Traffic Trace Info
DumpFile: 201112261400.dump
FileSize: 2639.23MB
Id: 201112261400
StartTime: Mon Dec 26 14:00:00 2011
EndTime: Mon Dec 26 14:15:00 2011
TotalTime: 899.91 seconds
TotalCapSize: -2024.13MB CapLen: 96 bytes
# of packets: 37181643 (25912.42MB)
AvgRate: 241.53Mbps stddev:46.22M
IP flow (unique src/dst pair) Information
# of flows: 831135 (avg. 44.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.9% 2.2% 1.8% 1.3% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 435250
Top 10 bandwidth usage (bytes/total in %):
21.3% 10.9% 6.1% 4.5% 3.6% 3.4% 3.3% 3.0% 2.9% 2.8%
# of IPv6 addresses: 5689
Top 10 bandwidth usage (bytes/total in %):
21.2% 15.6% 12.9% 12.8% 12.7% 12.6% 10.7% 9.4% 6.1% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112261400.pktlen.png)
detailed numbers
[ 32- 63]: 9244298
[ 64- 127]: 8498268
[ 128- 255]: 1091011
[ 256- 511]: 697465
[ 512- 1023]: 650212
[ 1024- 2047]: 17000389
Protocol Breakdown
![[protocol breakdown chart]](201112261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37181643 (100.00%) 27171139849 (100.00%) 730.77
ip 36848736 ( 99.10%) 27012347983 ( 99.42%) 733.06
tcp 31245790 ( 84.04%) 24355059418 ( 89.64%) 779.47
http(s) 12692480 ( 34.14%) 17398689914 ( 64.03%) 1370.79
http(c) 8764010 ( 23.57%) 1498621412 ( 5.52%) 171.00
squid 181651 ( 0.49%) 138355737 ( 0.51%) 761.66
smtp 83386 ( 0.22%) 48042981 ( 0.18%) 576.15
nntp 10 ( 0.00%) 656 ( 0.00%) 65.60
ftp 61650 ( 0.17%) 53334627 ( 0.20%) 865.12
pop3 4944 ( 0.01%) 2690193 ( 0.01%) 544.13
imap 1692 ( 0.00%) 1357314 ( 0.00%) 802.20
telnet 1623 ( 0.00%) 142846 ( 0.00%) 88.01
ssh 182346 ( 0.49%) 32080534 ( 0.12%) 175.93
dns 50698 ( 0.14%) 3803475 ( 0.01%) 75.02
bgp 739 ( 0.00%) 209271 ( 0.00%) 283.18
napster 470 ( 0.00%) 29766 ( 0.00%) 63.33
realaud 45 ( 0.00%) 3517 ( 0.00%) 78.16
rtsp 112 ( 0.00%) 15564 ( 0.00%) 138.96
icecast 10156 ( 0.03%) 988558 ( 0.00%) 97.34
hotline 51 ( 0.00%) 3152 ( 0.00%) 61.80
other 9209727 ( 24.77%) 5176689901 ( 19.05%) 562.09
udp 3938635 ( 10.59%) 1594668813 ( 5.87%) 404.88
dns 534322 ( 1.44%) 127245699 ( 0.47%) 238.14
rip 3 ( 0.00%) 212 ( 0.00%) 70.67
realaud 11 ( 0.00%) 1457 ( 0.00%) 132.45
halflif 29 ( 0.00%) 2797 ( 0.00%) 96.45
starcra 246 ( 0.00%) 32321 ( 0.00%) 131.39
everque 649 ( 0.00%) 125029 ( 0.00%) 192.65
unreal 20 ( 0.00%) 3112 ( 0.00%) 155.60
quake 37 ( 0.00%) 3109 ( 0.00%) 84.03
cuseeme 8 ( 0.00%) 653 ( 0.00%) 81.62
other 3378764 ( 9.09%) 1465728841 ( 5.39%) 433.81
icmp 282356 ( 0.76%) 26089155 ( 0.10%) 92.40
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 19605 ( 0.05%) 3993038 ( 0.01%) 203.67
ip6 1354166 ( 3.64%) 1030953656 ( 3.79%) 761.32
other 7998 ( 0.02%) 1564523 ( 0.01%) 195.61
frag 52174 ( 0.14%) 39956471 ( 0.15%) 765.83
ip6 332905 ( 0.90%) 158791746 ( 0.58%) 476.99
tcp6 161794 ( 0.44%) 76820540 ( 0.28%) 474.80
http(s) 40131 ( 0.11%) 53220316 ( 0.20%) 1326.16
http(c) 49826 ( 0.13%) 4295685 ( 0.02%) 86.21
smtp 492 ( 0.00%) 160237 ( 0.00%) 325.68
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
imap 6 ( 0.00%) 546 ( 0.00%) 91.00
dns 540 ( 0.00%) 83237 ( 0.00%) 154.14
bgp 92 ( 0.00%) 12985 ( 0.00%) 141.14
napster 9 ( 0.00%) 803 ( 0.00%) 89.22
other 70661 ( 0.19%) 19043437 ( 0.07%) 269.50
udp6 68016 ( 0.18%) 20874757 ( 0.08%) 306.91
dns 44632 ( 0.12%) 12588333 ( 0.05%) 282.05
realaud 3 ( 0.00%) 310 ( 0.00%) 103.33
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 23380 ( 0.06%) 8286007 ( 0.03%) 354.41
icmp6 20544 ( 0.06%) 3040903 ( 0.01%) 148.02
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 82436 ( 0.22%) 58039918 ( 0.21%) 704.06
tcpdump file: 201112261400.dump.gz (873.21 MB)