Traffic Trace Info
DumpFile: 201112191400.dump
FileSize: 3452.60MB
Id: 201112191400
StartTime: Mon Dec 19 14:00:00 2011
EndTime: Mon Dec 19 14:15:00 2011
TotalTime: 899.88 seconds
TotalCapSize: -1423.36MB CapLen: 96 bytes
# of packets: 51114719 (24069.82MB)
AvgRate: 224.26Mbps stddev:52.49M
IP flow (unique src/dst pair) Information
# of flows: 11356959 (avg. 4.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 4.0% 2.5% 1.9% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 8782221
Top 10 bandwidth usage (bytes/total in %):
14.8% 7.0% 6.4% 6.4% 5.5% 4.4% 4.2% 3.7% 3.2% 3.0%
# of IPv6 addresses: 5041
Top 10 bandwidth usage (bytes/total in %):
38.7% 16.1% 14.3% 9.3% 9.3% 8.7% 6.6% 6.5% 6.0% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112191400.pktlen.png)
detailed numbers
[ 32- 63]: 21802414
[ 64- 127]: 11557976
[ 128- 255]: 1047506
[ 256- 511]: 807103
[ 512- 1023]: 870157
[ 1024- 2047]: 15029563
Protocol Breakdown
![[protocol breakdown chart]](201112191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51114719 (100.00%) 25239040132 (100.00%) 493.77
ip 50727452 ( 99.24%) 25049155130 ( 99.25%) 493.80
tcp 29963484 ( 58.62%) 21537674011 ( 85.33%) 718.80
http(s) 11870886 ( 23.22%) 15120921795 ( 59.91%) 1273.78
http(c) 10158940 ( 19.87%) 1902569479 ( 7.54%) 187.28
squid 376969 ( 0.74%) 366027527 ( 1.45%) 970.98
smtp 97922 ( 0.19%) 70902017 ( 0.28%) 724.07
ftp 30679 ( 0.06%) 18700010 ( 0.07%) 609.54
pop3 10686 ( 0.02%) 853447 ( 0.00%) 79.87
imap 53316 ( 0.10%) 74324354 ( 0.29%) 1394.03
telnet 1090 ( 0.00%) 270256 ( 0.00%) 247.94
ssh 37750 ( 0.07%) 5525130 ( 0.02%) 146.36
dns 50377 ( 0.10%) 6072663 ( 0.02%) 120.54
bgp 629 ( 0.00%) 113264 ( 0.00%) 180.07
napster 671 ( 0.00%) 41968 ( 0.00%) 62.55
realaud 48 ( 0.00%) 5183 ( 0.00%) 107.98
rtsp 6344 ( 0.01%) 7699030 ( 0.03%) 1213.59
icecast 15041 ( 0.03%) 1536657 ( 0.01%) 102.16
hotline 29 ( 0.00%) 2758 ( 0.00%) 95.10
other 7252107 ( 14.19%) 3962108473 ( 15.70%) 546.34
udp 3938545 ( 7.71%) 1530902112 ( 6.07%) 388.70
dns 570649 ( 1.12%) 136659293 ( 0.54%) 239.48
realaud 8 ( 0.00%) 875 ( 0.00%) 109.38
halflif 35 ( 0.00%) 3488 ( 0.00%) 99.66
starcra 139 ( 0.00%) 19832 ( 0.00%) 142.68
everque 1180 ( 0.00%) 444005 ( 0.00%) 376.28
unreal 15 ( 0.00%) 1494 ( 0.00%) 99.60
quake 57 ( 0.00%) 5368 ( 0.00%) 94.18
cuseeme 21 ( 0.00%) 2166 ( 0.00%) 103.14
other 3359130 ( 6.57%) 1393239306 ( 5.52%) 414.76
icmp 15616685 ( 30.55%) 990440220 ( 3.92%) 63.42
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 328 ( 0.00%) 136176 ( 0.00%) 415.17
ip6 1200308 ( 2.35%) 987196989 ( 3.91%) 822.45
other 7917 ( 0.02%) 2786352 ( 0.01%) 351.95
frag 18268 ( 0.04%) 13824771 ( 0.05%) 756.78
ip6 387267 ( 0.76%) 189885002 ( 0.75%) 490.32
tcp6 273332 ( 0.53%) 138640577 ( 0.55%) 507.22
http(s) 27435 ( 0.05%) 34728233 ( 0.14%) 1265.84
http(c) 39788 ( 0.08%) 3447497 ( 0.01%) 86.65
smtp 106 ( 0.00%) 24158 ( 0.00%) 227.91
ftp 27 ( 0.00%) 2407 ( 0.00%) 89.15
dns 590 ( 0.00%) 106237 ( 0.00%) 180.06
bgp 92 ( 0.00%) 13468 ( 0.00%) 146.39
other 205294 ( 0.40%) 100318577 ( 0.40%) 488.66
udp6 85496 ( 0.17%) 44224898 ( 0.18%) 517.27
dns 50960 ( 0.10%) 15621058 ( 0.06%) 306.54
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 2 ( 0.00%) 220 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 117 ( 0.00%) 117.00
other 34532 ( 0.07%) 28603402 ( 0.11%) 828.32
icmp6 23489 ( 0.05%) 3365270 ( 0.01%) 143.27
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4838 ( 0.01%) 3639001 ( 0.01%) 752.17
tcpdump file: 201112191400.dump.gz (1171.67 MB)