Traffic Trace Info
DumpFile: 201112161400.dump
FileSize: 4046.01MB
Id: 201112161400
StartTime: Fri Dec 16 14:00:01 2011
EndTime: Fri Dec 16 14:15:01 2011
TotalTime: 899.82 seconds
TotalCapSize: -953.26MB CapLen: 96 bytes
# of packets: 59194936 (31926.35MB)
AvgRate: 297.63Mbps stddev:44.32M
IP flow (unique src/dst pair) Information
# of flows: 11178662 (avg. 5.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.9% 3.8% 1.3% 1.1% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 8737469
Top 10 bandwidth usage (bytes/total in %):
17.1% 11.4% 8.3% 6.4% 5.7% 5.0% 4.0% 4.0% 3.7% 2.7%
# of IPv6 addresses: 5373
Top 10 bandwidth usage (bytes/total in %):
24.7% 17.1% 11.8% 11.0% 10.1% 8.0% 5.6% 5.3% 5.2% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112161400.pktlen.png)
detailed numbers
[ 32- 63]: 21833882
[ 64- 127]: 13781462
[ 128- 255]: 1032814
[ 256- 511]: 746759
[ 512- 1023]: 1658404
[ 1024- 2047]: 20141615
Protocol Breakdown
![[protocol breakdown chart]](201112161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59194936 (100.00%) 33477208538 (100.00%) 565.54
ip 58825301 ( 99.38%) 33356144044 ( 99.64%) 567.04
tcp 38561777 ( 65.14%) 30194796585 ( 90.20%) 783.02
http(s) 15959533 ( 26.96%) 20691586151 ( 61.81%) 1296.50
http(c) 13191734 ( 22.29%) 2915123940 ( 8.71%) 220.98
squid 589252 ( 1.00%) 454941860 ( 1.36%) 772.07
smtp 83667 ( 0.14%) 34467232 ( 0.10%) 411.96
nntp 4 ( 0.00%) 242 ( 0.00%) 60.50
ftp 26439 ( 0.04%) 19143311 ( 0.06%) 724.06
pop3 5638 ( 0.01%) 3056719 ( 0.01%) 542.16
imap 1040 ( 0.00%) 164473 ( 0.00%) 158.15
telnet 945 ( 0.00%) 100312 ( 0.00%) 106.15
ssh 67257 ( 0.11%) 10680234 ( 0.03%) 158.80
dns 49832 ( 0.08%) 5852428 ( 0.02%) 117.44
bgp 655 ( 0.00%) 120857 ( 0.00%) 184.51
napster 99 ( 0.00%) 8054 ( 0.00%) 81.35
realaud 31 ( 0.00%) 2042 ( 0.00%) 65.87
rtsp 3064 ( 0.01%) 2886111 ( 0.01%) 941.94
icecast 20736 ( 0.04%) 9921696 ( 0.03%) 478.48
hotline 30 ( 0.00%) 1872 ( 0.00%) 62.40
other 8561821 ( 14.46%) 6046739051 ( 18.06%) 706.24
udp 3561899 ( 6.02%) 1334749406 ( 3.99%) 374.73
dns 584154 ( 0.99%) 134207074 ( 0.40%) 229.75
realaud 17 ( 0.00%) 2017 ( 0.00%) 118.65
halflif 47 ( 0.00%) 4138 ( 0.00%) 88.04
starcra 21 ( 0.00%) 2731 ( 0.00%) 130.05
everque 558 ( 0.00%) 113435 ( 0.00%) 203.29
unreal 11 ( 0.00%) 882 ( 0.00%) 80.18
quake 24 ( 0.00%) 2155 ( 0.00%) 89.79
cuseeme 2 ( 0.00%) 167 ( 0.00%) 83.50
other 2977019 ( 5.03%) 1200382085 ( 3.59%) 403.22
icmp 15346931 ( 25.93%) 973614078 ( 2.91%) 63.44
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11862 ( 0.02%) 3325156 ( 0.01%) 280.32
ip6 1329924 ( 2.25%) 847796197 ( 2.53%) 637.48
other 12723 ( 0.02%) 1843352 ( 0.01%) 144.88
frag 1091 ( 0.00%) 990040 ( 0.00%) 907.46
ip6 369635 ( 0.62%) 121064494 ( 0.36%) 327.52
tcp6 241029 ( 0.41%) 75830251 ( 0.23%) 314.61
http(s) 18065 ( 0.03%) 19254828 ( 0.06%) 1065.86
http(c) 18692 ( 0.03%) 1826871 ( 0.01%) 97.74
smtp 133 ( 0.00%) 34905 ( 0.00%) 262.44
ftp 47 ( 0.00%) 4336 ( 0.00%) 92.26
dns 671 ( 0.00%) 140192 ( 0.00%) 208.93
bgp 82 ( 0.00%) 10768 ( 0.00%) 131.32
other 203339 ( 0.34%) 54558351 ( 0.16%) 268.31
udp6 75673 ( 0.13%) 20948623 ( 0.06%) 276.83
dns 52484 ( 0.09%) 14822217 ( 0.04%) 282.41
realaud 2 ( 0.00%) 222 ( 0.00%) 111.00
everque 1 ( 0.00%) 96 ( 0.00%) 96.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 23185 ( 0.04%) 6125974 ( 0.02%) 264.22
icmp6 23517 ( 0.04%) 3462254 ( 0.01%) 147.22
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 29302 ( 0.05%) 20807806 ( 0.06%) 710.12
tcpdump file: 201112161400.dump.gz (1339.26 MB)