 (25733.71MB)
AvgRate: 240.09Mbps stddev:48.23M
IP flow (unique src/dst pair) Information
# of flows: 11261570 (avg. 4.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.2% 1.5% 1.4% 1.3% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8773707
Top 10 bandwidth usage (bytes/total in %):
17.1% 7.7% 6.5% 5.4% 3.8% 3.5% 3.1% 3.0% 3.0% 2.9%
# of IPv6 addresses: 3855
Top 10 bandwidth usage (bytes/total in %):
36.1% 26.7% 26.7% 26.3% 8.6% 6.6% 5.6% 5.1% 4.5% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112101400.pktlen.png)
detailed numbers
[ 32- 63]: 21785179
[ 64- 127]: 10235671
[ 128- 255]: 1050104
[ 256- 511]: 687500
[ 512- 1023]: 629603
[ 1024- 2047]: 16403928
Protocol Breakdown
![[protocol breakdown chart]](201112101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50791985 (100.00%) 26983753866 (100.00%) 531.26
ip 50482501 ( 99.39%) 26856802322 ( 99.53%) 532.00
tcp 29496326 ( 58.07%) 23010812913 ( 85.28%) 780.12
http(s) 14303376 ( 28.16%) 19449935521 ( 72.08%) 1359.81
http(c) 7772192 ( 15.30%) 1186096083 ( 4.40%) 152.61
squid 419407 ( 0.83%) 262244102 ( 0.97%) 625.27
smtp 51875 ( 0.10%) 15098373 ( 0.06%) 291.05
ftp 28603 ( 0.06%) 20555203 ( 0.08%) 718.64
pop3 1603 ( 0.00%) 422064 ( 0.00%) 263.30
imap 901 ( 0.00%) 363742 ( 0.00%) 403.71
telnet 468 ( 0.00%) 64895 ( 0.00%) 138.66
ssh 20234 ( 0.04%) 3346727 ( 0.01%) 165.40
dns 44759 ( 0.09%) 5195868 ( 0.02%) 116.09
bgp 635 ( 0.00%) 116183 ( 0.00%) 182.97
napster 458 ( 0.00%) 28762 ( 0.00%) 62.80
realaud 76 ( 0.00%) 5801 ( 0.00%) 76.33
rtsp 9638 ( 0.02%) 11573086 ( 0.04%) 1200.78
icecast 24827 ( 0.05%) 16356307 ( 0.06%) 658.81
hotline 65 ( 0.00%) 4102 ( 0.00%) 63.11
other 6817203 ( 13.42%) 2039405734 ( 7.56%) 299.16
udp 3865669 ( 7.61%) 1686374887 ( 6.25%) 436.24
dns 423581 ( 0.83%) 95194132 ( 0.35%) 224.74
realaud 6 ( 0.00%) 568 ( 0.00%) 94.67
halflif 534 ( 0.00%) 34482 ( 0.00%) 64.57
starcra 29 ( 0.00%) 3030 ( 0.00%) 104.48
everque 4303 ( 0.01%) 3886149 ( 0.01%) 903.13
unreal 87 ( 0.00%) 16547 ( 0.00%) 190.20
quake 13 ( 0.00%) 1360 ( 0.00%) 104.62
cuseeme 3 ( 0.00%) 398 ( 0.00%) 132.67
other 3437030 ( 6.77%) 1587196434 ( 5.88%) 461.79
icmp 15808447 ( 31.12%) 1042273332 ( 3.86%) 65.93
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3399 ( 0.01%) 1067514 ( 0.00%) 314.07
ip6 1297936 ( 2.56%) 1111880519 ( 4.12%) 856.65
other 10540 ( 0.02%) 4373997 ( 0.02%) 414.99
frag 467 ( 0.00%) 444605 ( 0.00%) 952.04
ip6 309482 ( 0.61%) 126951424 ( 0.47%) 410.21
tcp6 245160 ( 0.48%) 109779072 ( 0.41%) 447.79
http(s) 57128 ( 0.11%) 78435329 ( 0.29%) 1372.98
http(c) 33343 ( 0.07%) 3015260 ( 0.01%) 90.43
squid 2 ( 0.00%) 188 ( 0.00%) 94.00
smtp 60 ( 0.00%) 8503 ( 0.00%) 141.72
ftp 71 ( 0.00%) 6396 ( 0.00%) 90.08
pop3 10 ( 0.00%) 828 ( 0.00%) 82.80
dns 296 ( 0.00%) 68338 ( 0.00%) 230.87
bgp 84 ( 0.00%) 15626 ( 0.00%) 186.02
icecast 1 ( 0.00%) 94 ( 0.00%) 94.00
other 154165 ( 0.30%) 28228510 ( 0.10%) 183.11
udp6 40235 ( 0.08%) 10743619 ( 0.04%) 267.02
dns 37878 ( 0.07%) 9686499 ( 0.04%) 255.73
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 2 ( 0.00%) 184 ( 0.00%) 92.00
everque 2 ( 0.00%) 206 ( 0.00%) 103.00
other 2352 ( 0.00%) 1056624 ( 0.00%) 449.24
icmp6 19198 ( 0.04%) 2943151 ( 0.01%) 153.31
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4776 ( 0.01%) 3470208 ( 0.01%) 726.59
tcpdump file: 201112101400.dump.gz (1152.99 MB)