Traffic Trace Info
DumpFile: 201112141400.dump
FileSize: 3815.13MB
Id: 201112141400
StartTime: Wed Dec 14 14:00:01 2011
EndTime: Wed Dec 14 14:15:01 2011
TotalTime: 899.91 seconds
TotalCapSize: -1132.62MB CapLen: 96 bytes
# of packets: 55819682 (30838.01MB)
AvgRate: 287.40Mbps stddev:52.48M
IP flow (unique src/dst pair) Information
# of flows: 11217260 (avg. 4.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.1% 0.9% 0.9% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 8787789
Top 10 bandwidth usage (bytes/total in %):
16.3% 9.0% 3.7% 2.9% 2.8% 2.8% 2.5% 2.4% 2.3% 2.1%
# of IPv6 addresses: 5409
Top 10 bandwidth usage (bytes/total in %):
34.5% 26.3% 23.1% 11.6% 6.4% 4.2% 2.7% 2.6% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112141400.pktlen.png)
detailed numbers
[ 32- 63]: 21292384
[ 64- 127]: 11897286
[ 128- 255]: 1130011
[ 256- 511]: 837239
[ 512- 1023]: 893741
[ 1024- 2047]: 19769021
Protocol Breakdown
![[protocol breakdown chart]](201112141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55819682 (100.00%) 32335995536 (100.00%) 579.29
ip 55530471 ( 99.48%) 32140129522 ( 99.39%) 578.78
tcp 36315488 ( 65.06%) 29323724029 ( 90.68%) 807.47
http(s) 18049917 ( 32.34%) 24609741808 ( 76.11%) 1363.43
http(c) 10784347 ( 19.32%) 1240124263 ( 3.84%) 114.99
squid 701055 ( 1.26%) 697978150 ( 2.16%) 995.61
smtp 89160 ( 0.16%) 46760340 ( 0.14%) 524.45
ftp 22349 ( 0.04%) 15187288 ( 0.05%) 679.55
pop3 6405 ( 0.01%) 2679163 ( 0.01%) 418.29
imap 2614 ( 0.00%) 463961 ( 0.00%) 177.49
telnet 16064 ( 0.03%) 1205607 ( 0.00%) 75.05
ssh 727527 ( 1.30%) 116371752 ( 0.36%) 159.96
dns 47483 ( 0.09%) 4051733 ( 0.01%) 85.33
bgp 671 ( 0.00%) 151845 ( 0.00%) 226.30
napster 193 ( 0.00%) 12664 ( 0.00%) 65.62
realaud 435 ( 0.00%) 27679 ( 0.00%) 63.63
rtsp 10957 ( 0.02%) 11870227 ( 0.04%) 1083.35
icecast 53252 ( 0.10%) 46364528 ( 0.14%) 870.66
hotline 41 ( 0.00%) 6872 ( 0.00%) 167.61
other 5803017 ( 10.40%) 2530726089 ( 7.83%) 436.11
udp 3224304 ( 5.78%) 1255677454 ( 3.88%) 389.44
dns 602544 ( 1.08%) 141417634 ( 0.44%) 234.70
rip 4 ( 0.00%) 277 ( 0.00%) 69.25
realaud 22 ( 0.00%) 2020 ( 0.00%) 91.82
halflif 24 ( 0.00%) 1934 ( 0.00%) 80.58
starcra 29 ( 0.00%) 4607 ( 0.00%) 158.86
everque 548 ( 0.00%) 114133 ( 0.00%) 208.27
unreal 108 ( 0.00%) 21481 ( 0.00%) 198.90
quake 78 ( 0.00%) 7173 ( 0.00%) 91.96
cuseeme 4 ( 0.00%) 329 ( 0.00%) 82.25
other 2620869 ( 4.70%) 1114061245 ( 3.45%) 425.07
icmp 15148557 ( 27.14%) 940892760 ( 2.91%) 62.11
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5261 ( 0.01%) 1534350 ( 0.00%) 291.65
ip6 823732 ( 1.48%) 613809820 ( 1.90%) 745.16
other 12944 ( 0.02%) 4471839 ( 0.01%) 345.48
frag 535 ( 0.00%) 559267 ( 0.00%) 1045.36
ip6 289211 ( 0.52%) 195866014 ( 0.61%) 677.24
tcp6 142310 ( 0.25%) 130805989 ( 0.40%) 919.16
http(s) 32088 ( 0.06%) 39198605 ( 0.12%) 1221.60
http(c) 29776 ( 0.05%) 2764715 ( 0.01%) 92.85
smtp 113 ( 0.00%) 41096 ( 0.00%) 363.68
ftp 27 ( 0.00%) 2415 ( 0.00%) 89.44
dns 752 ( 0.00%) 129544 ( 0.00%) 172.27
bgp 95 ( 0.00%) 15743 ( 0.00%) 165.72
other 79459 ( 0.14%) 88653871 ( 0.27%) 1115.72
udp6 74504 ( 0.13%) 28933882 ( 0.09%) 388.35
dns 50446 ( 0.09%) 14367269 ( 0.04%) 284.80
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 24056 ( 0.04%) 14566394 ( 0.05%) 605.52
icmp6 26729 ( 0.05%) 3936092 ( 0.01%) 147.26
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 45554 ( 0.08%) 32174559 ( 0.10%) 706.29
tcpdump file: 201112141400.dump.gz (1280.74 MB)