Traffic Trace Info
DumpFile: 201111261400.dump
FileSize: 3454.19MB
Id: 201111261400
StartTime: Sat Nov 26 14:00:00 2011
EndTime: Sat Nov 26 14:15:01 2011
TotalTime: 900.22 seconds
TotalCapSize: -1391.52MB CapLen: 96 bytes
# of packets: 49132240 (29768.50MB)
AvgRate: 277.40Mbps stddev:57.05M
IP flow (unique src/dst pair) Information
# of flows: 1885680 (avg. 26.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.2% 1.1% 1.1% 1.0% 1.0% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 1412510
Top 10 bandwidth usage (bytes/total in %):
25.8% 10.7% 7.8% 4.9% 3.5% 3.2% 2.5% 2.4% 2.3% 2.2%
# of IPv6 addresses: 3650
Top 10 bandwidth usage (bytes/total in %):
25.2% 23.8% 17.4% 15.9% 15.4% 14.4% 6.9% 5.8% 5.8% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111261400.pktlen.png)
detailed numbers
[ 32- 63]: 17259542
[ 64- 127]: 10233682
[ 128- 255]: 967327
[ 256- 511]: 804974
[ 512- 1023]: 686866
[ 1024- 2047]: 19179849
Protocol Breakdown
![[protocol breakdown chart]](201111261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49132240 (100.00%) 31214531379 (100.00%) 635.32
ip 48961188 ( 99.65%) 31112860513 ( 99.67%) 635.46
tcp 42091474 ( 85.67%) 28443727435 ( 91.12%) 675.76
http(s) 18187198 ( 37.02%) 25398884840 ( 81.37%) 1396.53
http(c) 7924571 ( 16.13%) 999985902 ( 3.20%) 126.19
squid 66765 ( 0.14%) 37899796 ( 0.12%) 567.66
smtp 40922 ( 0.08%) 8910708 ( 0.03%) 217.75
ftp 14700 ( 0.03%) 3826200 ( 0.01%) 260.29
pop3 1085 ( 0.00%) 162664 ( 0.00%) 149.92
imap 1515 ( 0.00%) 667810 ( 0.00%) 440.80
telnet 675 ( 0.00%) 77912 ( 0.00%) 115.43
ssh 89533 ( 0.18%) 14179417 ( 0.05%) 158.37
dns 44390 ( 0.09%) 5089449 ( 0.02%) 114.65
bgp 610 ( 0.00%) 95868 ( 0.00%) 157.16
napster 11678 ( 0.02%) 735883 ( 0.00%) 63.01
realaud 187 ( 0.00%) 17211 ( 0.00%) 92.04
rtsp 6231 ( 0.01%) 7677984 ( 0.02%) 1232.22
icecast 20724 ( 0.04%) 5367123 ( 0.02%) 258.98
hotline 163 ( 0.00%) 10481 ( 0.00%) 64.30
other 15680527 ( 31.91%) 1960138187 ( 6.28%) 125.00
udp 4389482 ( 8.93%) 1927628267 ( 6.18%) 439.15
dns 388258 ( 0.79%) 93836429 ( 0.30%) 241.69
realaud 80 ( 0.00%) 15045 ( 0.00%) 188.06
halflif 200 ( 0.00%) 15710 ( 0.00%) 78.55
starcra 59 ( 0.00%) 7728 ( 0.00%) 130.98
everque 462 ( 0.00%) 100297 ( 0.00%) 217.09
unreal 92 ( 0.00%) 7345 ( 0.00%) 79.84
quake 17 ( 0.00%) 2582 ( 0.00%) 151.88
cuseeme 3 ( 0.00%) 255 ( 0.00%) 85.00
other 3531007 ( 7.19%) 1805439602 ( 5.78%) 511.31
icmp 1554792 ( 3.16%) 161022779 ( 0.52%) 103.57
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 332 ( 0.00%) 135832 ( 0.00%) 409.13
ip6 909797 ( 1.85%) 576693787 ( 1.85%) 633.87
other 15126 ( 0.03%) 3633143 ( 0.01%) 240.19
frag 966424 ( 1.97%) 737502093 ( 2.36%) 763.12
ip6 171052 ( 0.35%) 101670866 ( 0.33%) 594.39
tcp6 57911 ( 0.12%) 48292920 ( 0.15%) 833.92
http(s) 25310 ( 0.05%) 28694630 ( 0.09%) 1133.73
http(c) 11303 ( 0.02%) 1035123 ( 0.00%) 91.58
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 138 ( 0.00%) 35251 ( 0.00%) 255.44
ftp 289 ( 0.00%) 26283 ( 0.00%) 90.94
pop3 78 ( 0.00%) 67642 ( 0.00%) 867.21
dns 330 ( 0.00%) 89260 ( 0.00%) 270.48
bgp 83 ( 0.00%) 13542 ( 0.00%) 163.16
other 20377 ( 0.04%) 18330935 ( 0.06%) 899.59
udp6 41990 ( 0.09%) 16466094 ( 0.05%) 392.14
dns 33140 ( 0.07%) 9686491 ( 0.03%) 292.29
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
other 8849 ( 0.02%) 6779486 ( 0.02%) 766.13
icmp6 22042 ( 0.04%) 3362392 ( 0.01%) 152.54
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 48993 ( 0.10%) 33533664 ( 0.11%) 684.46
tcpdump file: 201111261400.dump.gz (1166.93 MB)