Traffic Trace Info
DumpFile: 201011271400.dump
FileSize: 2923.50MB
Id: 201011271400
StartTime: Sat Nov 27 14:00:00 2010
EndTime: Sat Nov 27 14:15:01 2010
TotalTime: 900.62 seconds
TotalCapSize: -1787.15MB CapLen: 96 bytes
# of packets: 40276491 (28046.95MB)
AvgRate: 261.23Mbps stddev:26.01M
IP flow (unique src/dst pair) Information
# of flows: 1032005 (avg. 39.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.9% 1.8% 1.5% 1.2% 1.2% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 538823
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.8% 9.5% 8.9% 6.6% 5.0% 2.9% 2.2% 2.0% 1.9%
# of IPv6 addresses: 4023
Top 10 bandwidth usage (bytes/total in %):
64.1% 63.8% 8.2% 8.2% 5.7% 5.0% 5.0% 4.0% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011271400.pktlen.png)
detailed numbers
[ 32- 63]: 6448953
[ 64- 127]: 10820230
[ 128- 255]: 2042415
[ 256- 511]: 1492969
[ 512- 1023]: 1113871
[ 1024- 2047]: 18358053
Protocol Breakdown
![[protocol breakdown chart]](201011271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40276491 (100.00%) 29409354531 (100.00%) 730.19
ip 40015020 ( 99.35%) 29163146261 ( 99.16%) 728.80
tcp 27860021 ( 69.17%) 22838093030 ( 77.66%) 819.74
http(s) 12358107 ( 30.68%) 16579598228 ( 56.38%) 1341.60
http(c) 7192637 ( 17.86%) 1290669258 ( 4.39%) 179.44
squid 300759 ( 0.75%) 113322916 ( 0.39%) 376.79
smtp 188524 ( 0.47%) 54946930 ( 0.19%) 291.46
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 114015 ( 0.28%) 56177104 ( 0.19%) 492.72
pop3 6002 ( 0.01%) 1753456 ( 0.01%) 292.15
imap 24307 ( 0.06%) 27738499 ( 0.09%) 1141.17
telnet 340 ( 0.00%) 27415 ( 0.00%) 80.63
ssh 1635656 ( 4.06%) 236481626 ( 0.80%) 144.58
dns 11689 ( 0.03%) 1041572 ( 0.00%) 89.11
bgp 552 ( 0.00%) 88414 ( 0.00%) 160.17
napster 4517 ( 0.01%) 307903 ( 0.00%) 68.17
realaud 36 ( 0.00%) 5048 ( 0.00%) 140.22
rtsp 14202 ( 0.04%) 6353890 ( 0.02%) 447.39
icecast 2890 ( 0.01%) 563089 ( 0.00%) 194.84
hotline 11 ( 0.00%) 1770 ( 0.00%) 160.91
other 6005774 ( 14.91%) 4469015726 ( 15.20%) 744.12
udp 7668349 ( 19.04%) 3537978012 ( 12.03%) 461.37
dns 741870 ( 1.84%) 117330356 ( 0.40%) 158.15
realaud 22 ( 0.00%) 3118 ( 0.00%) 141.73
halflif 3957 ( 0.01%) 855629 ( 0.00%) 216.23
starcra 83 ( 0.00%) 16850 ( 0.00%) 203.01
everque 190 ( 0.00%) 34368 ( 0.00%) 180.88
unreal 34 ( 0.00%) 3931 ( 0.00%) 115.62
quake 69 ( 0.00%) 5718 ( 0.00%) 82.87
cuseeme 10 ( 0.00%) 3996 ( 0.00%) 399.60
other 6921920 ( 17.19%) 3419620586 ( 11.63%) 494.03
icmp 554173 ( 1.38%) 122059307 ( 0.42%) 220.25
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 8124 ( 0.02%) 1467368 ( 0.00%) 180.62
ip6 3909296 ( 9.71%) 2657728451 ( 9.04%) 679.85
other 14877 ( 0.04%) 5801373 ( 0.02%) 389.96
frag 7187 ( 0.02%) 5838468 ( 0.02%) 812.37
ip6 261471 ( 0.65%) 246208270 ( 0.84%) 941.63
tcp6 205625 ( 0.51%) 232771640 ( 0.79%) 1132.02
http(s) 1234 ( 0.00%) 1225150 ( 0.00%) 992.83
http(c) 5981 ( 0.01%) 647865 ( 0.00%) 108.32
smtp 1130 ( 0.00%) 1385332 ( 0.00%) 1225.96
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 670 ( 0.00%) 176769 ( 0.00%) 263.83
bgp 92 ( 0.00%) 18888 ( 0.00%) 205.30
other 196432 ( 0.49%) 229309970 ( 0.78%) 1167.38
udp6 36369 ( 0.09%) 10524022 ( 0.04%) 289.37
dns 32358 ( 0.08%) 9871476 ( 0.03%) 305.07
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
starcra 16 ( 0.00%) 1360 ( 0.00%) 85.00
everque 2 ( 0.00%) 288 ( 0.00%) 144.00
other 3992 ( 0.01%) 650786 ( 0.00%) 163.02
icmp6 18169 ( 0.05%) 2030685 ( 0.01%) 111.77
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
rtopt6 2 ( 0.00%) 288 ( 0.00%) 144.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1196 ( 0.00%) 866615 ( 0.00%) 724.59
tcpdump file: 201011271400.dump.gz (1033.22 MB)