Traffic Trace Info
DumpFile: 201110261400.dump
FileSize: 4924.47MB
Id: 201110261400
StartTime: Wed Oct 26 14:00:01 2011
EndTime: Wed Oct 26 14:15:01 2011
TotalTime: 900.21 seconds
TotalCapSize: -273.03MB CapLen: 96 bytes
# of packets: 72187295 (28347.16MB)
AvgRate: 264.11Mbps stddev:39.26M
IP flow (unique src/dst pair) Information
# of flows: 11494202 (avg. 6.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.7% 2.2% 1.5% 1.3% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 8846219
Top 10 bandwidth usage (bytes/total in %):
19.6% 16.4% 11.0% 5.5% 3.2% 3.2% 3.2% 3.0% 2.6% 2.2%
# of IPv6 addresses: 4562
Top 10 bandwidth usage (bytes/total in %):
22.6% 17.4% 17.4% 12.4% 12.3% 9.2% 8.0% 7.5% 6.3% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110261400.pktlen.png)
detailed numbers
[ 32- 63]: 33767973
[ 64- 127]: 16645866
[ 128- 255]: 1617451
[ 256- 511]: 750489
[ 512- 1023]: 2994426
[ 1024- 2047]: 16411090
Protocol Breakdown
![[protocol breakdown chart]](201110261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 72187295 (100.00%) 29724154124 (100.00%) 411.76
ip 71665884 ( 99.28%) 29466574717 ( 99.13%) 411.17
tcp 49721063 ( 68.88%) 25408905335 ( 85.48%) 511.03
http(s) 13782693 ( 19.09%) 14761410941 ( 49.66%) 1071.01
http(c) 16011978 ( 22.18%) 5981989516 ( 20.13%) 373.59
squid 643392 ( 0.89%) 470045394 ( 1.58%) 730.57
smtp 79601 ( 0.11%) 38437317 ( 0.13%) 482.87
nntp 71 ( 0.00%) 4260 ( 0.00%) 60.00
ftp 43550 ( 0.06%) 35421178 ( 0.12%) 813.35
pop3 3264 ( 0.00%) 519354 ( 0.00%) 159.12
imap 2596 ( 0.00%) 642180 ( 0.00%) 247.37
telnet 26936 ( 0.04%) 2021864 ( 0.01%) 75.06
ssh 391387 ( 0.54%) 68431285 ( 0.23%) 174.84
dns 53890 ( 0.07%) 4852766 ( 0.02%) 90.05
bgp 645 ( 0.00%) 106748 ( 0.00%) 165.50
napster 1607 ( 0.00%) 131781 ( 0.00%) 82.00
realaud 201 ( 0.00%) 15569 ( 0.00%) 77.46
rtsp 6262 ( 0.01%) 7661818 ( 0.03%) 1223.54
icecast 28622 ( 0.04%) 2736704 ( 0.01%) 95.62
hotline 139 ( 0.00%) 8746 ( 0.00%) 62.92
other 18644229 ( 25.83%) 4034467914 ( 13.57%) 216.39
udp 4768060 ( 6.61%) 2079792466 ( 7.00%) 436.19
dns 645692 ( 0.89%) 164605812 ( 0.55%) 254.93
rip 5 ( 0.00%) 360 ( 0.00%) 72.00
realaud 15 ( 0.00%) 1827 ( 0.00%) 121.80
halflif 59 ( 0.00%) 6305 ( 0.00%) 106.86
starcra 64 ( 0.00%) 6870 ( 0.00%) 107.34
everque 1441 ( 0.00%) 857912 ( 0.00%) 595.36
unreal 16 ( 0.00%) 1964 ( 0.00%) 122.75
quake 17 ( 0.00%) 1644 ( 0.00%) 96.71
cuseeme 183 ( 0.00%) 13339 ( 0.00%) 72.89
other 4120152 ( 5.71%) 1914240946 ( 6.44%) 464.60
icmp 16021162 ( 22.19%) 1034344739 ( 3.48%) 64.56
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 32295 ( 0.04%) 5406730 ( 0.02%) 167.42
ip6 1107276 ( 1.53%) 932992287 ( 3.14%) 842.60
other 15843 ( 0.02%) 5113890 ( 0.02%) 322.79
frag 8336 ( 0.01%) 6396450 ( 0.02%) 767.33
ip6 521411 ( 0.72%) 257579407 ( 0.87%) 494.00
tcp6 401601 ( 0.56%) 209919709 ( 0.71%) 522.71
http(s) 56596 ( 0.08%) 62843496 ( 0.21%) 1110.39
http(c) 51400 ( 0.07%) 4580905 ( 0.02%) 89.12
smtp 1264 ( 0.00%) 1548466 ( 0.01%) 1225.05
ftp 109 ( 0.00%) 11654 ( 0.00%) 106.92
dns 429 ( 0.00%) 86243 ( 0.00%) 201.03
bgp 98 ( 0.00%) 17973 ( 0.00%) 183.40
other 291705 ( 0.40%) 140830972 ( 0.47%) 482.79
udp6 65266 ( 0.09%) 19209893 ( 0.06%) 294.33
dns 58008 ( 0.08%) 18185890 ( 0.06%) 313.51
everque 2 ( 0.00%) 230 ( 0.00%) 115.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 111 ( 0.00%) 111.00
other 7254 ( 0.01%) 1023553 ( 0.00%) 141.10
icmp6 18765 ( 0.03%) 3206822 ( 0.01%) 170.89
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 35665 ( 0.05%) 25227491 ( 0.08%) 707.35
tcpdump file: 201110261400.dump.gz (1735.48 MB)