Traffic Trace Info
DumpFile: 201112281400.dump
FileSize: 2635.80MB
Id: 201112281400
StartTime: Wed Dec 28 14:00:00 2011
EndTime: Wed Dec 28 14:15:01 2011
TotalTime: 900.25 seconds
TotalCapSize: -2032.34MB CapLen: 96 bytes
# of packets: 37494891 (26805.84MB)
AvgRate: 249.79Mbps stddev:51.10M
IP flow (unique src/dst pair) Information
# of flows: 889009 (avg. 42.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.9% 2.7% 2.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 466711
Top 10 bandwidth usage (bytes/total in %):
26.0% 11.5% 5.3% 5.3% 4.3% 4.0% 3.4% 3.1% 2.9% 2.7%
# of IPv6 addresses: 4239
Top 10 bandwidth usage (bytes/total in %):
26.6% 18.3% 16.9% 9.9% 9.9% 7.5% 7.1% 7.0% 4.9% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112281400.pktlen.png)
detailed numbers
[ 32- 63]: 9481579
[ 64- 127]: 7990163
[ 128- 255]: 1058092
[ 256- 511]: 621589
[ 512- 1023]: 562044
[ 1024- 2047]: 17781424
Protocol Breakdown
![[protocol breakdown chart]](201112281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37494891 (100.00%) 28107956303 (100.00%) 749.65
ip 37249243 ( 99.34%) 28023518954 ( 99.70%) 752.32
tcp 31040512 ( 82.79%) 24682008852 ( 87.81%) 795.15
http(s) 13012856 ( 34.71%) 17636514274 ( 62.75%) 1355.31
http(c) 7355109 ( 19.62%) 1415410645 ( 5.04%) 192.44
squid 103170 ( 0.28%) 68551876 ( 0.24%) 664.46
smtp 69748 ( 0.19%) 44804050 ( 0.16%) 642.37
nntp 4 ( 0.00%) 264 ( 0.00%) 66.00
ftp 55486 ( 0.15%) 21072259 ( 0.07%) 379.78
pop3 6052 ( 0.02%) 3567683 ( 0.01%) 589.50
imap 1022 ( 0.00%) 145193 ( 0.00%) 142.07
telnet 2874 ( 0.01%) 231942 ( 0.00%) 80.70
ssh 121503 ( 0.32%) 18662885 ( 0.07%) 153.60
dns 50248 ( 0.13%) 3705073 ( 0.01%) 73.74
bgp 656 ( 0.00%) 112254 ( 0.00%) 171.12
napster 267 ( 0.00%) 20236 ( 0.00%) 75.79
realaud 51 ( 0.00%) 5575 ( 0.00%) 109.31
rtsp 5000 ( 0.01%) 7372990 ( 0.03%) 1474.60
icecast 10467 ( 0.03%) 1132635 ( 0.00%) 108.21
hotline 182 ( 0.00%) 19180 ( 0.00%) 105.38
other 10245817 ( 27.33%) 5460679838 ( 19.43%) 532.97
udp 4568881 ( 12.19%) 2311604554 ( 8.22%) 505.95
dns 414970 ( 1.11%) 105852818 ( 0.38%) 255.09
realaud 12 ( 0.00%) 2009 ( 0.00%) 167.42
halflif 742 ( 0.00%) 117980 ( 0.00%) 159.00
starcra 310 ( 0.00%) 38845 ( 0.00%) 125.31
everque 371 ( 0.00%) 84313 ( 0.00%) 227.26
unreal 9 ( 0.00%) 1686 ( 0.00%) 187.33
quake 29 ( 0.00%) 3208 ( 0.00%) 110.62
cuseeme 2 ( 0.00%) 176 ( 0.00%) 88.00
other 3606870 ( 9.62%) 2172757868 ( 7.73%) 602.39
icmp 286957 ( 0.77%) 28817993 ( 0.10%) 100.43
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2087 ( 0.01%) 805738 ( 0.00%) 386.07
ip6 1344543 ( 3.59%) 999164995 ( 3.55%) 743.13
other 6078 ( 0.02%) 1097552 ( 0.00%) 180.58
frag 1164091 ( 3.10%) 887872985 ( 3.16%) 762.72
ip6 245648 ( 0.66%) 84437349 ( 0.30%) 343.73
tcp6 165938 ( 0.44%) 61784890 ( 0.22%) 372.34
http(s) 16347 ( 0.04%) 19470239 ( 0.07%) 1191.06
http(c) 33149 ( 0.09%) 3004512 ( 0.01%) 90.64
smtp 29 ( 0.00%) 17024 ( 0.00%) 587.03
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 18 ( 0.00%) 6665 ( 0.00%) 370.28
dns 655 ( 0.00%) 108271 ( 0.00%) 165.30
bgp 88 ( 0.00%) 14750 ( 0.00%) 167.61
other 115626 ( 0.31%) 39161116 ( 0.14%) 338.69
udp6 58984 ( 0.16%) 16075134 ( 0.06%) 272.53
dns 40722 ( 0.11%) 10996267 ( 0.04%) 270.03
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 18261 ( 0.05%) 5078763 ( 0.02%) 278.12
icmp6 14814 ( 0.04%) 2352588 ( 0.01%) 158.81
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5799 ( 0.02%) 4209363 ( 0.01%) 725.88
tcpdump file: 201112281400.dump.gz (872.93 MB)