Traffic Trace Info
DumpFile: 201109281400.dump
FileSize: 3845.89MB
Id: 201109281400
StartTime: Wed Sep 28 14:00:00 2011
EndTime: Wed Sep 28 14:15:00 2011
TotalTime: 900.05 seconds
TotalCapSize: -1083.15MB CapLen: 96 bytes
# of packets: 54593582 (38217.59MB)
AvgRate: 356.25Mbps stddev:49.25M
IP flow (unique src/dst pair) Information
# of flows: 2071162 (avg. 26.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 7.5% 6.1% 5.6% 5.6% 2.1% 1.8% 1.3% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1448197
Top 10 bandwidth usage (bytes/total in %):
16.5% 13.4% 8.2% 8.0% 7.6% 7.6% 6.3% 5.6% 5.6% 4.4%
# of IPv6 addresses: 4343
Top 10 bandwidth usage (bytes/total in %):
38.8% 38.8% 18.8% 5.5% 4.0% 3.5% 3.5% 3.3% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201109281400.pktlen.png)
detailed numbers
[ 32- 63]: 15596774
[ 64- 127]: 10840543
[ 128- 255]: 1179701
[ 256- 511]: 726220
[ 512- 1023]: 807534
[ 1024- 2047]: 25442810
Protocol Breakdown
![[protocol breakdown chart]](201109281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54593582 (100.00%) 40074042844 (100.00%) 734.04
ip 54316248 ( 99.49%) 39934047050 ( 99.65%) 735.21
tcp 47248613 ( 86.55%) 36790918709 ( 91.81%) 778.67
http(s) 21433564 ( 39.26%) 26310305735 ( 65.65%) 1227.53
http(c) 12680710 ( 23.23%) 6912906917 ( 17.25%) 545.15
squid 170699 ( 0.31%) 134900951 ( 0.34%) 790.29
smtp 153763 ( 0.28%) 75078140 ( 0.19%) 488.27
ftp 37310 ( 0.07%) 13159647 ( 0.03%) 352.71
pop3 4460 ( 0.01%) 614934 ( 0.00%) 137.88
imap 3238 ( 0.01%) 488785 ( 0.00%) 150.95
telnet 504 ( 0.00%) 35334 ( 0.00%) 70.11
ssh 43555 ( 0.08%) 6622411 ( 0.02%) 152.05
dns 47327 ( 0.09%) 4025996 ( 0.01%) 85.07
bgp 676 ( 0.00%) 125265 ( 0.00%) 185.30
napster 361 ( 0.00%) 23300 ( 0.00%) 64.54
realaud 189 ( 0.00%) 13003 ( 0.00%) 68.80
rtsp 34475 ( 0.06%) 37663934 ( 0.09%) 1092.50
icecast 2292 ( 0.00%) 680193 ( 0.00%) 296.77
hotline 74 ( 0.00%) 4828 ( 0.00%) 65.24
other 12635412 ( 23.14%) 3294269096 ( 8.22%) 260.72
udp 4170087 ( 7.64%) 1753739390 ( 4.38%) 420.55
dns 634403 ( 1.16%) 154880400 ( 0.39%) 244.14
realaud 19 ( 0.00%) 2498 ( 0.00%) 131.47
halflif 40 ( 0.00%) 6425 ( 0.00%) 160.62
starcra 60 ( 0.00%) 8637 ( 0.00%) 143.95
everque 14709 ( 0.03%) 13254358 ( 0.03%) 901.11
unreal 67 ( 0.00%) 12559 ( 0.00%) 187.45
quake 373 ( 0.00%) 54948 ( 0.00%) 147.31
cuseeme 6 ( 0.00%) 853 ( 0.00%) 142.17
other 3470506 ( 6.36%) 1581593729 ( 3.95%) 455.72
icmp 1541288 ( 2.82%) 149447885 ( 0.37%) 96.96
ipip 183 ( 0.00%) 19050 ( 0.00%) 104.10
ipsec 2820 ( 0.01%) 773752 ( 0.00%) 274.38
ip6 1336594 ( 2.45%) 1234792439 ( 3.08%) 923.84
other 16663 ( 0.03%) 4355825 ( 0.01%) 261.41
frag 119801 ( 0.22%) 94553365 ( 0.24%) 789.25
ip6 277334 ( 0.51%) 139995794 ( 0.35%) 504.79
tcp6 189868 ( 0.35%) 112792744 ( 0.28%) 594.06
http(s) 78900 ( 0.14%) 102312272 ( 0.26%) 1296.73
http(c) 96333 ( 0.18%) 7899342 ( 0.02%) 82.00
smtp 963 ( 0.00%) 342566 ( 0.00%) 355.73
ftp 51 ( 0.00%) 4610 ( 0.00%) 90.39
imap 148 ( 0.00%) 129802 ( 0.00%) 877.04
dns 370 ( 0.00%) 93430 ( 0.00%) 252.51
bgp 90 ( 0.00%) 15478 ( 0.00%) 171.98
other 13013 ( 0.02%) 1995244 ( 0.00%) 153.33
udp6 68303 ( 0.13%) 21446661 ( 0.05%) 313.99
dns 59683 ( 0.11%) 18283418 ( 0.05%) 306.34
everque 2 ( 0.00%) 232 ( 0.00%) 116.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
other 8615 ( 0.02%) 3162686 ( 0.01%) 367.11
icmp6 14655 ( 0.03%) 2557419 ( 0.01%) 174.51
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4394 ( 0.01%) 3183478 ( 0.01%) 724.51
tcpdump file: 201109281400.dump.gz (1282.81 MB)