Traffic Trace Info
DumpFile: 201112171400.dump
FileSize: 3972.27MB
Id: 201112171400
StartTime: Sat Dec 17 14:00:00 2011
EndTime: Sat Dec 17 14:15:00 2011
TotalTime: 899.82 seconds
TotalCapSize: -1025.32MB CapLen: 96 bytes
# of packets: 59085238 (35912.04MB)
AvgRate: 334.85Mbps stddev:69.34M
IP flow (unique src/dst pair) Information
# of flows: 11108593 (avg. 5.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 6.8% 4.2% 4.0% 1.6% 1.2% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 8745257
Top 10 bandwidth usage (bytes/total in %):
23.5% 18.9% 9.1% 7.0% 6.6% 4.3% 4.2% 4.1% 2.6% 2.4%
# of IPv6 addresses: 4613
Top 10 bandwidth usage (bytes/total in %):
31.0% 31.0% 17.6% 10.4% 7.8% 7.8% 7.4% 7.3% 7.3% 7.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112171400.pktlen.png)
detailed numbers
[ 32- 63]: 23947386
[ 64- 127]: 9122823
[ 128- 255]: 905121
[ 256- 511]: 593501
[ 512- 1023]: 994664
[ 1024- 2047]: 23521743
Protocol Breakdown
![[protocol breakdown chart]](201112171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59085238 (100.00%) 37656501080 (100.00%) 637.33
ip 58721089 ( 99.38%) 37493710896 ( 99.57%) 638.51
tcp 39687462 ( 67.17%) 34663379165 ( 92.05%) 873.41
http(s) 14714968 ( 24.90%) 20408571044 ( 54.20%) 1386.93
http(c) 7516220 ( 12.72%) 754936659 ( 2.00%) 100.44
squid 664648 ( 1.12%) 648725640 ( 1.72%) 976.04
smtp 60960 ( 0.10%) 34521395 ( 0.09%) 566.30
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 32634 ( 0.06%) 18585043 ( 0.05%) 569.50
pop3 2071 ( 0.00%) 184389 ( 0.00%) 89.03
imap 1025 ( 0.00%) 93087 ( 0.00%) 90.82
telnet 9104 ( 0.02%) 699477 ( 0.00%) 76.83
ssh 27517 ( 0.05%) 4953103 ( 0.01%) 180.00
dns 44395 ( 0.08%) 3546843 ( 0.01%) 79.89
bgp 629 ( 0.00%) 99975 ( 0.00%) 158.94
napster 1396 ( 0.00%) 87224 ( 0.00%) 62.48
realaud 18 ( 0.00%) 1112 ( 0.00%) 61.78
rtsp 142 ( 0.00%) 19982 ( 0.00%) 140.72
icecast 10433 ( 0.02%) 1018038 ( 0.00%) 97.58
hotline 13 ( 0.00%) 808 ( 0.00%) 62.15
other 16601285 ( 28.10%) 12787335106 ( 33.96%) 770.26
udp 2725753 ( 4.61%) 1002114188 ( 2.66%) 367.65
dns 368373 ( 0.62%) 79171906 ( 0.21%) 214.92
realaud 930 ( 0.00%) 57737 ( 0.00%) 62.08
halflif 57044 ( 0.10%) 13264083 ( 0.04%) 232.52
starcra 11 ( 0.00%) 960 ( 0.00%) 87.27
everque 290 ( 0.00%) 66499 ( 0.00%) 229.31
unreal 6 ( 0.00%) 528 ( 0.00%) 88.00
quake 12 ( 0.00%) 1106 ( 0.00%) 92.17
cuseeme 15 ( 0.00%) 1610 ( 0.00%) 107.33
other 2298749 ( 3.89%) 909220404 ( 2.41%) 395.53
icmp 15158319 ( 25.66%) 973086422 ( 2.58%) 64.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 319 ( 0.00%) 134810 ( 0.00%) 422.60
ip6 1140763 ( 1.93%) 853968180 ( 2.27%) 748.59
other 8288 ( 0.01%) 1008861 ( 0.00%) 121.73
frag 2312 ( 0.00%) 1797772 ( 0.00%) 777.58
ip6 364149 ( 0.62%) 162790184 ( 0.43%) 447.04
tcp6 260186 ( 0.44%) 121085587 ( 0.32%) 465.38
http(s) 19072 ( 0.03%) 24769798 ( 0.07%) 1298.75
http(c) 16025 ( 0.03%) 1599717 ( 0.00%) 99.83
smtp 75 ( 0.00%) 7986 ( 0.00%) 106.48
ftp 24 ( 0.00%) 2141 ( 0.00%) 89.21
dns 603 ( 0.00%) 113610 ( 0.00%) 188.41
bgp 79 ( 0.00%) 11261 ( 0.00%) 142.54
other 224308 ( 0.38%) 94581074 ( 0.25%) 421.66
udp6 48392 ( 0.08%) 16145364 ( 0.04%) 333.64
dns 34859 ( 0.06%) 9783164 ( 0.03%) 280.65
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 13530 ( 0.02%) 6361863 ( 0.02%) 470.20
icmp6 24158 ( 0.04%) 3509415 ( 0.01%) 145.27
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31298 ( 0.05%) 22034158 ( 0.06%) 704.01
tcpdump file: 201112171400.dump.gz (1303.24 MB)