Traffic Trace Info
DumpFile: 201109271400.dump
FileSize: 3731.63MB
Id: 201109271400
StartTime: Tue Sep 27 14:00:01 2011
EndTime: Tue Sep 27 14:15:01 2011
TotalTime: 899.62 seconds
TotalCapSize: -1176.91MB CapLen: 96 bytes
# of packets: 53250030 (31845.99MB)
AvgRate: 296.90Mbps stddev:75.57M
IP flow (unique src/dst pair) Information
# of flows: 2137269 (avg. 24.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.3% 11.2% 1.5% 1.4% 1.3% 1.2% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 1484364
Top 10 bandwidth usage (bytes/total in %):
31.2% 17.9% 11.6% 11.5% 4.6% 3.5% 2.9% 2.3% 2.2% 2.1%
# of IPv6 addresses: 4236
Top 10 bandwidth usage (bytes/total in %):
38.3% 35.3% 26.3% 16.0% 5.7% 4.8% 4.6% 3.7% 3.2% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109271400.pktlen.png)
detailed numbers
[ 32- 63]: 18331445
[ 64- 127]: 11377429
[ 128- 255]: 1261683
[ 256- 511]: 640110
[ 512- 1023]: 662420
[ 1024- 2047]: 20976943
Protocol Breakdown
![[protocol breakdown chart]](201109271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53250030 (100.00%) 33392942093 (100.00%) 627.10
ip 52974868 ( 99.48%) 33259437434 ( 99.60%) 627.83
tcp 45659255 ( 85.75%) 30081520676 ( 90.08%) 658.83
http(s) 17010601 ( 31.94%) 17038138811 ( 51.02%) 1001.62
http(c) 12654458 ( 23.76%) 10294846187 ( 30.83%) 813.54
squid 86870 ( 0.16%) 51106731 ( 0.15%) 588.31
smtp 98710 ( 0.19%) 50415651 ( 0.15%) 510.75
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 43947 ( 0.08%) 9675732 ( 0.03%) 220.17
pop3 4555 ( 0.01%) 1694951 ( 0.01%) 372.11
imap 1333 ( 0.00%) 494008 ( 0.00%) 370.60
telnet 827 ( 0.00%) 101303 ( 0.00%) 122.49
ssh 142342 ( 0.27%) 11092995 ( 0.03%) 77.93
dns 40308 ( 0.08%) 3406936 ( 0.01%) 84.52
bgp 659 ( 0.00%) 126219 ( 0.00%) 191.53
napster 2044 ( 0.00%) 127351 ( 0.00%) 62.30
realaud 144 ( 0.00%) 9016 ( 0.00%) 62.61
rtsp 960 ( 0.00%) 1411548 ( 0.00%) 1470.36
icecast 9483 ( 0.02%) 3254279 ( 0.01%) 343.17
hotline 74 ( 0.00%) 4732 ( 0.00%) 63.95
other 15561935 ( 29.22%) 2615613926 ( 7.83%) 168.08
udp 4714976 ( 8.85%) 2188055804 ( 6.55%) 464.07
dns 622038 ( 1.17%) 150035511 ( 0.45%) 241.20
realaud 4 ( 0.00%) 360 ( 0.00%) 90.00
halflif 32 ( 0.00%) 3934 ( 0.00%) 122.94
starcra 71 ( 0.00%) 9900 ( 0.00%) 139.44
everque 12360 ( 0.02%) 11412918 ( 0.03%) 923.38
unreal 57 ( 0.00%) 11798 ( 0.00%) 206.98
quake 230 ( 0.00%) 31110 ( 0.00%) 135.26
cuseeme 8 ( 0.00%) 678 ( 0.00%) 84.75
other 4077964 ( 7.66%) 2026368723 ( 6.07%) 496.91
icmp 1530739 ( 2.87%) 134469546 ( 0.40%) 87.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12712 ( 0.02%) 3217152 ( 0.01%) 253.08
ip6 1040536 ( 1.95%) 846686434 ( 2.54%) 813.70
other 16465 ( 0.03%) 5468552 ( 0.02%) 332.13
frag 7062 ( 0.01%) 5288728 ( 0.02%) 748.90
ip6 275162 ( 0.52%) 133504659 ( 0.40%) 485.19
tcp6 150362 ( 0.28%) 102459095 ( 0.31%) 681.42
http(s) 48348 ( 0.09%) 59005359 ( 0.18%) 1220.43
http(c) 46437 ( 0.09%) 4135811 ( 0.01%) 89.06
smtp 270 ( 0.00%) 179535 ( 0.00%) 664.94
ftp 73 ( 0.00%) 6678 ( 0.00%) 91.48
pop3 54 ( 0.00%) 12612 ( 0.00%) 233.56
dns 340 ( 0.00%) 67073 ( 0.00%) 197.27
bgp 82 ( 0.00%) 12981 ( 0.00%) 158.30
other 54758 ( 0.10%) 39039046 ( 0.12%) 712.94
udp6 98958 ( 0.19%) 21816971 ( 0.07%) 220.47
dns 59701 ( 0.11%) 18226461 ( 0.05%) 305.30
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 2 ( 0.00%) 221 ( 0.00%) 110.50
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 39252 ( 0.07%) 3589953 ( 0.01%) 91.46
icmp6 16918 ( 0.03%) 2892072 ( 0.01%) 170.95
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8810 ( 0.02%) 6320979 ( 0.02%) 717.48
tcpdump file: 201109271400.dump.gz (1282.88 MB)