Traffic Trace Info
DumpFile: 201108261400.dump
FileSize: 2857.76MB
Id: 201108261400
StartTime: Fri Aug 26 14:00:00 2011
EndTime: Fri Aug 26 14:15:01 2011
TotalTime: 900.42 seconds
TotalCapSize: -1849.53MB CapLen: 96 bytes
# of packets: 40060823 (24138.38MB)
AvgRate: 224.88Mbps stddev:47.36M
IP flow (unique src/dst pair) Information
# of flows: 1060912 (avg. 37.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.1% 2.1% 1.7% 1.5% 1.5% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 532629
Top 10 bandwidth usage (bytes/total in %):
14.7% 10.2% 8.8% 5.1% 4.9% 4.2% 3.9% 3.4% 3.4% 3.1%
# of IPv6 addresses: 3523
Top 10 bandwidth usage (bytes/total in %):
54.6% 27.7% 26.9% 24.5% 16.8% 6.0% 4.4% 3.7% 3.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108261400.pktlen.png)
detailed numbers
[ 32- 63]: 11677352
[ 64- 127]: 9922515
[ 128- 255]: 1301191
[ 256- 511]: 786033
[ 512- 1023]: 890278
[ 1024- 2047]: 15483454
Protocol Breakdown
![[protocol breakdown chart]](201108261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40060823 (100.00%) 25310927282 (100.00%) 631.81
ip 39703833 ( 99.11%) 25007081672 ( 98.80%) 629.84
tcp 33322077 ( 83.18%) 22780931613 ( 90.00%) 683.66
http(s) 12732886 ( 31.78%) 17107978972 ( 67.59%) 1343.61
http(c) 6470596 ( 16.15%) 1593848757 ( 6.30%) 246.32
squid 140483 ( 0.35%) 111501590 ( 0.44%) 793.70
smtp 240516 ( 0.60%) 169120082 ( 0.67%) 703.16
nntp 4 ( 0.00%) 268 ( 0.00%) 67.00
ftp 97085 ( 0.24%) 22799899 ( 0.09%) 234.84
pop3 17179 ( 0.04%) 5868515 ( 0.02%) 341.61
imap 5367 ( 0.01%) 2432871 ( 0.01%) 453.30
telnet 493 ( 0.00%) 67158 ( 0.00%) 136.22
ssh 33534 ( 0.08%) 4894579 ( 0.02%) 145.96
dns 14777 ( 0.04%) 1202621 ( 0.00%) 81.38
bgp 769 ( 0.00%) 295279 ( 0.00%) 383.98
napster 1593 ( 0.00%) 100282 ( 0.00%) 62.95
realaud 130 ( 0.00%) 13053 ( 0.00%) 100.41
rtsp 6225 ( 0.02%) 7669323 ( 0.03%) 1232.02
icecast 3763 ( 0.01%) 795207 ( 0.00%) 211.32
hotline 66 ( 0.00%) 4146 ( 0.00%) 62.82
other 13556607 ( 33.84%) 3752338747 ( 14.82%) 276.79
udp 4486448 ( 11.20%) 1619531396 ( 6.40%) 360.98
dns 574170 ( 1.43%) 147799463 ( 0.58%) 257.41
realaud 37 ( 0.00%) 6041 ( 0.00%) 163.27
halflif 600 ( 0.00%) 38905 ( 0.00%) 64.84
starcra 34 ( 0.00%) 5753 ( 0.00%) 169.21
everque 287 ( 0.00%) 66734 ( 0.00%) 232.52
unreal 47 ( 0.00%) 6590 ( 0.00%) 140.21
quake 190 ( 0.00%) 49092 ( 0.00%) 258.38
cuseeme 5 ( 0.00%) 408 ( 0.00%) 81.60
other 3910848 ( 9.76%) 1471409329 ( 5.81%) 376.24
icmp 465288 ( 1.16%) 80896622 ( 0.32%) 173.86
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 78 ( 0.00%) 13556 ( 0.00%) 173.79
ip6 1406790 ( 3.51%) 519740365 ( 2.05%) 369.45
other 22968 ( 0.06%) 5948960 ( 0.02%) 259.01
frag 1132 ( 0.00%) 1149753 ( 0.00%) 1015.68
ip6 356990 ( 0.89%) 303845610 ( 1.20%) 851.13
tcp6 225380 ( 0.56%) 229671964 ( 0.91%) 1019.04
http(s) 116047 ( 0.29%) 171066297 ( 0.68%) 1474.11
http(c) 47972 ( 0.12%) 4206159 ( 0.02%) 87.68
smtp 354 ( 0.00%) 158832 ( 0.00%) 448.68
ftp 47 ( 0.00%) 4226 ( 0.00%) 89.91
dns 282 ( 0.00%) 61704 ( 0.00%) 218.81
bgp 97 ( 0.00%) 28419 ( 0.00%) 292.98
other 60581 ( 0.15%) 54146327 ( 0.21%) 893.78
udp6 109985 ( 0.27%) 70469387 ( 0.28%) 640.72
dns 56884 ( 0.14%) 19333792 ( 0.08%) 339.88
halflif 2 ( 0.00%) 217 ( 0.00%) 108.50
other 53099 ( 0.13%) 51135378 ( 0.20%) 963.02
icmp6 21202 ( 0.05%) 3391712 ( 0.01%) 159.97
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 309 ( 0.00%) 297055 ( 0.00%) 961.34
tcpdump file: 201108261400.dump.gz (986.04 MB)