Traffic Trace Info
DumpFile: 201110281400.dump
FileSize: 3438.40MB
Id: 201110281400
StartTime: Fri Oct 28 14:00:01 2011
EndTime: Fri Oct 28 14:15:00 2011
TotalTime: 899.79 seconds
TotalCapSize: -1385.13MB CapLen: 96 bytes
# of packets: 47677480 (28602.63MB)
AvgRate: 266.62Mbps stddev:40.30M
IP flow (unique src/dst pair) Information
# of flows: 1071311 (avg. 44.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.4% 2.0% 1.9% 1.0% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 471557
Top 10 bandwidth usage (bytes/total in %):
10.9% 8.3% 8.3% 4.2% 4.1% 4.1% 4.0% 3.9% 3.9% 3.6%
# of IPv6 addresses: 4499
Top 10 bandwidth usage (bytes/total in %):
45.9% 17.2% 17.2% 15.8% 15.7% 14.3% 11.2% 11.2% 8.3% 8.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110281400.pktlen.png)
detailed numbers
[ 32- 63]: 13670010
[ 64- 127]: 12647704
[ 128- 255]: 1413251
[ 256- 511]: 729958
[ 512- 1023]: 769186
[ 1024- 2047]: 18447371
Protocol Breakdown
![[protocol breakdown chart]](201110281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47677480 (100.00%) 29992027610 (100.00%) 629.06
ip 47177061 ( 98.95%) 29537297776 ( 98.48%) 626.09
tcp 41249431 ( 86.52%) 26687214587 ( 88.98%) 646.97
http(s) 15730471 ( 32.99%) 20948637267 ( 69.85%) 1331.72
http(c) 9008352 ( 18.89%) 1928878961 ( 6.43%) 214.12
squid 770427 ( 1.62%) 690041963 ( 2.30%) 895.66
smtp 127024 ( 0.27%) 94327857 ( 0.31%) 742.60
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 55129 ( 0.12%) 34743459 ( 0.12%) 630.22
pop3 7200 ( 0.02%) 4437966 ( 0.01%) 616.38
imap 1477 ( 0.00%) 523960 ( 0.00%) 354.75
telnet 1143 ( 0.00%) 122027 ( 0.00%) 106.76
ssh 81415 ( 0.17%) 20284224 ( 0.07%) 249.15
dns 41212 ( 0.09%) 3190525 ( 0.01%) 77.42
bgp 626 ( 0.00%) 121243 ( 0.00%) 193.68
napster 1402 ( 0.00%) 88556 ( 0.00%) 63.16
realaud 99 ( 0.00%) 6380 ( 0.00%) 64.44
rtsp 6223 ( 0.01%) 7669233 ( 0.03%) 1232.40
icecast 7441 ( 0.02%) 854073 ( 0.00%) 114.78
hotline 141 ( 0.00%) 10114 ( 0.00%) 71.73
other 15409647 ( 32.32%) 2953276645 ( 9.85%) 191.65
udp 3507510 ( 7.36%) 1323432988 ( 4.41%) 377.31
dns 600882 ( 1.26%) 150168391 ( 0.50%) 249.91
realaud 15 ( 0.00%) 2249 ( 0.00%) 149.93
halflif 17 ( 0.00%) 1893 ( 0.00%) 111.35
starcra 44 ( 0.00%) 6436 ( 0.00%) 146.27
everque 2630 ( 0.01%) 1099158 ( 0.00%) 417.93
unreal 11 ( 0.00%) 2146 ( 0.00%) 195.09
quake 13 ( 0.00%) 1569 ( 0.00%) 120.69
cuseeme 6 ( 0.00%) 524 ( 0.00%) 87.33
other 2903046 ( 6.09%) 1172047372 ( 3.91%) 403.73
icmp 640470 ( 1.34%) 117217420 ( 0.39%) 183.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 24274 ( 0.05%) 3707276 ( 0.01%) 152.73
ip6 1739607 ( 3.65%) 1400139210 ( 4.67%) 804.86
other 15584 ( 0.03%) 5567025 ( 0.02%) 357.23
frag 4850 ( 0.01%) 4080493 ( 0.01%) 841.34
ip6 500419 ( 1.05%) 454729834 ( 1.52%) 908.70
tcp6 403432 ( 0.85%) 421508051 ( 1.41%) 1044.81
http(s) 154872 ( 0.32%) 228265600 ( 0.76%) 1473.90
http(c) 15623 ( 0.03%) 1567711 ( 0.01%) 100.35
smtp 123 ( 0.00%) 28918 ( 0.00%) 235.11
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
imap 112 ( 0.00%) 123847 ( 0.00%) 1105.78
dns 609 ( 0.00%) 95037 ( 0.00%) 156.05
bgp 81 ( 0.00%) 11186 ( 0.00%) 138.10
other 231986 ( 0.49%) 191413439 ( 0.64%) 825.11
udp6 63037 ( 0.13%) 19010670 ( 0.06%) 301.58
dns 58977 ( 0.12%) 18337932 ( 0.06%) 310.93
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
halflif 2 ( 0.00%) 228 ( 0.00%) 114.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
unreal 2 ( 0.00%) 213 ( 0.00%) 106.50
other 4054 ( 0.01%) 672077 ( 0.00%) 165.78
icmp6 17829 ( 0.04%) 2963075 ( 0.01%) 166.19
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16008 ( 0.03%) 11232614 ( 0.04%) 701.69
tcpdump file: 201110281400.dump.gz (1170.05 MB)