Traffic Trace Info
DumpFile: 201112221400.dump
FileSize: 2396.72MB
Id: 201112221400
StartTime: Thu Dec 22 14:00:00 2011
EndTime: Thu Dec 22 14:15:01 2011
TotalTime: 900.37 seconds
TotalCapSize: 1887.09MB CapLen: 96 bytes
# of packets: 33398725 (21391.13MB)
AvgRate: 199.28Mbps stddev:36.87M
IP flow (unique src/dst pair) Information
# of flows: 721253 (avg. 46.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.7% 2.6% 2.6% 1.6% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 362134
Top 10 bandwidth usage (bytes/total in %):
12.2% 11.7% 5.8% 5.2% 3.9% 3.4% 3.3% 3.2% 3.0% 2.7%
# of IPv6 addresses: 4991
Top 10 bandwidth usage (bytes/total in %):
35.7% 22.4% 13.2% 10.4% 9.8% 9.5% 9.5% 6.4% 5.6% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112221400.pktlen.png)
detailed numbers
[ 32- 63]: 6810323
[ 64- 127]: 10107882
[ 128- 255]: 1143639
[ 256- 511]: 707142
[ 512- 1023]: 759030
[ 1024- 2047]: 13870709
Protocol Breakdown
![[protocol breakdown chart]](201112221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33398725 (100.00%) 22430230477 (100.00%) 671.59
ip 33025989 ( 98.88%) 22207174453 ( 99.01%) 672.42
tcp 27353588 ( 81.90%) 19371354664 ( 86.36%) 708.18
http(s) 11377837 ( 34.07%) 14991960534 ( 66.84%) 1317.65
http(c) 9563830 ( 28.64%) 1263304586 ( 5.63%) 132.09
squid 1071193 ( 3.21%) 1388768280 ( 6.19%) 1296.47
smtp 65348 ( 0.20%) 27728171 ( 0.12%) 424.32
ftp 62110 ( 0.19%) 22323060 ( 0.10%) 359.41
pop3 3737 ( 0.01%) 965869 ( 0.00%) 258.46
imap 1627 ( 0.00%) 305743 ( 0.00%) 187.92
telnet 594 ( 0.00%) 77834 ( 0.00%) 131.03
ssh 86450 ( 0.26%) 13174133 ( 0.06%) 152.39
dns 46396 ( 0.14%) 3834082 ( 0.02%) 82.64
bgp 656 ( 0.00%) 114115 ( 0.00%) 173.96
napster 63 ( 0.00%) 3954 ( 0.00%) 62.76
realaud 32 ( 0.00%) 3625 ( 0.00%) 113.28
rtsp 12876 ( 0.04%) 11831554 ( 0.05%) 918.88
icecast 10092 ( 0.03%) 771670 ( 0.00%) 76.46
hotline 37 ( 0.00%) 2320 ( 0.00%) 62.70
other 5050710 ( 15.12%) 1646185134 ( 7.34%) 325.93
udp 4305501 ( 12.89%) 2057655600 ( 9.17%) 477.91
dns 538968 ( 1.61%) 128085197 ( 0.57%) 237.65
realaud 13 ( 0.00%) 1070 ( 0.00%) 82.31
halflif 74 ( 0.00%) 9975 ( 0.00%) 134.80
starcra 11 ( 0.00%) 2002 ( 0.00%) 182.00
everque 13081 ( 0.04%) 13183462 ( 0.06%) 1007.83
unreal 8 ( 0.00%) 3279 ( 0.00%) 409.88
quake 4 ( 0.00%) 320 ( 0.00%) 80.00
cuseeme 1 ( 0.00%) 92 ( 0.00%) 92.00
other 3752628 ( 11.24%) 1915938357 ( 8.54%) 510.56
icmp 270429 ( 0.81%) 24298511 ( 0.11%) 89.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 25093 ( 0.08%) 3642062 ( 0.02%) 145.14
ip6 1062863 ( 3.18%) 748849296 ( 3.34%) 704.56
other 8330 ( 0.02%) 1355050 ( 0.01%) 162.67
frag 3319 ( 0.01%) 3272604 ( 0.01%) 986.02
ip6 372736 ( 1.12%) 223056024 ( 0.99%) 598.43
tcp6 202278 ( 0.61%) 153612516 ( 0.68%) 759.41
http(s) 40571 ( 0.12%) 52101954 ( 0.23%) 1284.22
http(c) 28970 ( 0.09%) 2585291 ( 0.01%) 89.24
smtp 581 ( 0.00%) 229042 ( 0.00%) 394.22
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 95 ( 0.00%) 8471 ( 0.00%) 89.17
dns 491 ( 0.00%) 82783 ( 0.00%) 168.60
bgp 101 ( 0.00%) 19580 ( 0.00%) 193.86
other 131443 ( 0.39%) 98583082 ( 0.44%) 750.01
udp6 85454 ( 0.26%) 21625122 ( 0.10%) 253.06
dns 51664 ( 0.15%) 14565021 ( 0.06%) 281.92
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 215 ( 0.00%) 107.50
quake 2 ( 0.00%) 204 ( 0.00%) 102.00
other 33784 ( 0.10%) 7059467 ( 0.03%) 208.96
icmp6 21556 ( 0.06%) 3120987 ( 0.01%) 144.79
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 63333 ( 0.19%) 44681739 ( 0.20%) 705.50
tcpdump file: 201112221400.dump.gz (806.20 MB)