Traffic Trace Info
DumpFile: 201101261400.dump
FileSize: 2915.83MB
Id: 201101261400
StartTime: Wed Jan 26 14:00:00 2011
EndTime: Wed Jan 26 14:15:00 2011
TotalTime: 900.39 seconds
TotalCapSize: -1809.10MB CapLen: 96 bytes
# of packets: 41217420 (26777.71MB)
AvgRate: 249.49Mbps stddev:45.40M
IP flow (unique src/dst pair) Information
# of flows: 1056263 (avg. 39.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.6% 1.1% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 538245
Top 10 bandwidth usage (bytes/total in %):
21.3% 5.3% 3.2% 3.1% 2.2% 2.1% 1.9% 1.7% 1.7% 1.6%
# of IPv6 addresses: 3674
Top 10 bandwidth usage (bytes/total in %):
50.9% 49.1% 15.4% 13.9% 7.0% 7.0% 6.7% 6.6% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101261400.pktlen.png)
detailed numbers
[ 32- 63]: 9738652
[ 64- 127]: 10138499
[ 128- 255]: 1873849
[ 256- 511]: 1187878
[ 512- 1023]: 1105994
[ 1024- 2047]: 17172548
Protocol Breakdown
![[protocol breakdown chart]](201101261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41217420 (100.00%) 28078458866 (100.00%) 681.23
ip 40981627 ( 99.43%) 27895062002 ( 99.35%) 680.67
tcp 34529448 ( 83.77%) 25139384386 ( 89.53%) 728.06
http(s) 15480826 ( 37.56%) 20789978356 ( 74.04%) 1342.95
http(c) 9532837 ( 23.13%) 1455794315 ( 5.18%) 152.71
squid 399735 ( 0.97%) 120011662 ( 0.43%) 300.23
smtp 408301 ( 0.99%) 111570673 ( 0.40%) 273.26
ftp 127517 ( 0.31%) 20532024 ( 0.07%) 161.01
pop3 61054 ( 0.15%) 13784580 ( 0.05%) 225.78
imap 4595 ( 0.01%) 1151826 ( 0.00%) 250.67
telnet 1208 ( 0.00%) 84517 ( 0.00%) 69.96
ssh 738754 ( 1.79%) 202500738 ( 0.72%) 274.11
dns 10482 ( 0.03%) 983028 ( 0.00%) 93.78
bgp 572 ( 0.00%) 111914 ( 0.00%) 195.65
napster 95 ( 0.00%) 6742 ( 0.00%) 70.97
realaud 80 ( 0.00%) 10584 ( 0.00%) 132.30
rtsp 5306 ( 0.01%) 5873906 ( 0.02%) 1107.03
icecast 60933 ( 0.15%) 48598872 ( 0.17%) 797.58
hotline 21 ( 0.00%) 1986 ( 0.00%) 94.57
other 7697128 ( 18.67%) 2368388423 ( 8.43%) 307.70
udp 5446171 ( 13.21%) 2460444302 ( 8.76%) 451.78
dns 877282 ( 2.13%) 143580214 ( 0.51%) 163.66
realaud 15 ( 0.00%) 2022 ( 0.00%) 134.80
halflif 37 ( 0.00%) 4930 ( 0.00%) 133.24
starcra 41 ( 0.00%) 6331 ( 0.00%) 154.41
everque 2941 ( 0.01%) 456723 ( 0.00%) 155.30
unreal 25 ( 0.00%) 3233 ( 0.00%) 129.32
quake 27 ( 0.00%) 3278 ( 0.00%) 121.41
cuseeme 8 ( 0.00%) 842 ( 0.00%) 105.25
other 4565662 ( 11.08%) 2316302550 ( 8.25%) 507.33
icmp 491019 ( 1.19%) 102493554 ( 0.37%) 208.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1624 ( 0.00%) 579776 ( 0.00%) 357.00
ip6 495041 ( 1.20%) 187763322 ( 0.67%) 379.29
other 18139 ( 0.04%) 4377392 ( 0.02%) 241.32
frag 605 ( 0.00%) 617511 ( 0.00%) 1020.68
ip6 235793 ( 0.57%) 183396864 ( 0.65%) 777.79
tcp6 156832 ( 0.38%) 157129348 ( 0.56%) 1001.90
http(s) 37413 ( 0.09%) 43925253 ( 0.16%) 1174.06
http(c) 21297 ( 0.05%) 1901241 ( 0.01%) 89.27
smtp 301 ( 0.00%) 80591 ( 0.00%) 267.74
ftp 2728 ( 0.01%) 295398 ( 0.00%) 108.28
dns 1267 ( 0.00%) 312707 ( 0.00%) 246.81
bgp 88 ( 0.00%) 16138 ( 0.00%) 183.39
other 93738 ( 0.23%) 110598020 ( 0.39%) 1179.86
udp6 52087 ( 0.13%) 16233512 ( 0.06%) 311.66
dns 46051 ( 0.11%) 15359247 ( 0.05%) 333.53
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 6034 ( 0.01%) 874042 ( 0.00%) 144.85
icmp6 14801 ( 0.04%) 1565651 ( 0.01%) 105.78
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 11943 ( 0.03%) 8451325 ( 0.03%) 707.64
tcpdump file: 201101261400.dump.gz (1024.67 MB)