Traffic Trace Info
DumpFile: 201107281400.dump
FileSize: 3111.86MB
Id: 201107281400
StartTime: Thu Jul 28 14:00:01 2011
EndTime: Thu Jul 28 14:15:00 2011
TotalTime: 899.65 seconds
TotalCapSize: -1653.11MB CapLen: 96 bytes
# of packets: 43841074 (28578.90MB)
AvgRate: 266.54Mbps stddev:62.66M
IP flow (unique src/dst pair) Information
# of flows: 1649542 (avg. 26.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.2% 1.6% 1.6% 1.1% 1.1% 1.0% 1.0% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 753685
Top 10 bandwidth usage (bytes/total in %):
25.8% 5.2% 4.9% 3.5% 3.3% 2.8% 2.7% 2.2% 1.8% 1.7%
# of IPv6 addresses: 3961
Top 10 bandwidth usage (bytes/total in %):
49.7% 22.7% 21.2% 12.6% 11.9% 8.6% 8.3% 7.4% 5.7% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201107281400.pktlen.png)
detailed numbers
[ 32- 63]: 12584138
[ 64- 127]: 9535830
[ 128- 255]: 1160530
[ 256- 511]: 960077
[ 512- 1023]: 1295576
[ 1024- 2047]: 18304923
Protocol Breakdown
![[protocol breakdown chart]](201107281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43841074 (100.00%) 29967145113 (100.00%) 683.54
ip 43565002 ( 99.37%) 29703191899 ( 99.12%) 681.81
tcp 38165133 ( 87.05%) 27086864346 ( 90.39%) 709.73
http(s) 16602025 ( 37.87%) 21433498273 ( 71.52%) 1291.02
http(c) 9368171 ( 21.37%) 1952597967 ( 6.52%) 208.43
squid 111395 ( 0.25%) 80069880 ( 0.27%) 718.79
smtp 188445 ( 0.43%) 87468338 ( 0.29%) 464.16
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 138373 ( 0.32%) 46294433 ( 0.15%) 334.56
pop3 17363 ( 0.04%) 2878854 ( 0.01%) 165.80
imap 5877 ( 0.01%) 4313534 ( 0.01%) 733.97
telnet 434 ( 0.00%) 63689 ( 0.00%) 146.75
ssh 22276 ( 0.05%) 3072421 ( 0.01%) 137.93
dns 26114 ( 0.06%) 2169665 ( 0.01%) 83.08
bgp 585 ( 0.00%) 107925 ( 0.00%) 184.49
napster 1400 ( 0.00%) 94478 ( 0.00%) 67.48
realaud 117 ( 0.00%) 12601 ( 0.00%) 107.70
rtsp 36478 ( 0.08%) 41612920 ( 0.14%) 1140.77
icecast 6291 ( 0.01%) 795451 ( 0.00%) 126.44
hotline 61 ( 0.00%) 4084 ( 0.00%) 66.95
other 11639722 ( 26.55%) 3431809473 ( 11.45%) 294.84
udp 4256188 ( 9.71%) 2114715167 ( 7.06%) 496.86
dns 718909 ( 1.64%) 163997284 ( 0.55%) 228.12
realaud 14 ( 0.00%) 2207 ( 0.00%) 157.64
halflif 503 ( 0.00%) 32293 ( 0.00%) 64.20
starcra 115 ( 0.00%) 11762 ( 0.00%) 102.28
everque 4148 ( 0.01%) 465417 ( 0.00%) 112.20
unreal 10 ( 0.00%) 1768 ( 0.00%) 176.80
quake 1728 ( 0.00%) 154751 ( 0.00%) 89.55
cuseeme 13 ( 0.00%) 989 ( 0.00%) 76.08
other 3530631 ( 8.05%) 1949998421 ( 6.51%) 552.31
icmp 525001 ( 1.20%) 84835851 ( 0.28%) 161.59
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 50 ( 0.00%) 9516 ( 0.00%) 190.32
ip6 603133 ( 1.38%) 413052951 ( 1.38%) 684.85
other 15312 ( 0.03%) 3694798 ( 0.01%) 241.30
frag 1004 ( 0.00%) 912498 ( 0.00%) 908.86
ip6 276072 ( 0.63%) 263953214 ( 0.88%) 956.10
tcp6 203169 ( 0.46%) 244985009 ( 0.82%) 1205.82
http(s) 75965 ( 0.17%) 104721313 ( 0.35%) 1378.55
http(c) 7155 ( 0.02%) 776359 ( 0.00%) 108.51
smtp 317 ( 0.00%) 194173 ( 0.00%) 612.53
ftp 43 ( 0.00%) 3972 ( 0.00%) 92.37
ssh 620 ( 0.00%) 94136 ( 0.00%) 151.83
dns 314 ( 0.00%) 70609 ( 0.00%) 224.87
bgp 88 ( 0.00%) 15264 ( 0.00%) 173.45
other 118667 ( 0.27%) 139109183 ( 0.46%) 1172.27
udp6 52353 ( 0.12%) 15454100 ( 0.05%) 295.19
dns 43252 ( 0.10%) 14604931 ( 0.05%) 337.67
realaud 2 ( 0.00%) 219 ( 0.00%) 109.50
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 2 ( 0.00%) 224 ( 0.00%) 112.00
other 9096 ( 0.02%) 848624 ( 0.00%) 93.30
icmp6 20203 ( 0.05%) 3212383 ( 0.01%) 159.01
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 316 ( 0.00%) 297506 ( 0.00%) 941.47
tcpdump file: 201107281400.dump.gz (1081.96 MB)