Traffic Trace Info
DumpFile: 201106261400.dump
FileSize: 2543.37MB
Id: 201106261400
StartTime: Sun Jun 26 14:00:01 2011
EndTime: Sun Jun 26 14:15:01 2011
TotalTime: 899.93 seconds
TotalCapSize: 1995.36MB CapLen: 96 bytes
# of packets: 35911370 (23499.69MB)
AvgRate: 219.05Mbps stddev:44.28M
IP flow (unique src/dst pair) Information
# of flows: 992118 (avg. 36.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.1% 2.2% 1.9% 1.7% 1.3% 1.1% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 495161
Top 10 bandwidth usage (bytes/total in %):
21.5% 8.4% 6.5% 4.2% 4.1% 3.2% 3.2% 2.4% 2.3% 2.0%
# of IPv6 addresses: 3434
Top 10 bandwidth usage (bytes/total in %):
40.6% 35.6% 33.5% 13.4% 12.1% 8.7% 4.2% 3.4% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106261400.pktlen.png)
detailed numbers
[ 32- 63]: 9369330
[ 64- 127]: 8768842
[ 128- 255]: 1134867
[ 256- 511]: 711327
[ 512- 1023]: 784499
[ 1024- 2047]: 15142505
Protocol Breakdown
![[protocol breakdown chart]](201106261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35911370 (100.00%) 24641214965 (100.00%) 686.17
ip 35603618 ( 99.14%) 24498106267 ( 99.42%) 688.08
tcp 29364663 ( 81.77%) 21420006932 ( 86.93%) 729.45
http(s) 12585129 ( 35.04%) 17113951833 ( 69.45%) 1359.86
http(c) 6085839 ( 16.95%) 807635812 ( 3.28%) 132.71
squid 160234 ( 0.45%) 96149479 ( 0.39%) 600.06
smtp 197363 ( 0.55%) 111055650 ( 0.45%) 562.70
nntp 3 ( 0.00%) 198 ( 0.00%) 66.00
ftp 7783 ( 0.02%) 826710 ( 0.00%) 106.22
pop3 14218 ( 0.04%) 15371607 ( 0.06%) 1081.14
imap 10506 ( 0.03%) 8487084 ( 0.03%) 807.83
telnet 749 ( 0.00%) 48777 ( 0.00%) 65.12
ssh 434580 ( 1.21%) 436130953 ( 1.77%) 1003.57
dns 15297 ( 0.04%) 1057447 ( 0.00%) 69.13
bgp 559 ( 0.00%) 97044 ( 0.00%) 173.60
napster 397 ( 0.00%) 25080 ( 0.00%) 63.17
realaud 91 ( 0.00%) 5762 ( 0.00%) 63.32
rtsp 11407 ( 0.03%) 10664182 ( 0.04%) 934.88
icecast 1019 ( 0.00%) 141050 ( 0.00%) 138.42
hotline 172 ( 0.00%) 11482 ( 0.00%) 66.76
other 9839308 ( 27.40%) 2818346242 ( 11.44%) 286.44
udp 4987662 ( 13.89%) 2464999519 ( 10.00%) 494.22
dns 888541 ( 2.47%) 137353012 ( 0.56%) 154.58
rip 1 ( 0.00%) 143 ( 0.00%) 143.00
realaud 16 ( 0.00%) 1537 ( 0.00%) 96.06
halflif 1586 ( 0.00%) 173440 ( 0.00%) 109.36
starcra 62 ( 0.00%) 9466 ( 0.00%) 152.68
everque 784 ( 0.00%) 109668 ( 0.00%) 139.88
unreal 23 ( 0.00%) 4620 ( 0.00%) 200.87
quake 1785 ( 0.00%) 143274 ( 0.00%) 80.27
cuseeme 7 ( 0.00%) 683 ( 0.00%) 97.57
other 4094767 ( 11.40%) 2327156145 ( 9.44%) 568.32
icmp 461030 ( 1.28%) 79100340 ( 0.32%) 171.57
ipip 183 ( 0.00%) 19074 ( 0.00%) 104.23
ipsec 9216 ( 0.03%) 2129552 ( 0.01%) 231.07
ip6 762444 ( 2.12%) 525791462 ( 2.13%) 689.61
other 18420 ( 0.05%) 6059388 ( 0.02%) 328.96
frag 585 ( 0.00%) 588303 ( 0.00%) 1005.65
ip6 307752 ( 0.86%) 143108698 ( 0.58%) 465.01
tcp6 254299 ( 0.71%) 130670179 ( 0.53%) 513.84
http(s) 15835 ( 0.04%) 15259466 ( 0.06%) 963.65
http(c) 127068 ( 0.35%) 10982183 ( 0.04%) 86.43
smtp 126 ( 0.00%) 81966 ( 0.00%) 650.52
ftp 82 ( 0.00%) 7825 ( 0.00%) 95.43
dns 677 ( 0.00%) 135305 ( 0.00%) 199.86
bgp 89 ( 0.00%) 16298 ( 0.00%) 183.12
other 110422 ( 0.31%) 104187136 ( 0.42%) 943.54
udp6 32333 ( 0.09%) 8807014 ( 0.04%) 272.38
dns 31430 ( 0.09%) 8690010 ( 0.04%) 276.49
halflif 2 ( 0.00%) 216 ( 0.00%) 108.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
other 900 ( 0.00%) 116684 ( 0.00%) 129.65
icmp6 20784 ( 0.06%) 3318912 ( 0.01%) 159.69
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 305 ( 0.00%) 308377 ( 0.00%) 1011.07
tcpdump file: 201106261400.dump.gz (878.82 MB)