Traffic Trace Info
DumpFile: 201112251400.dump
FileSize: 2002.56MB
Id: 201112251400
StartTime: Sun Dec 25 14:00:01 2011
EndTime: Sun Dec 25 14:15:00 2011
TotalTime: 899.23 seconds
TotalCapSize: 1563.50MB CapLen: 96 bytes
# of packets: 28773996 (19726.50MB)
AvgRate: 184.02Mbps stddev:46.92M
IP flow (unique src/dst pair) Information
# of flows: 766672 (avg. 37.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.1% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 438689
Top 10 bandwidth usage (bytes/total in %):
33.2% 9.7% 5.0% 3.7% 3.6% 3.0% 2.8% 2.2% 2.1% 2.0%
# of IPv6 addresses: 4388
Top 10 bandwidth usage (bytes/total in %):
25.4% 20.1% 20.1% 17.2% 16.0% 12.9% 9.1% 8.6% 6.2% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112251400.pktlen.png)
detailed numbers
[ 32- 63]: 6382729
[ 64- 127]: 7407305
[ 128- 255]: 980974
[ 256- 511]: 503497
[ 512- 1023]: 632276
[ 1024- 2047]: 12867215
Protocol Breakdown
![[protocol breakdown chart]](201112251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28773996 (100.00%) 20684737534 (100.00%) 718.87
ip 28438491 ( 98.83%) 20456995250 ( 98.90%) 719.34
tcp 22501240 ( 78.20%) 17485541814 ( 84.53%) 777.09
http(s) 9354320 ( 32.51%) 12916187314 ( 62.44%) 1380.77
http(c) 4493463 ( 15.62%) 499229801 ( 2.41%) 111.10
squid 351010 ( 1.22%) 355680241 ( 1.72%) 1013.31
smtp 62944 ( 0.22%) 12091770 ( 0.06%) 192.10
ftp 26177 ( 0.09%) 16180169 ( 0.08%) 618.11
pop3 649 ( 0.00%) 64612 ( 0.00%) 99.56
imap 34971 ( 0.12%) 2760558 ( 0.01%) 78.94
telnet 589 ( 0.00%) 73091 ( 0.00%) 124.09
ssh 1056180 ( 3.67%) 188380789 ( 0.91%) 178.36
dns 50977 ( 0.18%) 5344050 ( 0.03%) 104.83
bgp 640 ( 0.00%) 106159 ( 0.00%) 165.87
napster 286 ( 0.00%) 18407 ( 0.00%) 64.36
realaud 53 ( 0.00%) 3803 ( 0.00%) 71.75
rtsp 4984 ( 0.02%) 4009247 ( 0.02%) 804.42
icecast 14295 ( 0.05%) 3165330 ( 0.02%) 221.43
hotline 25 ( 0.00%) 1852 ( 0.00%) 74.08
other 7049677 ( 24.50%) 3482244621 ( 16.83%) 493.96
udp 4724637 ( 16.42%) 2415203491 ( 11.68%) 511.19
dns 310223 ( 1.08%) 72211025 ( 0.35%) 232.77
realaud 3 ( 0.00%) 271 ( 0.00%) 90.33
halflif 9783 ( 0.03%) 818833 ( 0.00%) 83.70
starcra 473 ( 0.00%) 55233 ( 0.00%) 116.77
everque 270 ( 0.00%) 44074 ( 0.00%) 163.24
unreal 42 ( 0.00%) 13865 ( 0.00%) 330.12
quake 8 ( 0.00%) 1354 ( 0.00%) 169.25
cuseeme 4 ( 0.00%) 651 ( 0.00%) 162.75
other 4373085 ( 15.20%) 2339526055 ( 11.31%) 534.98
icmp 289812 ( 1.01%) 26084944 ( 0.13%) 90.01
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2489 ( 0.01%) 917046 ( 0.00%) 368.44
ip6 913875 ( 3.18%) 528109930 ( 2.55%) 577.88
other 6253 ( 0.02%) 1118755 ( 0.01%) 178.91
frag 66184 ( 0.23%) 52195574 ( 0.25%) 788.64
ip6 335503 ( 1.17%) 227742164 ( 1.10%) 678.81
tcp6 84516 ( 0.29%) 51473386 ( 0.25%) 609.04
http(s) 11039 ( 0.04%) 13507839 ( 0.07%) 1223.65
http(c) 14895 ( 0.05%) 1447871 ( 0.01%) 97.21
smtp 126 ( 0.00%) 30930 ( 0.00%) 245.48
ftp 45 ( 0.00%) 4142 ( 0.00%) 92.04
pop3 15 ( 0.00%) 1365 ( 0.00%) 91.00
imap 26 ( 0.00%) 2497 ( 0.00%) 96.04
dns 403 ( 0.00%) 64706 ( 0.00%) 160.56
bgp 126 ( 0.00%) 59697 ( 0.00%) 473.79
other 57841 ( 0.20%) 36354339 ( 0.18%) 628.52
udp6 91235 ( 0.32%) 75031798 ( 0.36%) 822.40
dns 29002 ( 0.10%) 7627001 ( 0.04%) 262.98
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
other 62232 ( 0.22%) 67404688 ( 0.33%) 1083.12
icmp6 24887 ( 0.09%) 6586040 ( 0.03%) 264.64
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 134751 ( 0.47%) 94635448 ( 0.46%) 702.30
tcpdump file: 201112251400.dump.gz (693.00 MB)