Traffic Trace Info
DumpFile: 201112201400.dump
FileSize: 3337.75MB
Id: 201112201400
StartTime: Tue Dec 20 14:00:00 2011
EndTime: Tue Dec 20 14:15:00 2011
TotalTime: 899.91 seconds
TotalCapSize: -1476.61MB CapLen: 96 bytes
# of packets: 47078016 (33132.00MB)
AvgRate: 308.77Mbps stddev:41.59M
IP flow (unique src/dst pair) Information
# of flows: 974559 (avg. 48.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 4.3% 2.2% 1.7% 1.3% 1.1% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 550353
Top 10 bandwidth usage (bytes/total in %):
14.1% 9.8% 9.0% 7.1% 4.6% 4.4% 3.8% 3.8% 2.9% 2.8%
# of IPv6 addresses: 4953
Top 10 bandwidth usage (bytes/total in %):
22.7% 22.7% 17.4% 10.0% 8.8% 8.8% 5.7% 5.6% 5.5% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112201400.pktlen.png)
detailed numbers
[ 32- 63]: 10457589
[ 64- 127]: 11548441
[ 128- 255]: 1315331
[ 256- 511]: 828444
[ 512- 1023]: 1002708
[ 1024- 2047]: 21925503
Protocol Breakdown
![[protocol breakdown chart]](201112201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47078016 (100.00%) 34741419183 (100.00%) 737.95
ip 46774621 ( 99.36%) 34626999198 ( 99.67%) 740.29
tcp 41239049 ( 87.60%) 31776305174 ( 91.47%) 770.54
http(s) 14493244 ( 30.79%) 19592811447 ( 56.40%) 1351.86
http(c) 11451212 ( 24.32%) 1527775371 ( 4.40%) 133.42
squid 317678 ( 0.67%) 212438115 ( 0.61%) 668.72
smtp 755584 ( 1.60%) 1020263895 ( 2.94%) 1350.30
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 34854 ( 0.07%) 19387914 ( 0.06%) 556.26
pop3 5138 ( 0.01%) 2945889 ( 0.01%) 573.35
imap 4629 ( 0.01%) 477949 ( 0.00%) 103.25
telnet 720 ( 0.00%) 83352 ( 0.00%) 115.77
ssh 45797 ( 0.10%) 5128421 ( 0.01%) 111.98
dns 51816 ( 0.11%) 4480408 ( 0.01%) 86.47
bgp 648 ( 0.00%) 115563 ( 0.00%) 178.34
napster 80 ( 0.00%) 7390 ( 0.00%) 92.38
realaud 38 ( 0.00%) 2392 ( 0.00%) 62.95
rtsp 34502 ( 0.07%) 37060563 ( 0.11%) 1074.16
icecast 20643 ( 0.04%) 1458164 ( 0.00%) 70.64
hotline 27 ( 0.00%) 2234 ( 0.00%) 82.74
other 14022434 ( 29.79%) 9351865727 ( 26.92%) 666.92
udp 4220101 ( 8.96%) 2142205245 ( 6.17%) 507.62
dns 569374 ( 1.21%) 131711998 ( 0.38%) 231.33
realaud 19 ( 0.00%) 2472 ( 0.00%) 130.11
halflif 19 ( 0.00%) 2202 ( 0.00%) 115.89
starcra 22 ( 0.00%) 6502 ( 0.00%) 295.55
everque 344 ( 0.00%) 63308 ( 0.00%) 184.03
unreal 25 ( 0.00%) 3086 ( 0.00%) 123.44
quake 7 ( 0.00%) 1005 ( 0.00%) 143.57
cuseeme 6 ( 0.00%) 487 ( 0.00%) 81.17
other 3650050 ( 7.75%) 2010344616 ( 5.79%) 550.77
icmp 424534 ( 0.90%) 69387561 ( 0.20%) 163.44
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 251 ( 0.00%) 85714 ( 0.00%) 341.49
ip6 881862 ( 1.87%) 635978756 ( 1.83%) 721.18
other 8639 ( 0.02%) 3017478 ( 0.01%) 349.29
frag 916 ( 0.00%) 872327 ( 0.00%) 952.32
ip6 303395 ( 0.64%) 114419985 ( 0.33%) 377.13
tcp6 213712 ( 0.45%) 86551020 ( 0.25%) 404.99
http(s) 21898 ( 0.05%) 22947041 ( 0.07%) 1047.91
http(c) 25689 ( 0.05%) 2366010 ( 0.01%) 92.10
smtp 84 ( 0.00%) 9815 ( 0.00%) 116.85
ftp 52 ( 0.00%) 5085 ( 0.00%) 97.79
dns 687 ( 0.00%) 115656 ( 0.00%) 168.35
bgp 92 ( 0.00%) 19564 ( 0.00%) 212.65
other 165210 ( 0.35%) 61087849 ( 0.18%) 369.76
udp6 58708 ( 0.12%) 19869964 ( 0.06%) 338.45
dns 50141 ( 0.11%) 15035719 ( 0.04%) 299.87
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 3 ( 0.00%) 327 ( 0.00%) 109.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
other 8562 ( 0.02%) 4833702 ( 0.01%) 564.55
icmp6 24670 ( 0.05%) 3427848 ( 0.01%) 138.95
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6190 ( 0.01%) 4555525 ( 0.01%) 735.95
tcpdump file: 201112201400.dump.gz (1109.51 MB)