Traffic Trace Info
DumpFile: 201112231400.dump
FileSize: 2032.45MB
Id: 201112231400
StartTime: Fri Dec 23 14:00:01 2011
EndTime: Fri Dec 23 14:15:00 2011
TotalTime: 899.68 seconds
TotalCapSize: 1602.23MB CapLen: 96 bytes
# of packets: 28194516 (18413.44MB)
AvgRate: 171.65Mbps stddev:34.19M
IP flow (unique src/dst pair) Information
# of flows: 752111 (avg. 37.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.6% 1.9% 1.9% 1.9% 1.8% 1.8% 1.7% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 411183
Top 10 bandwidth usage (bytes/total in %):
16.1% 15.9% 6.3% 5.7% 4.8% 4.7% 3.6% 3.5% 3.4% 3.2%
# of IPv6 addresses: 4925
Top 10 bandwidth usage (bytes/total in %):
47.4% 12.3% 9.4% 6.8% 6.6% 6.4% 6.4% 5.9% 5.0% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112231400.pktlen.png)
detailed numbers
[ 32- 63]: 5430745
[ 64- 127]: 8973684
[ 128- 255]: 765444
[ 256- 511]: 535858
[ 512- 1023]: 540311
[ 1024- 2047]: 11948474
Protocol Breakdown
![[protocol breakdown chart]](201112231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28194516 (100.00%) 19307895218 (100.00%) 684.81
ip 28064237 ( 99.54%) 19247418983 ( 99.69%) 685.83
tcp 23410010 ( 83.03%) 17300160409 ( 89.60%) 739.01
http(s) 10005566 ( 35.49%) 13637430207 ( 70.63%) 1362.98
http(c) 7493753 ( 26.58%) 697633279 ( 3.61%) 93.10
squid 586826 ( 2.08%) 651832424 ( 3.38%) 1110.78
smtp 65249 ( 0.23%) 25423725 ( 0.13%) 389.64
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 53099 ( 0.19%) 18490812 ( 0.10%) 348.23
pop3 1287 ( 0.00%) 199378 ( 0.00%) 154.92
imap 333 ( 0.00%) 49153 ( 0.00%) 147.61
telnet 472 ( 0.00%) 65693 ( 0.00%) 139.18
ssh 41725 ( 0.15%) 8372749 ( 0.04%) 200.67
dns 49505 ( 0.18%) 6111543 ( 0.03%) 123.45
bgp 688 ( 0.00%) 152316 ( 0.00%) 221.39
napster 71 ( 0.00%) 6221 ( 0.00%) 87.62
realaud 61 ( 0.00%) 4892 ( 0.00%) 80.20
rtsp 5023 ( 0.02%) 4026816 ( 0.02%) 801.68
icecast 18882 ( 0.07%) 3712162 ( 0.02%) 196.60
hotline 36 ( 0.00%) 2700 ( 0.00%) 75.00
other 5087427 ( 18.04%) 2246645905 ( 11.64%) 441.61
udp 3557221 ( 12.62%) 1463541796 ( 7.58%) 411.43
dns 447153 ( 1.59%) 111790419 ( 0.58%) 250.00
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 5 ( 0.00%) 610 ( 0.00%) 122.00
halflif 46 ( 0.00%) 4031 ( 0.00%) 87.63
starcra 229 ( 0.00%) 38688 ( 0.00%) 168.94
everque 264 ( 0.00%) 44695 ( 0.00%) 169.30
unreal 12 ( 0.00%) 1857 ( 0.00%) 154.75
quake 7 ( 0.00%) 977 ( 0.00%) 139.57
cuseeme 3 ( 0.00%) 368 ( 0.00%) 122.67
other 2931931 ( 10.40%) 1340380970 ( 6.94%) 457.17
icmp 282974 ( 1.00%) 30027795 ( 0.16%) 106.12
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2219 ( 0.01%) 834338 ( 0.00%) 376.00
ip6 804458 ( 2.85%) 451611819 ( 2.34%) 561.39
other 7170 ( 0.03%) 1223556 ( 0.01%) 170.65
frag 359628 ( 1.28%) 272667633 ( 1.41%) 758.19
ip6 130279 ( 0.46%) 60476235 ( 0.31%) 464.21
tcp6 62176 ( 0.22%) 36077479 ( 0.19%) 580.25
http(s) 5865 ( 0.02%) 4890372 ( 0.03%) 833.82
http(c) 13470 ( 0.05%) 1203216 ( 0.01%) 89.33
smtp 82 ( 0.00%) 25842 ( 0.00%) 315.15
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 535 ( 0.00%) 82610 ( 0.00%) 154.41
bgp 92 ( 0.00%) 13317 ( 0.00%) 144.75
other 42106 ( 0.15%) 29859809 ( 0.15%) 709.16
udp6 37888 ( 0.13%) 9364249 ( 0.05%) 247.16
dns 35553 ( 0.13%) 9109803 ( 0.05%) 256.23
everque 3 ( 0.00%) 314 ( 0.00%) 104.67
other 2332 ( 0.01%) 254132 ( 0.00%) 108.98
icmp6 29677 ( 0.11%) 14595635 ( 0.08%) 491.82
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 423 ( 0.00%) 423194 ( 0.00%) 1000.46
tcpdump file: 201112231400.dump.gz (663.20 MB)