Traffic Trace Info
DumpFile: 201108281400.dump
FileSize: 2045.21MB
Id: 201108281400
StartTime: Sun Aug 28 14:00:00 2011
EndTime: Sun Aug 28 14:15:00 2011
TotalTime: 899.48 seconds
TotalCapSize: 1592.47MB CapLen: 96 bytes
# of packets: 29670475 (25952.03MB)
AvgRate: 242.08Mbps stddev:56.92M
IP flow (unique src/dst pair) Information
# of flows: 848992 (avg. 34.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.2% 2.0% 1.8% 1.7% 1.6% 1.4% 1.4% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 485500
Top 10 bandwidth usage (bytes/total in %):
20.9% 14.8% 14.0% 13.4% 3.3% 3.1% 3.0% 2.7% 2.3% 2.3%
# of IPv6 addresses: 2835
Top 10 bandwidth usage (bytes/total in %):
31.6% 31.3% 21.8% 8.5% 5.6% 5.2% 4.5% 4.3% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108281400.pktlen.png)
detailed numbers
[ 32- 63]: 5353466
[ 64- 127]: 5081966
[ 128- 255]: 760797
[ 256- 511]: 385000
[ 512- 1023]: 544222
[ 1024- 2047]: 17545024
Protocol Breakdown
![[protocol breakdown chart]](201108281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29670475 (100.00%) 27212673883 (100.00%) 917.16
ip 29520265 ( 99.49%) 27156852135 ( 99.79%) 919.94
tcp 24788585 ( 83.55%) 24825943036 ( 91.23%) 1001.51
http(s) 16125522 ( 54.35%) 22724014976 ( 83.51%) 1409.20
http(c) 5795649 ( 19.53%) 785406226 ( 2.89%) 135.52
squid 20779 ( 0.07%) 8871594 ( 0.03%) 426.95
smtp 83832 ( 0.28%) 19940244 ( 0.07%) 237.86
nntp 6 ( 0.00%) 398 ( 0.00%) 66.33
ftp 69068 ( 0.23%) 48634776 ( 0.18%) 704.16
pop3 757831 ( 2.55%) 48198401 ( 0.18%) 63.60
imap 5998 ( 0.02%) 4971598 ( 0.02%) 828.88
telnet 555 ( 0.00%) 71316 ( 0.00%) 128.50
ssh 51758 ( 0.17%) 7747346 ( 0.03%) 149.68
dns 13184 ( 0.04%) 957320 ( 0.00%) 72.61
bgp 536 ( 0.00%) 83332 ( 0.00%) 155.47
napster 167 ( 0.00%) 11958 ( 0.00%) 71.60
realaud 210 ( 0.00%) 13370 ( 0.00%) 63.67
rtsp 6262 ( 0.02%) 7678923 ( 0.03%) 1226.27
icecast 895 ( 0.00%) 128011 ( 0.00%) 143.03
other 1856332 ( 6.26%) 1169213187 ( 4.30%) 629.85
udp 3797048 ( 12.80%) 1933370866 ( 7.10%) 509.18
dns 383565 ( 1.29%) 90751636 ( 0.33%) 236.60
realaud 28 ( 0.00%) 3895 ( 0.00%) 139.11
halflif 616 ( 0.00%) 289563 ( 0.00%) 470.07
starcra 26 ( 0.00%) 3570 ( 0.00%) 137.31
everque 97 ( 0.00%) 27097 ( 0.00%) 279.35
unreal 60 ( 0.00%) 9113 ( 0.00%) 151.88
quake 160 ( 0.00%) 49723 ( 0.00%) 310.77
cuseeme 8 ( 0.00%) 1221 ( 0.00%) 152.62
other 3412141 ( 11.50%) 1842055222 ( 6.77%) 539.85
icmp 362799 ( 1.22%) 73200063 ( 0.27%) 201.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9777 ( 0.03%) 2419318 ( 0.01%) 247.45
ip6 543977 ( 1.83%) 315612516 ( 1.16%) 580.19
other 17894 ( 0.06%) 6287066 ( 0.02%) 351.35
frag 4290 ( 0.01%) 3750479 ( 0.01%) 874.24
ip6 150210 ( 0.51%) 55821748 ( 0.21%) 371.62
tcp6 44590 ( 0.15%) 34117666 ( 0.13%) 765.14
http(s) 16203 ( 0.05%) 22243755 ( 0.08%) 1372.82
http(c) 10748 ( 0.04%) 961091 ( 0.00%) 89.42
smtp 3276 ( 0.01%) 4796443 ( 0.02%) 1464.12
ftp 44 ( 0.00%) 4016 ( 0.00%) 91.27
dns 337 ( 0.00%) 65325 ( 0.00%) 193.84
bgp 88 ( 0.00%) 15157 ( 0.00%) 172.24
other 13894 ( 0.05%) 6031879 ( 0.02%) 434.14
udp6 80300 ( 0.27%) 12094552 ( 0.04%) 150.62
dns 26458 ( 0.09%) 6522820 ( 0.02%) 246.53
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 53840 ( 0.18%) 5571520 ( 0.02%) 103.48
icmp6 15509 ( 0.05%) 2736144 ( 0.01%) 176.42
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9696 ( 0.03%) 6857726 ( 0.03%) 707.27
tcpdump file: 201108281400.dump.gz (618.78 MB)