Traffic Trace Info
DumpFile: 201102271400.dump
FileSize: 2446.50MB
Id: 201102271400
StartTime: Sun Feb 27 14:00:00 2011
EndTime: Sun Feb 27 14:15:00 2011
TotalTime: 899.93 seconds
TotalCapSize: 1915.13MB CapLen: 96 bytes
# of packets: 34823238 (27497.29MB)
AvgRate: 256.24Mbps stddev:62.39M
IP flow (unique src/dst pair) Information
# of flows: 789828 (avg. 44.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 4.0% 2.0% 1.9% 1.9% 1.6% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 427824
Top 10 bandwidth usage (bytes/total in %):
28.3% 9.0% 9.0% 5.5% 4.1% 4.1% 4.0% 3.0% 2.9% 2.6%
# of IPv6 addresses: 3057
Top 10 bandwidth usage (bytes/total in %):
83.5% 76.4% 9.3% 9.3% 6.7% 1.1% 0.5% 0.5% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102271400.pktlen.png)
detailed numbers
[ 32- 63]: 7017888
[ 64- 127]: 6958763
[ 128- 255]: 1167355
[ 256- 511]: 801454
[ 512- 1023]: 682101
[ 1024- 2047]: 18195677
Protocol Breakdown
![[protocol breakdown chart]](201102271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34823238 (100.00%) 28832994922 (100.00%) 827.98
ip 34484977 ( 99.03%) 28636173744 ( 99.32%) 830.40
tcp 29113928 ( 83.60%) 26069194806 ( 90.41%) 895.42
http(s) 15154057 ( 43.52%) 19757192872 ( 68.52%) 1303.76
http(c) 8638387 ( 24.81%) 3413810873 ( 11.84%) 395.19
squid 311582 ( 0.89%) 83697489 ( 0.29%) 268.62
smtp 147066 ( 0.42%) 59316729 ( 0.21%) 403.33
nntp 18 ( 0.00%) 1112 ( 0.00%) 61.78
ftp 100484 ( 0.29%) 9802079 ( 0.03%) 97.55
pop3 11754 ( 0.03%) 9719093 ( 0.03%) 826.88
imap 7953 ( 0.02%) 4155704 ( 0.01%) 522.53
telnet 1322 ( 0.00%) 95338 ( 0.00%) 72.12
ssh 146834 ( 0.42%) 67630487 ( 0.23%) 460.59
dns 8462 ( 0.02%) 620980 ( 0.00%) 73.38
bgp 610 ( 0.00%) 125866 ( 0.00%) 206.34
napster 33 ( 0.00%) 4086 ( 0.00%) 123.82
realaud 81 ( 0.00%) 12058 ( 0.00%) 148.86
rtsp 148696 ( 0.43%) 202261679 ( 0.70%) 1360.24
icecast 1924 ( 0.01%) 158938 ( 0.00%) 82.61
hotline 12 ( 0.00%) 812 ( 0.00%) 67.67
other 4434653 ( 12.73%) 2460588611 ( 8.53%) 554.85
udp 4089025 ( 11.74%) 2073057863 ( 7.19%) 506.98
dns 436621 ( 1.25%) 93326717 ( 0.32%) 213.75
realaud 21 ( 0.00%) 2893 ( 0.00%) 137.76
halflif 30 ( 0.00%) 2636 ( 0.00%) 87.87
starcra 33 ( 0.00%) 4750 ( 0.00%) 143.94
everque 145 ( 0.00%) 30719 ( 0.00%) 211.86
unreal 31 ( 0.00%) 3732 ( 0.00%) 120.39
quake 20 ( 0.00%) 4613 ( 0.00%) 230.65
cuseeme 4 ( 0.00%) 337 ( 0.00%) 84.25
other 3652003 ( 10.49%) 1979592764 ( 6.87%) 542.06
icmp 535688 ( 1.54%) 71375261 ( 0.25%) 133.24
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 724 ( 0.00%) 108112 ( 0.00%) 149.33
ip6 730149 ( 2.10%) 417702723 ( 1.45%) 572.08
other 15279 ( 0.04%) 4715819 ( 0.02%) 308.65
frag 1305 ( 0.00%) 1387006 ( 0.00%) 1062.84
ip6 338261 ( 0.97%) 196821178 ( 0.68%) 581.86
tcp6 294370 ( 0.85%) 186542993 ( 0.65%) 633.70
http(s) 7371 ( 0.02%) 2394299 ( 0.01%) 324.83
http(c) 15054 ( 0.04%) 1414834 ( 0.00%) 93.98
smtp 327 ( 0.00%) 114408 ( 0.00%) 349.87
ftp 74 ( 0.00%) 6775 ( 0.00%) 91.55
dns 554 ( 0.00%) 127254 ( 0.00%) 229.70
bgp 94 ( 0.00%) 16079 ( 0.00%) 171.05
other 270896 ( 0.78%) 182469344 ( 0.63%) 673.58
udp6 27750 ( 0.08%) 8334865 ( 0.03%) 300.36
dns 26848 ( 0.08%) 8187477 ( 0.03%) 304.96
other 902 ( 0.00%) 147388 ( 0.00%) 163.40
icmp6 15790 ( 0.05%) 1684683 ( 0.01%) 106.69
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 236 ( 0.00%) 243009 ( 0.00%) 1029.70
tcpdump file: 201102271400.dump.gz (795.33 MB)