Traffic Trace Info
DumpFile: 201112111400.dump
FileSize: 3099.29MB
Id: 201112111400
StartTime: Sun Dec 11 14:00:00 2011
EndTime: Sun Dec 11 14:15:00 2011
TotalTime: 899.95 seconds
TotalCapSize: -1708.52MB CapLen: 96 bytes
# of packets: 46647357 (21993.67MB)
AvgRate: 205.04Mbps stddev:45.03M
IP flow (unique src/dst pair) Information
# of flows: 11434354 (avg. 4.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.6% 1.3% 1.1% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8863709
Top 10 bandwidth usage (bytes/total in %):
17.2% 16.4% 4.4% 4.1% 3.9% 3.3% 2.8% 2.8% 2.7% 2.7%
# of IPv6 addresses: 4122
Top 10 bandwidth usage (bytes/total in %):
18.1% 14.1% 12.6% 11.4% 10.8% 9.2% 6.8% 6.4% 6.4% 6.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112111400.pktlen.png)
detailed numbers
[ 32- 63]: 22508081
[ 64- 127]: 8317539
[ 128- 255]: 786167
[ 256- 511]: 509330
[ 512- 1023]: 561638
[ 1024- 2047]: 13964602
Protocol Breakdown
![[protocol breakdown chart]](201112111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46647357 (100.00%) 23062038150 (100.00%) 494.39
ip 46176219 ( 98.99%) 22902871868 ( 99.31%) 495.99
tcp 24885753 ( 53.35%) 18796178901 ( 81.50%) 755.30
http(s) 9170905 ( 19.66%) 12288103106 ( 53.28%) 1339.90
http(c) 4082655 ( 8.75%) 417113699 ( 1.81%) 102.17
squid 142299 ( 0.31%) 73211138 ( 0.32%) 514.49
smtp 34815 ( 0.07%) 7552474 ( 0.03%) 216.93
ftp 32697 ( 0.07%) 18166218 ( 0.08%) 555.59
pop3 2144 ( 0.00%) 205765 ( 0.00%) 95.97
imap 1545 ( 0.00%) 145706 ( 0.00%) 94.31
telnet 5244 ( 0.01%) 450829 ( 0.00%) 85.97
ssh 9275 ( 0.02%) 1958283 ( 0.01%) 211.14
dns 44137 ( 0.09%) 5007505 ( 0.02%) 113.45
bgp 658 ( 0.00%) 121860 ( 0.00%) 185.20
napster 1228 ( 0.00%) 77016 ( 0.00%) 62.72
realaud 47 ( 0.00%) 2922 ( 0.00%) 62.17
rtsp 3602 ( 0.01%) 3967408 ( 0.02%) 1101.45
icecast 2406 ( 0.01%) 669158 ( 0.00%) 278.12
hotline 43 ( 0.00%) 2748 ( 0.00%) 63.91
other 11352053 ( 24.34%) 5979423066 ( 25.93%) 526.73
udp 3809725 ( 8.17%) 1588403209 ( 6.89%) 416.93
dns 399163 ( 0.86%) 84441293 ( 0.37%) 211.55
realaud 7 ( 0.00%) 702 ( 0.00%) 100.29
halflif 24 ( 0.00%) 2212 ( 0.00%) 92.17
starcra 25 ( 0.00%) 3096 ( 0.00%) 123.84
everque 6005 ( 0.01%) 5703230 ( 0.02%) 949.75
unreal 71 ( 0.00%) 13024 ( 0.00%) 183.44
quake 10 ( 0.00%) 1472 ( 0.00%) 147.20
cuseeme 4 ( 0.00%) 291 ( 0.00%) 72.75
other 3404023 ( 7.30%) 1498180553 ( 6.50%) 440.12
icmp 15746374 ( 33.76%) 1009568499 ( 4.38%) 64.11
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2000 ( 0.00%) 476576 ( 0.00%) 238.29
ip6 1720182 ( 3.69%) 1503666420 ( 6.52%) 874.13
other 12000 ( 0.03%) 4558993 ( 0.02%) 379.92
frag 1595 ( 0.00%) 1319201 ( 0.01%) 827.09
ip6 471138 ( 1.01%) 159166282 ( 0.69%) 337.83
tcp6 338675 ( 0.73%) 100994389 ( 0.44%) 298.20
http(s) 7603 ( 0.02%) 6556631 ( 0.03%) 862.37
http(c) 20781 ( 0.04%) 3916618 ( 0.02%) 188.47
smtp 72 ( 0.00%) 26857 ( 0.00%) 373.01
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 361 ( 0.00%) 77088 ( 0.00%) 213.54
bgp 85 ( 0.00%) 13445 ( 0.00%) 158.18
icecast 8 ( 0.00%) 1216 ( 0.00%) 152.00
other 309739 ( 0.66%) 90400221 ( 0.39%) 291.86
udp6 45017 ( 0.10%) 12997716 ( 0.06%) 288.73
dns 31910 ( 0.07%) 7608123 ( 0.03%) 238.42
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 13106 ( 0.03%) 5389489 ( 0.02%) 411.22
icmp6 28827 ( 0.06%) 4004550 ( 0.02%) 138.92
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 58507 ( 0.13%) 41154371 ( 0.18%) 703.41
tcpdump file: 201112111400.dump.gz (1060.90 MB)