Traffic Trace Info
DumpFile: 201112241400.dump
FileSize: 3317.44MB
Id: 201112241400
StartTime: Sat Dec 24 14:00:00 2011
EndTime: Sat Dec 24 14:15:00 2011
TotalTime: 899.92 seconds
TotalCapSize: -1503.77MB CapLen: 96 bytes
# of packets: 47526587 (38109.04MB)
AvgRate: 355.28Mbps stddev:60.97M
IP flow (unique src/dst pair) Information
# of flows: 683014 (avg. 69.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.3% 2.6% 1.3% 1.3% 1.2% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 355469
Top 10 bandwidth usage (bytes/total in %):
23.2% 20.8% 15.6% 8.7% 7.8% 4.1% 3.7% 3.4% 2.7% 2.7%
# of IPv6 addresses: 3876
Top 10 bandwidth usage (bytes/total in %):
45.2% 30.2% 13.8% 9.7% 9.7% 6.2% 6.2% 6.2% 6.2% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112241400.pktlen.png)
detailed numbers
[ 32- 63]: 11264530
[ 64- 127]: 8776101
[ 128- 255]: 749626
[ 256- 511]: 484676
[ 512- 1023]: 483754
[ 1024- 2047]: 25767900
Protocol Breakdown
![[protocol breakdown chart]](201112241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47526587 (100.00%) 39960227794 (100.00%) 840.80
ip 46952574 ( 98.79%) 39879440020 ( 99.80%) 849.36
tcp 41166172 ( 86.62%) 36739749903 ( 91.94%) 892.47
http(s) 15126406 ( 31.83%) 21206074042 ( 53.07%) 1401.92
http(c) 8304260 ( 17.47%) 1270563390 ( 3.18%) 153.00
squid 760045 ( 1.60%) 910335486 ( 2.28%) 1197.74
smtp 49794 ( 0.10%) 12064706 ( 0.03%) 242.29
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 40910 ( 0.09%) 18486519 ( 0.05%) 451.88
pop3 1297 ( 0.00%) 182480 ( 0.00%) 140.69
imap 1090 ( 0.00%) 135321 ( 0.00%) 124.15
telnet 436 ( 0.00%) 62979 ( 0.00%) 144.45
ssh 7248 ( 0.02%) 1384246 ( 0.00%) 190.98
dns 56749 ( 0.12%) 6063182 ( 0.02%) 106.84
bgp 617 ( 0.00%) 97093 ( 0.00%) 157.36
napster 55 ( 0.00%) 5036 ( 0.00%) 91.56
realaud 88 ( 0.00%) 5826 ( 0.00%) 66.20
rtsp 4995 ( 0.01%) 4020344 ( 0.01%) 804.87
icecast 19392 ( 0.04%) 8019103 ( 0.02%) 413.53
hotline 92 ( 0.00%) 6044 ( 0.00%) 65.70
other 16792692 ( 35.33%) 13302243740 ( 33.29%) 792.14
udp 4464080 ( 9.39%) 2331850268 ( 5.84%) 522.36
dns 362620 ( 0.76%) 84464705 ( 0.21%) 232.93
realaud 12 ( 0.00%) 1169 ( 0.00%) 97.42
halflif 24 ( 0.00%) 2855 ( 0.00%) 118.96
starcra 379 ( 0.00%) 66932 ( 0.00%) 176.60
everque 3224 ( 0.01%) 2365066 ( 0.01%) 733.58
unreal 14 ( 0.00%) 1231 ( 0.00%) 87.93
quake 7 ( 0.00%) 969 ( 0.00%) 138.43
cuseeme 1 ( 0.00%) 140 ( 0.00%) 140.00
other 3767589 ( 7.93%) 2223109477 ( 5.56%) 590.06
icmp 282647 ( 0.59%) 25614950 ( 0.06%) 90.63
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2494 ( 0.01%) 930324 ( 0.00%) 373.02
ip6 1029784 ( 2.17%) 780007780 ( 1.95%) 757.45
other 7212 ( 0.02%) 1267525 ( 0.00%) 175.75
frag 685039 ( 1.44%) 522187973 ( 1.31%) 762.27
ip6 574011 ( 1.21%) 80787654 ( 0.20%) 140.74
tcp6 514229 ( 1.08%) 61253220 ( 0.15%) 119.12
http(s) 19931 ( 0.04%) 21737319 ( 0.05%) 1090.63
http(c) 341719 ( 0.72%) 25876717 ( 0.06%) 75.73
smtp 99 ( 0.00%) 22160 ( 0.00%) 223.84
ftp 60 ( 0.00%) 5322 ( 0.00%) 88.70
imap 28 ( 0.00%) 2668 ( 0.00%) 95.29
dns 548 ( 0.00%) 82900 ( 0.00%) 151.28
bgp 92 ( 0.00%) 13959 ( 0.00%) 151.73
other 151752 ( 0.32%) 13512175 ( 0.03%) 89.04
udp6 31946 ( 0.07%) 8716308 ( 0.02%) 272.85
dns 30471 ( 0.06%) 8330698 ( 0.02%) 273.40
realaud 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1472 ( 0.00%) 385267 ( 0.00%) 261.73
icmp6 23398 ( 0.05%) 7711715 ( 0.02%) 329.59
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4324 ( 0.01%) 3090919 ( 0.01%) 714.83
tcpdump file: 201112241400.dump.gz (1022.16 MB)