Traffic Trace Info
DumpFile: 201112181400.dump
FileSize: 3328.36MB
Id: 201112181400
StartTime: Sun Dec 18 14:00:01 2011
EndTime: Sun Dec 18 14:15:00 2011
TotalTime: 899.56 seconds
TotalCapSize: -1540.27MB CapLen: 96 bytes
# of packets: 50634831 (25600.30MB)
AvgRate: 238.77Mbps stddev:61.73M
IP flow (unique src/dst pair) Information
# of flows: 11068852 (avg. 4.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
25.6% 4.4% 1.6% 1.6% 1.3% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 8692507
Top 10 bandwidth usage (bytes/total in %):
26.6% 26.4% 19.2% 9.2% 4.5% 4.3% 3.8% 3.5% 2.3% 2.0%
# of IPv6 addresses: 4147
Top 10 bandwidth usage (bytes/total in %):
54.7% 25.6% 24.9% 11.7% 10.3% 6.1% 5.5% 4.2% 2.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112181400.pktlen.png)
detailed numbers
[ 32- 63]: 23639443
[ 64- 127]: 6813721
[ 128- 255]: 860620
[ 256- 511]: 549908
[ 512- 1023]: 3809993
[ 1024- 2047]: 14961146
Protocol Breakdown
![[protocol breakdown chart]](201112181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50634831 (100.00%) 26843856873 (100.00%) 530.15
ip 50299995 ( 99.34%) 26752310968 ( 99.66%) 531.86
tcp 30514578 ( 60.26%) 23625963171 ( 88.01%) 774.25
http(s) 12134018 ( 23.96%) 12081006679 ( 45.00%) 995.63
http(c) 11291186 ( 22.30%) 7569651297 ( 28.20%) 670.40
squid 244728 ( 0.48%) 147170701 ( 0.55%) 601.36
smtp 38294 ( 0.08%) 8367296 ( 0.03%) 218.50
ftp 29497 ( 0.06%) 18830095 ( 0.07%) 638.37
pop3 733 ( 0.00%) 187191 ( 0.00%) 255.38
imap 592 ( 0.00%) 70405 ( 0.00%) 118.93
telnet 414 ( 0.00%) 61184 ( 0.00%) 147.79
ssh 153595 ( 0.30%) 24044257 ( 0.09%) 156.54
dns 39311 ( 0.08%) 3048624 ( 0.01%) 77.55
bgp 652 ( 0.00%) 124763 ( 0.00%) 191.35
napster 101 ( 0.00%) 8087 ( 0.00%) 80.07
realaud 42 ( 0.00%) 3532 ( 0.00%) 84.10
rtsp 6332 ( 0.01%) 7692880 ( 0.03%) 1214.92
icecast 15834 ( 0.03%) 2128718 ( 0.01%) 134.44
hotline 37 ( 0.00%) 2759 ( 0.00%) 74.57
other 6559212 ( 12.95%) 3763564703 ( 14.02%) 573.78
udp 3074946 ( 6.07%) 1177022126 ( 4.38%) 382.78
dns 326383 ( 0.64%) 70415650 ( 0.26%) 215.75
rip 8 ( 0.00%) 594 ( 0.00%) 74.25
realaud 1 ( 0.00%) 72 ( 0.00%) 72.00
halflif 16 ( 0.00%) 1524 ( 0.00%) 95.25
starcra 14 ( 0.00%) 1807 ( 0.00%) 129.07
everque 1329 ( 0.00%) 768732 ( 0.00%) 578.43
unreal 14 ( 0.00%) 2469 ( 0.00%) 176.36
quake 22 ( 0.00%) 6989 ( 0.00%) 317.68
cuseeme 5 ( 0.00%) 726 ( 0.00%) 145.20
other 2746989 ( 5.43%) 1105797437 ( 4.12%) 402.55
icmp 15598414 ( 30.81%) 983428653 ( 3.66%) 63.05
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 344 ( 0.00%) 138624 ( 0.00%) 402.98
ip6 1102810 ( 2.18%) 962867529 ( 3.59%) 873.10
other 8718 ( 0.02%) 2871595 ( 0.01%) 329.39
frag 1770 ( 0.00%) 1717918 ( 0.01%) 970.58
ip6 334836 ( 0.66%) 91545905 ( 0.34%) 273.41
tcp6 197594 ( 0.39%) 25324590 ( 0.09%) 128.16
http(s) 3805 ( 0.01%) 3586525 ( 0.01%) 942.58
http(c) 21828 ( 0.04%) 2045405 ( 0.01%) 93.71
smtp 76 ( 0.00%) 29037 ( 0.00%) 382.07
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 565 ( 0.00%) 95101 ( 0.00%) 168.32
bgp 86 ( 0.00%) 15142 ( 0.00%) 176.07
other 171208 ( 0.34%) 19551067 ( 0.07%) 114.19
udp6 35278 ( 0.07%) 9059793 ( 0.03%) 256.81
dns 31882 ( 0.06%) 8547749 ( 0.03%) 268.11
starcra 2 ( 0.00%) 231 ( 0.00%) 115.50
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 3393 ( 0.01%) 511711 ( 0.00%) 150.81
icmp6 25566 ( 0.05%) 3620207 ( 0.01%) 141.60
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 76285 ( 0.15%) 53525941 ( 0.20%) 701.66
tcpdump file: 201112181400.dump.gz (1101.74 MB)