Traffic Trace Info
DumpFile: 201109261400.dump
FileSize: 3883.42MB
Id: 201109261400
StartTime: Mon Sep 26 14:00:01 2011
EndTime: Mon Sep 26 14:15:01 2011
TotalTime: 900.06 seconds
TotalCapSize: -1049.33MB CapLen: 96 bytes
# of packets: 54836877 (37276.10MB)
AvgRate: 347.50Mbps stddev:74.41M
IP flow (unique src/dst pair) Information
# of flows: 2028628 (avg. 27.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.9% 2.5% 1.6% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1439934
Top 10 bandwidth usage (bytes/total in %):
22.7% 21.6% 7.6% 7.2% 6.5% 5.0% 3.2% 3.0% 2.6% 2.1%
# of IPv6 addresses: 4522
Top 10 bandwidth usage (bytes/total in %):
24.9% 19.4% 18.4% 15.6% 13.0% 6.9% 6.6% 6.6% 6.0% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109261400.pktlen.png)
detailed numbers
[ 32- 63]: 16222186
[ 64- 127]: 11079581
[ 128- 255]: 1178997
[ 256- 511]: 747170
[ 512- 1023]: 892425
[ 1024- 2047]: 24716518
Protocol Breakdown
![[protocol breakdown chart]](201109261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54836877 (100.00%) 39086820882 (100.00%) 712.78
ip 54454503 ( 99.30%) 38885372976 ( 99.48%) 714.09
tcp 47698028 ( 86.98%) 35655749298 ( 91.22%) 747.53
http(s) 19788786 ( 36.09%) 22052913079 ( 56.42%) 1114.41
http(c) 12938542 ( 23.59%) 9329986266 ( 23.87%) 721.10
squid 105182 ( 0.19%) 70534208 ( 0.18%) 670.59
smtp 86864 ( 0.16%) 29943234 ( 0.08%) 344.71
ftp 45061 ( 0.08%) 13422499 ( 0.03%) 297.87
pop3 16048 ( 0.03%) 2820646 ( 0.01%) 175.76
imap 2556 ( 0.00%) 313889 ( 0.00%) 122.80
telnet 487 ( 0.00%) 70437 ( 0.00%) 144.63
ssh 19897 ( 0.04%) 3162071 ( 0.01%) 158.92
dns 40284 ( 0.07%) 3301762 ( 0.01%) 81.96
bgp 630 ( 0.00%) 113505 ( 0.00%) 180.17
napster 286 ( 0.00%) 19208 ( 0.00%) 67.16
realaud 64 ( 0.00%) 4032 ( 0.00%) 63.00
rtsp 10113 ( 0.02%) 13401331 ( 0.03%) 1325.16
icecast 1166 ( 0.00%) 196169 ( 0.00%) 168.24
hotline 3188 ( 0.01%) 201717 ( 0.00%) 63.27
other 14638868 ( 26.70%) 4135344885 ( 10.58%) 282.49
udp 4265601 ( 7.78%) 2384988097 ( 6.10%) 559.12
dns 618789 ( 1.13%) 151324485 ( 0.39%) 244.55
realaud 22 ( 0.00%) 2744 ( 0.00%) 124.73
halflif 23 ( 0.00%) 2276 ( 0.00%) 98.96
starcra 112 ( 0.00%) 11851 ( 0.00%) 105.81
everque 1908 ( 0.00%) 1169018 ( 0.00%) 612.69
unreal 144 ( 0.00%) 21983 ( 0.00%) 152.66
quake 394 ( 0.00%) 54359 ( 0.00%) 137.97
cuseeme 3 ( 0.00%) 252 ( 0.00%) 84.00
other 3644158 ( 6.65%) 2232377306 ( 5.71%) 612.59
icmp 1534779 ( 2.80%) 148906577 ( 0.38%) 97.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2586 ( 0.00%) 1453596 ( 0.00%) 562.10
ip6 936068 ( 1.71%) 688324494 ( 1.76%) 735.34
other 17256 ( 0.03%) 5931644 ( 0.02%) 343.74
frag 421 ( 0.00%) 416340 ( 0.00%) 988.93
ip6 382374 ( 0.70%) 201447906 ( 0.52%) 526.83
tcp6 286601 ( 0.52%) 168823108 ( 0.43%) 589.05
http(s) 45864 ( 0.08%) 60982720 ( 0.16%) 1329.64
http(c) 51216 ( 0.09%) 4586830 ( 0.01%) 89.56
smtp 861 ( 0.00%) 257265 ( 0.00%) 298.80
ftp 98128 ( 0.18%) 12791743 ( 0.03%) 130.36
imap 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 239 ( 0.00%) 52953 ( 0.00%) 221.56
bgp 90 ( 0.00%) 14147 ( 0.00%) 157.19
other 90201 ( 0.16%) 90137278 ( 0.23%) 999.29
udp6 63233 ( 0.12%) 18365838 ( 0.05%) 290.45
dns 58175 ( 0.11%) 17473267 ( 0.04%) 300.36
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 5055 ( 0.01%) 892255 ( 0.00%) 176.51
icmp6 16532 ( 0.03%) 2923616 ( 0.01%) 176.85
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15893 ( 0.03%) 11319684 ( 0.03%) 712.24
tcpdump file: 201109261400.dump.gz (1293.57 MB)