Traffic Trace Info
DumpFile: 201106271400.dump
FileSize: 4576.16MB
Id: 201106271400
StartTime: Mon Jun 27 14:00:00 2011
EndTime: Mon Jun 27 14:15:00 2011
TotalTime: 899.98 seconds
TotalCapSize: -505.67MB CapLen: 96 bytes
# of packets: 64605236 (39258.39MB)
AvgRate: 365.88Mbps stddev:38.94M
IP flow (unique src/dst pair) Information
# of flows: 1278588 (avg. 50.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.4% 2.0% 1.9% 1.7% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 579192
Top 10 bandwidth usage (bytes/total in %):
11.0% 8.7% 6.7% 5.1% 5.0% 4.6% 4.5% 2.9% 2.5% 2.4%
# of IPv6 addresses: 4173
Top 10 bandwidth usage (bytes/total in %):
47.1% 28.0% 5.7% 5.7% 3.9% 3.7% 3.2% 3.0% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201106271400.pktlen.png)
detailed numbers
[ 32- 63]: 20375625
[ 64- 127]: 14812745
[ 128- 255]: 1455544
[ 256- 511]: 1405892
[ 512- 1023]: 1384822
[ 1024- 2047]: 25170608
Protocol Breakdown
![[protocol breakdown chart]](201106271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64605236 (100.00%) 41165402111 (100.00%) 637.18
ip 64344759 ( 99.60%) 41091051964 ( 99.82%) 638.61
tcp 56437993 ( 87.36%) 35882983366 ( 87.17%) 635.79
http(s) 18768828 ( 29.05%) 24601852793 ( 59.76%) 1310.78
http(c) 14979207 ( 23.19%) 4044290060 ( 9.82%) 269.99
squid 284058 ( 0.44%) 233803294 ( 0.57%) 823.08
smtp 243452 ( 0.38%) 163593079 ( 0.40%) 671.97
ftp 52929 ( 0.08%) 38072916 ( 0.09%) 719.32
pop3 15968 ( 0.02%) 1879953 ( 0.00%) 117.73
imap 5181 ( 0.01%) 2167361 ( 0.01%) 418.33
telnet 258 ( 0.00%) 16672 ( 0.00%) 64.62
ssh 91870 ( 0.14%) 25278861 ( 0.06%) 275.16
dns 23087 ( 0.04%) 2260048 ( 0.01%) 97.89
bgp 548 ( 0.00%) 88057 ( 0.00%) 160.69
napster 545 ( 0.00%) 37568 ( 0.00%) 68.93
realaud 306 ( 0.00%) 26493 ( 0.00%) 86.58
rtsp 18471 ( 0.03%) 13885456 ( 0.03%) 751.74
icecast 7434 ( 0.01%) 629845 ( 0.00%) 84.72
hotline 122 ( 0.00%) 7662 ( 0.00%) 62.80
other 21945729 ( 33.97%) 6755093248 ( 16.41%) 307.81
udp 6680686 ( 10.34%) 4650123099 ( 11.30%) 696.05
dns 1142915 ( 1.77%) 198621476 ( 0.48%) 173.78
realaud 14 ( 0.00%) 1550 ( 0.00%) 110.71
halflif 364 ( 0.00%) 79940 ( 0.00%) 219.62
starcra 43 ( 0.00%) 6697 ( 0.00%) 155.74
everque 672 ( 0.00%) 99390 ( 0.00%) 147.90
unreal 42 ( 0.00%) 8097 ( 0.00%) 192.79
quake 1447 ( 0.00%) 117992 ( 0.00%) 81.54
cuseeme 6 ( 0.00%) 505 ( 0.00%) 84.17
other 5529896 ( 8.56%) 4450606256 ( 10.81%) 804.83
icmp 579940 ( 0.90%) 79931980 ( 0.19%) 137.83
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9217 ( 0.01%) 2141318 ( 0.01%) 232.32
ip6 616088 ( 0.95%) 471835623 ( 1.15%) 765.86
other 20651 ( 0.03%) 4017418 ( 0.01%) 194.54
frag 17308 ( 0.03%) 13305382 ( 0.03%) 768.74
ip6 260477 ( 0.40%) 74350147 ( 0.18%) 285.44
tcp6 190271 ( 0.29%) 55602739 ( 0.14%) 292.23
http(s) 20843 ( 0.03%) 20132331 ( 0.05%) 965.90
http(c) 137921 ( 0.21%) 12319305 ( 0.03%) 89.32
squid 118 ( 0.00%) 94607 ( 0.00%) 801.75
smtp 169 ( 0.00%) 25188 ( 0.00%) 149.04
ftp 43 ( 0.00%) 3935 ( 0.00%) 91.51
dns 322 ( 0.00%) 74493 ( 0.00%) 231.34
bgp 91 ( 0.00%) 20001 ( 0.00%) 219.79
other 30764 ( 0.05%) 22932879 ( 0.06%) 745.45
udp6 48867 ( 0.08%) 15037993 ( 0.04%) 307.73
dns 46888 ( 0.07%) 14716348 ( 0.04%) 313.86
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 1978 ( 0.00%) 321544 ( 0.00%) 162.56
icmp6 21031 ( 0.03%) 3438884 ( 0.01%) 163.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 277 ( 0.00%) 266315 ( 0.00%) 961.43
tcpdump file: 201106271400.dump.gz (1607.42 MB)