Traffic Trace Info
DumpFile: 201112151400.dump
FileSize: 3555.88MB
Id: 201112151400
StartTime: Thu Dec 15 14:00:00 2011
EndTime: Thu Dec 15 14:15:00 2011
TotalTime: 900.00 seconds
TotalCapSize: -1344.23MB CapLen: 96 bytes
# of packets: 52695553 (26561.92MB)
AvgRate: 247.56Mbps stddev:45.93M
IP flow (unique src/dst pair) Information
# of flows: 11269418 (avg. 4.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.9% 2.8% 1.4% 1.2% 1.0% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 8782946
Top 10 bandwidth usage (bytes/total in %):
17.5% 4.5% 4.3% 4.1% 3.7% 3.5% 3.4% 3.4% 3.3% 3.0%
# of IPv6 addresses: 4754
Top 10 bandwidth usage (bytes/total in %):
74.9% 59.3% 16.2% 6.8% 6.2% 3.4% 2.1% 1.9% 1.9% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112151400.pktlen.png)
detailed numbers
[ 32- 63]: 21045357
[ 64- 127]: 12145552
[ 128- 255]: 1145456
[ 256- 511]: 816112
[ 512- 1023]: 740512
[ 1024- 2047]: 16802564
Protocol Breakdown
![[protocol breakdown chart]](201112151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52695553 (100.00%) 27852190021 (100.00%) 528.55
ip 52188114 ( 99.04%) 27297443738 ( 98.01%) 523.06
tcp 31461301 ( 59.70%) 23507733926 ( 84.40%) 747.20
http(s) 13412968 ( 25.45%) 18020136146 ( 64.70%) 1343.49
http(c) 10948305 ( 20.78%) 1524467243 ( 5.47%) 139.24
squid 407091 ( 0.77%) 423340984 ( 1.52%) 1039.92
smtp 152084 ( 0.29%) 52981549 ( 0.19%) 348.37
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 35250 ( 0.07%) 18486307 ( 0.07%) 524.43
pop3 6089 ( 0.01%) 3742191 ( 0.01%) 614.58
imap 1946 ( 0.00%) 346368 ( 0.00%) 177.99
telnet 3108 ( 0.01%) 258340 ( 0.00%) 83.12
ssh 261919 ( 0.50%) 34336700 ( 0.12%) 131.10
dns 50201 ( 0.10%) 4314417 ( 0.02%) 85.94
bgp 647 ( 0.00%) 127544 ( 0.00%) 197.13
napster 1932 ( 0.00%) 122102 ( 0.00%) 63.20
realaud 114 ( 0.00%) 9245 ( 0.00%) 81.10
rtsp 6337 ( 0.01%) 7693144 ( 0.03%) 1214.00
icecast 16927 ( 0.03%) 6675788 ( 0.02%) 394.39
hotline 26 ( 0.00%) 3428 ( 0.00%) 131.85
other 6156351 ( 11.68%) 3410692056 ( 12.25%) 554.01
udp 4497134 ( 8.53%) 2106082421 ( 7.56%) 468.32
dns 614345 ( 1.17%) 144574375 ( 0.52%) 235.33
realaud 17 ( 0.00%) 1947 ( 0.00%) 114.53
halflif 33 ( 0.00%) 4135 ( 0.00%) 125.30
starcra 21 ( 0.00%) 3256 ( 0.00%) 155.05
everque 602 ( 0.00%) 164522 ( 0.00%) 273.29
unreal 10 ( 0.00%) 1363 ( 0.00%) 136.30
quake 66 ( 0.00%) 5707 ( 0.00%) 86.47
cuseeme 4 ( 0.00%) 866 ( 0.00%) 216.50
other 3856414 ( 7.32%) 1959557437 ( 7.04%) 508.13
icmp 15158210 ( 28.77%) 971270669 ( 3.49%) 64.08
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 59644 ( 0.11%) 16199704 ( 0.06%) 271.61
ip6 998996 ( 1.90%) 691005831 ( 2.48%) 691.70
other 12644 ( 0.02%) 5131917 ( 0.02%) 405.88
frag 58269 ( 0.11%) 43549559 ( 0.16%) 747.39
ip6 507439 ( 0.96%) 554746283 ( 1.99%) 1093.23
tcp6 375491 ( 0.71%) 494006224 ( 1.77%) 1315.63
http(s) 40795 ( 0.08%) 46807077 ( 0.17%) 1147.37
http(c) 22616 ( 0.04%) 2095497 ( 0.01%) 92.66
smtp 264 ( 0.00%) 157831 ( 0.00%) 597.84
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
imap 124 ( 0.00%) 132773 ( 0.00%) 1070.75
dns 631 ( 0.00%) 126004 ( 0.00%) 199.69
bgp 81 ( 0.00%) 13002 ( 0.00%) 160.52
other 310943 ( 0.59%) 444670746 ( 1.60%) 1430.07
udp6 89379 ( 0.17%) 44508447 ( 0.16%) 497.97
dns 56151 ( 0.11%) 15558109 ( 0.06%) 277.08
other 33228 ( 0.06%) 28950338 ( 0.10%) 871.26
icmp6 25031 ( 0.05%) 3735991 ( 0.01%) 149.25
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17426 ( 0.03%) 12480365 ( 0.04%) 716.19
tcpdump file: 201112151400.dump.gz (1202.45 MB)