Traffic Trace Info
DumpFile: 201107261400.dump
FileSize: 3349.41MB
Id: 201107261400
StartTime: Tue Jul 26 14:00:00 2011
EndTime: Tue Jul 26 14:15:00 2011
TotalTime: 900.08 seconds
TotalCapSize: -1466.28MB CapLen: 96 bytes
# of packets: 47165139 (26933.14MB)
AvgRate: 250.98Mbps stddev:45.36M
IP flow (unique src/dst pair) Information
# of flows: 1147151 (avg. 41.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.2% 2.5% 1.7% 1.6% 1.1% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 558699
Top 10 bandwidth usage (bytes/total in %):
20.7% 10.4% 5.1% 4.4% 3.8% 3.8% 3.3% 2.6% 2.3% 2.1%
# of IPv6 addresses: 4345
Top 10 bandwidth usage (bytes/total in %):
38.1% 34.4% 32.8% 21.3% 13.1% 4.0% 2.7% 2.0% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107261400.pktlen.png)
detailed numbers
[ 32- 63]: 14988500
[ 64- 127]: 11865943
[ 128- 255]: 1265902
[ 256- 511]: 864820
[ 512- 1023]: 1110456
[ 1024- 2047]: 17069518
Protocol Breakdown
![[protocol breakdown chart]](201107261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47165139 (100.00%) 28241441078 (100.00%) 598.78
ip 46928401 ( 99.50%) 28069773901 ( 99.39%) 598.14
tcp 40885232 ( 86.69%) 25321868742 ( 89.66%) 619.34
http(s) 14681676 ( 31.13%) 19596167326 ( 69.39%) 1334.74
http(c) 10063188 ( 21.34%) 1669301063 ( 5.91%) 165.88
squid 184335 ( 0.39%) 158342223 ( 0.56%) 858.99
smtp 283609 ( 0.60%) 175687425 ( 0.62%) 619.47
ftp 15160 ( 0.03%) 1424651 ( 0.01%) 93.97
pop3 44897 ( 0.10%) 3776004 ( 0.01%) 84.10
imap 2966 ( 0.01%) 975610 ( 0.00%) 328.93
telnet 535 ( 0.00%) 70453 ( 0.00%) 131.69
ssh 482470 ( 1.02%) 405880541 ( 1.44%) 841.26
dns 36645 ( 0.08%) 5415781 ( 0.02%) 147.79
bgp 554 ( 0.00%) 98082 ( 0.00%) 177.04
napster 2216 ( 0.00%) 146659 ( 0.00%) 66.18
realaud 413 ( 0.00%) 26763 ( 0.00%) 64.80
rtsp 66 ( 0.00%) 27390 ( 0.00%) 415.00
icecast 1976 ( 0.00%) 440178 ( 0.00%) 222.76
hotline 92 ( 0.00%) 6499 ( 0.00%) 70.64
other 15084433 ( 31.98%) 3304082034 ( 11.70%) 219.04
udp 4859499 ( 10.30%) 2111371683 ( 7.48%) 434.48
dns 755182 ( 1.60%) 174937818 ( 0.62%) 231.65
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 37 ( 0.00%) 8022 ( 0.00%) 216.81
halflif 497 ( 0.00%) 33736 ( 0.00%) 67.88
starcra 73 ( 0.00%) 7434 ( 0.00%) 101.84
everque 24504 ( 0.05%) 23842923 ( 0.08%) 973.02
unreal 40 ( 0.00%) 4536 ( 0.00%) 113.40
quake 1204 ( 0.00%) 101441 ( 0.00%) 84.25
cuseeme 4 ( 0.00%) 377 ( 0.00%) 94.25
other 4077831 ( 8.65%) 1912367669 ( 6.77%) 468.97
icmp 364778 ( 0.77%) 32707463 ( 0.12%) 89.66
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 481 ( 0.00%) 141114 ( 0.00%) 293.38
ip6 793108 ( 1.68%) 597040586 ( 2.11%) 752.79
other 25119 ( 0.05%) 6625153 ( 0.02%) 263.75
frag 2405 ( 0.01%) 1993391 ( 0.01%) 828.85
ip6 236738 ( 0.50%) 171667177 ( 0.61%) 725.14
tcp6 162923 ( 0.35%) 153052513 ( 0.54%) 939.42
http(s) 19296 ( 0.04%) 20726026 ( 0.07%) 1074.11
http(c) 36265 ( 0.08%) 3347728 ( 0.01%) 92.31
smtp 308 ( 0.00%) 106969 ( 0.00%) 347.30
ftp 42 ( 0.00%) 3856 ( 0.00%) 91.81
dns 393 ( 0.00%) 82155 ( 0.00%) 209.05
bgp 96 ( 0.00%) 33635 ( 0.00%) 350.36
other 106523 ( 0.23%) 128752144 ( 0.46%) 1208.68
udp6 48581 ( 0.10%) 14588874 ( 0.05%) 300.30
dns 45770 ( 0.10%) 14177498 ( 0.05%) 309.76
everque 3 ( 0.00%) 329 ( 0.00%) 109.67
other 2808 ( 0.01%) 411047 ( 0.00%) 146.38
icmp6 24845 ( 0.05%) 3670321 ( 0.01%) 147.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 358 ( 0.00%) 351253 ( 0.00%) 981.15
tcpdump file: 201107261400.dump.gz (1191.84 MB)