Traffic Trace Info
DumpFile: 201108291400.dump
FileSize: 1946.27MB
Id: 201108291400
StartTime: Mon Aug 29 14:00:01 2011
EndTime: Mon Aug 29 14:15:01 2011
TotalTime: 899.97 seconds
TotalCapSize: 1530.15MB CapLen: 96 bytes
# of packets: 27270682 (19187.61MB)
AvgRate: 178.77Mbps stddev:31.11M
IP flow (unique src/dst pair) Information
# of flows: 909459 (avg. 29.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.4% 2.5% 2.4% 1.9% 1.6% 1.6% 1.6% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 511561
Top 10 bandwidth usage (bytes/total in %):
13.1% 10.5% 9.8% 8.1% 7.5% 3.8% 3.2% 2.7% 2.5% 2.4%
# of IPv6 addresses: 3672
Top 10 bandwidth usage (bytes/total in %):
28.6% 28.6% 27.9% 16.1% 16.1% 11.4% 9.6% 8.9% 7.8% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201108291400.pktlen.png)
detailed numbers
[ 32- 63]: 4480109
[ 64- 127]: 7543256
[ 128- 255]: 1450023
[ 256- 511]: 646228
[ 512- 1023]: 725160
[ 1024- 2047]: 12425906
Protocol Breakdown
![[protocol breakdown chart]](201108291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27270682 (100.00%) 20119664858 (100.00%) 737.78
ip 27039047 ( 99.15%) 19958430648 ( 99.20%) 738.13
tcp 22262513 ( 81.64%) 18215863844 ( 90.54%) 818.23
http(s) 10183687 ( 37.34%) 13344314778 ( 66.32%) 1310.36
http(c) 5519288 ( 20.24%) 1438331428 ( 7.15%) 260.60
squid 53212 ( 0.20%) 30987041 ( 0.15%) 582.33
smtp 135192 ( 0.50%) 61100679 ( 0.30%) 451.95
nntp 8 ( 0.00%) 508 ( 0.00%) 63.50
ftp 72754 ( 0.27%) 48942994 ( 0.24%) 672.72
pop3 703554 ( 2.58%) 68792718 ( 0.34%) 97.78
imap 5727 ( 0.02%) 2237431 ( 0.01%) 390.68
telnet 472 ( 0.00%) 65804 ( 0.00%) 139.42
ssh 328236 ( 1.20%) 48700787 ( 0.24%) 148.37
dns 16432 ( 0.06%) 1290999 ( 0.01%) 78.57
bgp 569 ( 0.00%) 112615 ( 0.00%) 197.92
napster 152 ( 0.00%) 10112 ( 0.00%) 66.53
realaud 90 ( 0.00%) 7430 ( 0.00%) 82.56
rtsp 6231 ( 0.02%) 7677924 ( 0.04%) 1232.21
icecast 848 ( 0.00%) 220091 ( 0.00%) 259.54
hotline 12 ( 0.00%) 744 ( 0.00%) 62.00
other 5236049 ( 19.20%) 3163069761 ( 15.72%) 604.09
udp 3843437 ( 14.09%) 1350504745 ( 6.71%) 351.38
dns 553755 ( 2.03%) 136720861 ( 0.68%) 246.90
realaud 33 ( 0.00%) 3766 ( 0.00%) 114.12
halflif 32 ( 0.00%) 5528 ( 0.00%) 172.75
starcra 36 ( 0.00%) 4249 ( 0.00%) 118.03
everque 364 ( 0.00%) 69223 ( 0.00%) 190.17
unreal 35 ( 0.00%) 4428 ( 0.00%) 126.51
quake 161 ( 0.00%) 48084 ( 0.00%) 298.66
cuseeme 2 ( 0.00%) 228 ( 0.00%) 114.00
other 3288776 ( 12.06%) 1213473389 ( 6.03%) 368.97
icmp 344827 ( 1.26%) 74918134 ( 0.37%) 217.26
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9865 ( 0.04%) 2353350 ( 0.01%) 238.56
ip6 561618 ( 2.06%) 310286989 ( 1.54%) 552.49
other 16602 ( 0.06%) 4484316 ( 0.02%) 270.11
frag 1613 ( 0.01%) 1807030 ( 0.01%) 1120.29
ip6 231635 ( 0.85%) 161234210 ( 0.80%) 696.07
tcp6 104655 ( 0.38%) 99724756 ( 0.50%) 952.89
http(s) 9209 ( 0.03%) 10006908 ( 0.05%) 1086.64
http(c) 18839 ( 0.07%) 1533894 ( 0.01%) 81.42
smtp 117 ( 0.00%) 28411 ( 0.00%) 242.83
ftp 48 ( 0.00%) 4348 ( 0.00%) 90.58
dns 311 ( 0.00%) 66157 ( 0.00%) 212.72
bgp 91 ( 0.00%) 20369 ( 0.00%) 223.84
other 76040 ( 0.28%) 88064669 ( 0.44%) 1158.14
udp6 45559 ( 0.17%) 12965863 ( 0.06%) 284.59
dns 41625 ( 0.15%) 11758585 ( 0.06%) 282.49
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 3931 ( 0.01%) 1206959 ( 0.01%) 307.04
icmp6 15301 ( 0.06%) 2096002 ( 0.01%) 136.98
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 66005 ( 0.24%) 46431929 ( 0.23%) 703.46
tcpdump file: 201108291400.dump.gz (642.72 MB)