Traffic Trace Info
DumpFile: 201110271400.dump
FileSize: 3580.76MB
Id: 201110271400
StartTime: Thu Oct 27 14:00:00 2011
EndTime: Thu Oct 27 14:15:00 2011
TotalTime: 899.78 seconds
TotalCapSize: -1273.46MB CapLen: 96 bytes
# of packets: 49688216 (26483.41MB)
AvgRate: 246.93Mbps stddev:42.57M
IP flow (unique src/dst pair) Information
# of flows: 1056843 (avg. 47.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.2% 2.1% 1.8% 1.8% 1.8% 1.7% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 480902
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.4% 5.5% 5.1% 5.1% 3.6% 3.0% 2.8% 2.5% 2.4%
# of IPv6 addresses: 4817
Top 10 bandwidth usage (bytes/total in %):
31.2% 28.4% 18.6% 18.0% 13.3% 9.7% 9.0% 5.9% 5.4% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110271400.pktlen.png)
detailed numbers
[ 32- 63]: 14579720
[ 64- 127]: 14996645
[ 128- 255]: 1584962
[ 256- 511]: 899467
[ 512- 1023]: 850908
[ 1024- 2047]: 16776514
Protocol Breakdown
![[protocol breakdown chart]](201110271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49688216 (100.00%) 27769864017 (100.00%) 558.88
ip 49337206 ( 99.29%) 27581343314 ( 99.32%) 559.04
tcp 43425423 ( 87.40%) 24792286255 ( 89.28%) 570.92
http(s) 14594688 ( 29.37%) 19327331512 ( 69.60%) 1324.27
http(c) 12350676 ( 24.86%) 1442636169 ( 5.19%) 116.81
squid 561782 ( 1.13%) 532943103 ( 1.92%) 948.67
smtp 104227 ( 0.21%) 28236867 ( 0.10%) 270.92
nntp 3 ( 0.00%) 200 ( 0.00%) 66.67
ftp 49642 ( 0.10%) 35708615 ( 0.13%) 719.32
pop3 5643 ( 0.01%) 2701916 ( 0.01%) 478.81
imap 2751 ( 0.01%) 812816 ( 0.00%) 295.46
telnet 505 ( 0.00%) 67794 ( 0.00%) 134.25
ssh 116948 ( 0.24%) 19283203 ( 0.07%) 164.89
dns 48910 ( 0.10%) 5799532 ( 0.02%) 118.58
bgp 650 ( 0.00%) 130340 ( 0.00%) 200.52
napster 1138 ( 0.00%) 72694 ( 0.00%) 63.88
realaud 172 ( 0.00%) 12796 ( 0.00%) 74.40
rtsp 12144 ( 0.02%) 15858144 ( 0.06%) 1305.84
icecast 22421 ( 0.05%) 1575217 ( 0.01%) 70.26
hotline 147 ( 0.00%) 10074 ( 0.00%) 68.53
other 15552976 ( 31.30%) 3379105263 ( 12.17%) 217.26
udp 4128720 ( 8.31%) 1631047545 ( 5.87%) 395.05
dns 650965 ( 1.31%) 164615675 ( 0.59%) 252.88
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 14 ( 0.00%) 2429 ( 0.00%) 173.50
halflif 341 ( 0.00%) 89578 ( 0.00%) 262.69
starcra 61 ( 0.00%) 7847 ( 0.00%) 128.64
everque 668 ( 0.00%) 104263 ( 0.00%) 156.08
unreal 107 ( 0.00%) 8965 ( 0.00%) 83.79
quake 155 ( 0.00%) 10816 ( 0.00%) 69.78
cuseeme 4 ( 0.00%) 314 ( 0.00%) 78.50
other 3476343 ( 7.00%) 1466171888 ( 5.28%) 421.76
icmp 533792 ( 1.07%) 106744941 ( 0.38%) 199.97
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7314 ( 0.01%) 1692124 ( 0.01%) 231.35
ip6 1227812 ( 2.47%) 1046268160 ( 3.77%) 852.14
other 13960 ( 0.03%) 3285019 ( 0.01%) 235.32
frag 375 ( 0.00%) 384113 ( 0.00%) 1024.30
ip6 351010 ( 0.71%) 188520703 ( 0.68%) 537.08
tcp6 266563 ( 0.54%) 163942403 ( 0.59%) 615.02
http(s) 23341 ( 0.05%) 25193684 ( 0.09%) 1079.37
http(c) 33694 ( 0.07%) 3009788 ( 0.01%) 89.33
smtp 238 ( 0.00%) 49547 ( 0.00%) 208.18
ftp 71 ( 0.00%) 6466 ( 0.00%) 91.07
pop3 415 ( 0.00%) 595215 ( 0.00%) 1434.25
imap 5 ( 0.00%) 743 ( 0.00%) 148.60
dns 555 ( 0.00%) 105331 ( 0.00%) 189.79
bgp 86 ( 0.00%) 13266 ( 0.00%) 154.26
other 208158 ( 0.42%) 134968363 ( 0.49%) 648.39
udp6 67083 ( 0.14%) 20892839 ( 0.08%) 311.45
dns 65751 ( 0.13%) 20682149 ( 0.07%) 314.55
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
starcra 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1328 ( 0.00%) 210270 ( 0.00%) 158.34
icmp6 16438 ( 0.03%) 2899377 ( 0.01%) 176.38
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 814 ( 0.00%) 770828 ( 0.00%) 946.96
tcpdump file: 201110271400.dump.gz (1241.46 MB)