Traffic Trace Info
DumpFile: 201108271400.dump
FileSize: 3058.82MB
Id: 201108271400
StartTime: Sat Aug 27 14:00:01 2011
EndTime: Sat Aug 27 14:15:00 2011
TotalTime: 899.31 seconds
TotalCapSize: -1709.60MB CapLen: 96 bytes
# of packets: 44067287 (37769.77MB)
AvgRate: 352.31Mbps stddev:59.90M
IP flow (unique src/dst pair) Information
# of flows: 873435 (avg. 50.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.0% 6.7% 3.4% 3.0% 1.6% 1.5% 1.4% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 486710
Top 10 bandwidth usage (bytes/total in %):
20.8% 17.5% 16.7% 10.3% 6.9% 5.1% 4.5% 3.6% 3.1% 3.0%
# of IPv6 addresses: 3292
Top 10 bandwidth usage (bytes/total in %):
54.4% 31.7% 30.6% 30.0% 23.8% 3.7% 2.0% 1.6% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108271400.pktlen.png)
detailed numbers
[ 32- 63]: 9426896
[ 64- 127]: 6523019
[ 128- 255]: 1201514
[ 256- 511]: 578542
[ 512- 1023]: 873905
[ 1024- 2047]: 25463411
Protocol Breakdown
![[protocol breakdown chart]](201108271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44067287 (100.00%) 39604471129 (100.00%) 898.73
ip 43720011 ( 99.21%) 39309498476 ( 99.26%) 899.12
tcp 39405520 ( 89.42%) 37500525473 ( 94.69%) 951.66
http(s) 23830288 ( 54.08%) 33613868912 ( 84.87%) 1410.55
http(c) 10195143 ( 23.14%) 1227250970 ( 3.10%) 120.38
squid 48675 ( 0.11%) 33308447 ( 0.08%) 684.30
smtp 98612 ( 0.22%) 27292196 ( 0.07%) 276.76
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 79768 ( 0.18%) 57435160 ( 0.15%) 720.03
pop3 960543 ( 2.18%) 61054156 ( 0.15%) 63.56
imap 4383 ( 0.01%) 1703335 ( 0.00%) 388.62
telnet 666 ( 0.00%) 91795 ( 0.00%) 137.83
ssh 809722 ( 1.84%) 123141111 ( 0.31%) 152.08
dns 18621 ( 0.04%) 3228041 ( 0.01%) 173.35
bgp 545 ( 0.00%) 85652 ( 0.00%) 157.16
napster 112 ( 0.00%) 7648 ( 0.00%) 68.29
realaud 59 ( 0.00%) 8719 ( 0.00%) 147.78
rtsp 219093 ( 0.50%) 297979985 ( 0.75%) 1360.06
icecast 3630 ( 0.01%) 1862617 ( 0.00%) 513.12
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 3135654 ( 7.12%) 2052206351 ( 5.18%) 654.47
udp 3373310 ( 7.65%) 1341891024 ( 3.39%) 397.80
dns 417173 ( 0.95%) 99728180 ( 0.25%) 239.06
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 27 ( 0.00%) 4246 ( 0.00%) 157.26
halflif 122 ( 0.00%) 9026 ( 0.00%) 73.98
starcra 35 ( 0.00%) 5388 ( 0.00%) 153.94
everque 206 ( 0.00%) 30444 ( 0.00%) 147.79
unreal 22 ( 0.00%) 2462 ( 0.00%) 111.91
quake 166 ( 0.00%) 51099 ( 0.00%) 307.83
cuseeme 4 ( 0.00%) 401 ( 0.00%) 100.25
other 2955318 ( 6.71%) 1241926815 ( 3.14%) 420.23
icmp 327600 ( 0.74%) 75434530 ( 0.19%) 230.26
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2596 ( 0.01%) 1449008 ( 0.00%) 558.17
ip6 594381 ( 1.35%) 384909775 ( 0.97%) 647.58
other 16419 ( 0.04%) 5269396 ( 0.01%) 320.93
frag 1409 ( 0.00%) 1433545 ( 0.00%) 1017.42
ip6 347276 ( 0.79%) 294972653 ( 0.74%) 849.39
tcp6 272383 ( 0.62%) 272409328 ( 0.69%) 1000.10
http(s) 12638 ( 0.03%) 15421179 ( 0.04%) 1220.22
http(c) 6123 ( 0.01%) 559430 ( 0.00%) 91.37
smtp 33 ( 0.00%) 4148 ( 0.00%) 125.70
ftp 47 ( 0.00%) 4226 ( 0.00%) 89.91
dns 270 ( 0.00%) 53872 ( 0.00%) 199.53
bgp 86 ( 0.00%) 12520 ( 0.00%) 145.58
other 253186 ( 0.57%) 256353953 ( 0.65%) 1012.51
udp6 43808 ( 0.10%) 9492476 ( 0.02%) 216.68
dns 32532 ( 0.07%) 8209410 ( 0.02%) 252.35
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
other 11275 ( 0.03%) 1282947 ( 0.00%) 113.79
icmp6 16561 ( 0.04%) 2892107 ( 0.01%) 174.63
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 14407 ( 0.03%) 10162878 ( 0.03%) 705.41
tcpdump file: 201108271400.dump.gz (942.42 MB)