Traffic Trace Info
DumpFile: 201101281400.dump
FileSize: 3253.31MB
Id: 201101281400
StartTime: Fri Jan 28 14:00:00 2011
EndTime: Fri Jan 28 14:15:00 2011
TotalTime: 899.88 seconds
TotalCapSize: -1552.20MB CapLen: 96 bytes
# of packets: 46498107 (31214.86MB)
AvgRate: 290.98Mbps stddev:48.61M
IP flow (unique src/dst pair) Information
# of flows: 989735 (avg. 46.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.8% 1.2% 1.2% 0.8% 0.8% 0.7% 0.7% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 495395
Top 10 bandwidth usage (bytes/total in %):
17.1% 15.3% 15.2% 4.8% 2.3% 2.1% 1.7% 1.6% 1.6% 1.6%
# of IPv6 addresses: 3779
Top 10 bandwidth usage (bytes/total in %):
31.7% 31.3% 16.7% 15.0% 12.3% 7.7% 7.7% 5.6% 4.0% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101281400.pktlen.png)
detailed numbers
[ 32- 63]: 11839443
[ 64- 127]: 9242208
[ 128- 255]: 1701860
[ 256- 511]: 1102832
[ 512- 1023]: 3042647
[ 1024- 2047]: 19569117
Protocol Breakdown
![[protocol breakdown chart]](201101281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46498107 (100.00%) 32731151367 (100.00%) 703.92
ip 46330672 ( 99.64%) 32621822550 ( 99.67%) 704.11
tcp 39769029 ( 85.53%) 29370656036 ( 89.73%) 738.53
http(s) 17276152 ( 37.15%) 20600916003 ( 62.94%) 1192.45
http(c) 13777955 ( 29.63%) 6511570945 ( 19.89%) 472.61
squid 420310 ( 0.90%) 193061863 ( 0.59%) 459.33
smtp 310409 ( 0.67%) 200590513 ( 0.61%) 646.21
ftp 33567 ( 0.07%) 4222180 ( 0.01%) 125.78
pop3 20033 ( 0.04%) 4724277 ( 0.01%) 235.82
imap 6660 ( 0.01%) 3755847 ( 0.01%) 563.94
telnet 7687 ( 0.02%) 551383 ( 0.00%) 71.73
ssh 59873 ( 0.13%) 19245363 ( 0.06%) 321.44
dns 42888 ( 0.09%) 3016374 ( 0.01%) 70.33
bgp 591 ( 0.00%) 106181 ( 0.00%) 179.66
napster 404 ( 0.00%) 62931 ( 0.00%) 155.77
realaud 60 ( 0.00%) 4292 ( 0.00%) 71.53
rtsp 5166 ( 0.01%) 5841215 ( 0.02%) 1130.70
icecast 9415 ( 0.02%) 668507 ( 0.00%) 71.00
hotline 51 ( 0.00%) 4075 ( 0.00%) 79.90
other 7797807 ( 16.77%) 1822314027 ( 5.57%) 233.70
udp 5429913 ( 11.68%) 2986567742 ( 9.12%) 550.02
dns 875565 ( 1.88%) 142137111 ( 0.43%) 162.34
realaud 1866 ( 0.00%) 113931 ( 0.00%) 61.06
halflif 177 ( 0.00%) 19184 ( 0.00%) 108.38
starcra 68 ( 0.00%) 10513 ( 0.00%) 154.60
everque 1598 ( 0.00%) 264335 ( 0.00%) 165.42
unreal 37 ( 0.00%) 5758 ( 0.00%) 155.62
quake 22 ( 0.00%) 2711 ( 0.00%) 123.23
cuseeme 4 ( 0.00%) 337 ( 0.00%) 84.25
other 4550461 ( 9.79%) 2843933971 ( 8.69%) 624.98
icmp 695376 ( 1.50%) 110276454 ( 0.34%) 158.59
ipip 178 ( 0.00%) 18584 ( 0.00%) 104.40
ipsec 1239 ( 0.00%) 412010 ( 0.00%) 332.53
ip6 422080 ( 0.91%) 151746524 ( 0.46%) 359.52
other 12857 ( 0.03%) 2145200 ( 0.01%) 166.85
frag 558 ( 0.00%) 586283 ( 0.00%) 1050.69
ip6 167435 ( 0.36%) 109328817 ( 0.33%) 652.96
tcp6 98915 ( 0.21%) 90432900 ( 0.28%) 914.25
http(s) 32518 ( 0.07%) 45484393 ( 0.14%) 1398.75
http(c) 12554 ( 0.03%) 1139126 ( 0.00%) 90.74
squid 23 ( 0.00%) 1938 ( 0.00%) 84.26
smtp 280 ( 0.00%) 146479 ( 0.00%) 523.14
ftp 1825 ( 0.00%) 182979 ( 0.00%) 100.26
ssh 438 ( 0.00%) 45301 ( 0.00%) 103.43
dns 715 ( 0.00%) 194191 ( 0.00%) 271.60
bgp 93 ( 0.00%) 18220 ( 0.00%) 195.91
other 50469 ( 0.11%) 43220273 ( 0.13%) 856.37
udp6 48730 ( 0.10%) 15472453 ( 0.05%) 317.51
dns 46179 ( 0.10%) 15131204 ( 0.05%) 327.66
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2550 ( 0.01%) 341142 ( 0.00%) 133.78
icmp6 17541 ( 0.04%) 1842839 ( 0.01%) 105.06
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 2119 ( 0.00%) 1563597 ( 0.00%) 737.89
tcpdump file: 201101281400.dump.gz (1131.34 MB)