Traffic Trace Info
DumpFile: 201107271400.dump
FileSize: 3924.75MB
Id: 201107271400
StartTime: Wed Jul 27 14:00:01 2011
EndTime: Wed Jul 27 14:15:01 2011
TotalTime: 899.87 seconds
TotalCapSize: -1019.72MB CapLen: 96 bytes
# of packets: 55604923 (38219.91MB)
AvgRate: 356.29Mbps stddev:59.58M
IP flow (unique src/dst pair) Information
# of flows: 1275541 (avg. 43.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.5% 2.1% 1.5% 1.5% 1.4% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 631567
Top 10 bandwidth usage (bytes/total in %):
25.8% 6.7% 6.4% 5.5% 4.9% 3.2% 2.9% 2.6% 2.5% 2.5%
# of IPv6 addresses: 4356
Top 10 bandwidth usage (bytes/total in %):
56.0% 25.4% 22.2% 16.1% 15.7% 14.9% 5.6% 3.6% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107271400.pktlen.png)
detailed numbers
[ 32- 63]: 15824625
[ 64- 127]: 11323818
[ 128- 255]: 1273040
[ 256- 511]: 999030
[ 512- 1023]: 1054465
[ 1024- 2047]: 25129945
Protocol Breakdown
![[protocol breakdown chart]](201107271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55604923 (100.00%) 40076483468 (100.00%) 720.74
ip 55325901 ( 99.50%) 39800901225 ( 99.31%) 719.39
tcp 48941004 ( 88.02%) 36670921840 ( 91.50%) 749.29
http(s) 22681774 ( 40.79%) 30944647349 ( 77.21%) 1364.30
http(c) 12564363 ( 22.60%) 2066932625 ( 5.16%) 164.51
squid 141463 ( 0.25%) 80938783 ( 0.20%) 572.16
smtp 234723 ( 0.42%) 154613132 ( 0.39%) 658.70
ftp 50013 ( 0.09%) 21407300 ( 0.05%) 428.03
pop3 19893 ( 0.04%) 7843519 ( 0.02%) 394.29
imap 9762 ( 0.02%) 7298613 ( 0.02%) 747.66
telnet 3399 ( 0.01%) 1160715 ( 0.00%) 341.49
ssh 71375 ( 0.13%) 7036367 ( 0.02%) 98.58
dns 30871 ( 0.06%) 2751720 ( 0.01%) 89.14
bgp 713 ( 0.00%) 209389 ( 0.00%) 293.67
napster 480 ( 0.00%) 32694 ( 0.00%) 68.11
realaud 149 ( 0.00%) 10661 ( 0.00%) 71.55
rtsp 8738 ( 0.02%) 10438680 ( 0.03%) 1194.63
icecast 25345 ( 0.05%) 22854595 ( 0.06%) 901.74
hotline 93 ( 0.00%) 6034 ( 0.00%) 64.88
other 13097847 ( 23.56%) 3342739484 ( 8.34%) 255.21
udp 5070944 ( 9.12%) 2590492617 ( 6.46%) 510.85
dns 735373 ( 1.32%) 171231036 ( 0.43%) 232.85
realaud 17 ( 0.00%) 1640 ( 0.00%) 96.47
halflif 308 ( 0.00%) 20608 ( 0.00%) 66.91
starcra 130 ( 0.00%) 12024 ( 0.00%) 92.49
everque 671 ( 0.00%) 152403 ( 0.00%) 227.13
unreal 19 ( 0.00%) 2891 ( 0.00%) 152.16
quake 1744 ( 0.00%) 147307 ( 0.00%) 84.47
cuseeme 3 ( 0.00%) 285 ( 0.00%) 95.00
other 4332574 ( 7.79%) 2418888336 ( 6.04%) 558.30
icmp 462082 ( 0.83%) 83390619 ( 0.21%) 180.47
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 191 ( 0.00%) 59190 ( 0.00%) 309.90
ip6 803517 ( 1.45%) 432214885 ( 1.08%) 537.90
other 47978 ( 0.09%) 23802804 ( 0.06%) 496.12
frag 32041 ( 0.06%) 23806853 ( 0.06%) 743.01
ip6 279022 ( 0.50%) 275582243 ( 0.69%) 987.67
tcp6 206403 ( 0.37%) 256083598 ( 0.64%) 1240.70
http(s) 39951 ( 0.07%) 49416389 ( 0.12%) 1236.92
http(c) 11519 ( 0.02%) 1173156 ( 0.00%) 101.85
squid 71 ( 0.00%) 12917 ( 0.00%) 181.93
smtp 118 ( 0.00%) 56822 ( 0.00%) 481.54
ftp 765 ( 0.00%) 273914 ( 0.00%) 358.06
dns 319 ( 0.00%) 77176 ( 0.00%) 241.93
bgp 120 ( 0.00%) 43561 ( 0.00%) 363.01
other 153540 ( 0.28%) 205029663 ( 0.51%) 1335.35
udp6 49141 ( 0.09%) 15563740 ( 0.04%) 316.72
dns 45019 ( 0.08%) 14799198 ( 0.04%) 328.73
realaud 1 ( 0.00%) 132 ( 0.00%) 132.00
everque 19 ( 0.00%) 1754 ( 0.00%) 92.32
other 4102 ( 0.01%) 762656 ( 0.00%) 185.92
icmp6 22988 ( 0.04%) 3485065 ( 0.01%) 151.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 460 ( 0.00%) 445760 ( 0.00%) 969.04
tcpdump file: 201107271400.dump.gz (1331.51 MB)