Traffic Trace Info
DumpFile: 201101271400.dump
FileSize: 3259.25MB
Id: 201101271400
StartTime: Thu Jan 27 14:00:00 2011
EndTime: Thu Jan 27 14:15:00 2011
TotalTime: 899.93 seconds
TotalCapSize: -1552.07MB CapLen: 96 bytes
# of packets: 46878714 (32326.74MB)
AvgRate: 301.24Mbps stddev:62.98M
IP flow (unique src/dst pair) Information
# of flows: 1123031 (avg. 41.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.0% 2.2% 2.1% 1.3% 1.2% 1.0% 0.9% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 583587
Top 10 bandwidth usage (bytes/total in %):
21.3% 6.1% 6.0% 5.6% 3.6% 3.4% 3.0% 2.4% 2.2% 2.1%
# of IPv6 addresses: 3373
Top 10 bandwidth usage (bytes/total in %):
34.8% 29.7% 21.2% 21.2% 15.9% 13.6% 5.1% 5.1% 5.1% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101271400.pktlen.png)
detailed numbers
[ 32- 63]: 9762811
[ 64- 127]: 12239457
[ 128- 255]: 1595912
[ 256- 511]: 1081939
[ 512- 1023]: 1079823
[ 1024- 2047]: 21118772
Protocol Breakdown
![[protocol breakdown chart]](201101271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46878714 (100.00%) 33897042085 (100.00%) 723.08
ip 46685666 ( 99.59%) 33772372170 ( 99.63%) 723.40
tcp 36841123 ( 78.59%) 29220460503 ( 86.20%) 793.15
http(s) 17570859 ( 37.48%) 23903695951 ( 70.52%) 1360.42
http(c) 10692813 ( 22.81%) 1740426658 ( 5.13%) 162.77
squid 327989 ( 0.70%) 136388196 ( 0.40%) 415.83
smtp 264472 ( 0.56%) 148972128 ( 0.44%) 563.28
nntp 9 ( 0.00%) 2417 ( 0.00%) 268.56
ftp 32077 ( 0.07%) 9692984 ( 0.03%) 302.18
pop3 20061 ( 0.04%) 7722036 ( 0.02%) 384.93
imap 49562 ( 0.11%) 61601362 ( 0.18%) 1242.92
telnet 2027 ( 0.00%) 142838 ( 0.00%) 70.47
ssh 309719 ( 0.66%) 36860628 ( 0.11%) 119.01
dns 10298 ( 0.02%) 1001286 ( 0.00%) 97.23
bgp 590 ( 0.00%) 114816 ( 0.00%) 194.60
napster 136 ( 0.00%) 11825 ( 0.00%) 86.95
realaud 72 ( 0.00%) 7173 ( 0.00%) 99.62
rtsp 5971 ( 0.01%) 6404608 ( 0.02%) 1072.62
icecast 2793 ( 0.01%) 427465 ( 0.00%) 153.05
hotline 28 ( 0.00%) 2884 ( 0.00%) 103.00
other 7551618 ( 16.11%) 3166979206 ( 9.34%) 419.38
udp 6957496 ( 14.84%) 4055359171 ( 11.96%) 582.88
dns 920492 ( 1.96%) 150441427 ( 0.44%) 163.44
realaud 24 ( 0.00%) 3019 ( 0.00%) 125.79
halflif 227 ( 0.00%) 18809 ( 0.00%) 82.86
starcra 105 ( 0.00%) 17985 ( 0.00%) 171.29
everque 3902 ( 0.01%) 551829 ( 0.00%) 141.42
unreal 127 ( 0.00%) 16008 ( 0.00%) 126.05
quake 26 ( 0.00%) 3334 ( 0.00%) 128.23
cuseeme 8 ( 0.00%) 1048 ( 0.00%) 131.00
other 6032525 ( 12.87%) 3904260855 ( 11.52%) 647.20
icmp 2248556 ( 4.80%) 277704581 ( 0.82%) 123.50
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2291 ( 0.00%) 735826 ( 0.00%) 321.18
ip6 622323 ( 1.33%) 214316676 ( 0.63%) 344.38
other 13692 ( 0.03%) 3776143 ( 0.01%) 275.79
frag 440 ( 0.00%) 474661 ( 0.00%) 1078.78
ip6 193048 ( 0.41%) 124669915 ( 0.37%) 645.80
tcp6 121490 ( 0.26%) 104937475 ( 0.31%) 863.75
http(s) 34863 ( 0.07%) 49025141 ( 0.14%) 1406.22
http(c) 20049 ( 0.04%) 1777057 ( 0.01%) 88.64
squid 29 ( 0.00%) 2446 ( 0.00%) 84.34
smtp 159 ( 0.00%) 18930 ( 0.00%) 119.06
ftp 2704 ( 0.01%) 279061 ( 0.00%) 103.20
ssh 1266 ( 0.00%) 291488 ( 0.00%) 230.24
dns 1100 ( 0.00%) 279338 ( 0.00%) 253.94
bgp 91 ( 0.00%) 16562 ( 0.00%) 182.00
other 61229 ( 0.13%) 53247452 ( 0.16%) 869.64
udp6 55761 ( 0.12%) 17859512 ( 0.05%) 320.29
dns 53458 ( 0.11%) 17538725 ( 0.05%) 328.08
quake 2 ( 0.00%) 222 ( 0.00%) 111.00
other 2301 ( 0.00%) 320565 ( 0.00%) 139.32
icmp6 15429 ( 0.03%) 1625315 ( 0.00%) 105.34
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 239 ( 0.00%) 230703 ( 0.00%) 965.28
tcpdump file: 201101271400.dump.gz (1142.61 MB)