Traffic Trace Info
DumpFile: 201111271400.dump
FileSize: 3303.78MB
Id: 201111271400
StartTime: Sun Nov 27 14:00:00 2011
EndTime: Sun Nov 27 14:15:00 2011
TotalTime: 899.92 seconds
TotalCapSize: -1512.58MB CapLen: 96 bytes
# of packets: 47208982 (26828.63MB)
AvgRate: 250.07Mbps stddev:65.49M
IP flow (unique src/dst pair) Information
# of flows: 1821646 (avg. 25.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.3% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1395126
Top 10 bandwidth usage (bytes/total in %):
35.6% 19.7% 2.9% 2.8% 2.5% 2.4% 2.3% 2.0% 1.5% 1.3%
# of IPv6 addresses: 3634
Top 10 bandwidth usage (bytes/total in %):
27.1% 24.8% 11.9% 10.7% 10.7% 7.4% 6.6% 6.3% 6.0% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111271400.pktlen.png)
detailed numbers
[ 32- 63]: 17242216
[ 64- 127]: 10408198
[ 128- 255]: 877565
[ 256- 511]: 580269
[ 512- 1023]: 784728
[ 1024- 2047]: 17316006
Protocol Breakdown
![[protocol breakdown chart]](201111271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47208982 (100.00%) 28131855784 (100.00%) 595.90
ip 47097699 ( 99.76%) 28080388293 ( 99.82%) 596.22
tcp 40515482 ( 85.82%) 25330613279 ( 90.04%) 625.21
http(s) 12512533 ( 26.50%) 17080571424 ( 60.72%) 1365.08
http(c) 5034125 ( 10.66%) 655764911 ( 2.33%) 130.26
squid 76745 ( 0.16%) 46650351 ( 0.17%) 607.86
smtp 50935 ( 0.11%) 14536378 ( 0.05%) 285.39
ftp 23620 ( 0.05%) 18757925 ( 0.07%) 794.15
pop3 2953 ( 0.01%) 234629 ( 0.00%) 79.45
imap 673 ( 0.00%) 56246 ( 0.00%) 83.58
telnet 675 ( 0.00%) 77927 ( 0.00%) 115.45
ssh 39180 ( 0.08%) 6620521 ( 0.02%) 168.98
dns 43546 ( 0.09%) 4913005 ( 0.02%) 112.82
bgp 643 ( 0.00%) 101272 ( 0.00%) 157.50
napster 1349 ( 0.00%) 88198 ( 0.00%) 65.38
realaud 231 ( 0.00%) 19647 ( 0.00%) 85.05
rtsp 6581 ( 0.01%) 7780255 ( 0.03%) 1182.23
icecast 17543 ( 0.04%) 1447115 ( 0.01%) 82.49
hotline 148 ( 0.00%) 9302 ( 0.00%) 62.85
other 22704001 ( 48.09%) 7492984113 ( 26.64%) 330.03
udp 3770962 ( 7.99%) 1803298840 ( 6.41%) 478.21
dns 317510 ( 0.67%) 76868485 ( 0.27%) 242.10
realaud 22 ( 0.00%) 3437 ( 0.00%) 156.23
halflif 34 ( 0.00%) 3114 ( 0.00%) 91.59
starcra 62 ( 0.00%) 6085 ( 0.00%) 98.15
everque 291 ( 0.00%) 63994 ( 0.00%) 219.91
unreal 9 ( 0.00%) 1165 ( 0.00%) 129.44
quake 16 ( 0.00%) 1642 ( 0.00%) 102.62
cuseeme 4 ( 0.00%) 362 ( 0.00%) 90.50
other 3418515 ( 7.24%) 1724032985 ( 6.13%) 504.32
icmp 1514614 ( 3.21%) 148450786 ( 0.53%) 98.01
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 227 ( 0.00%) 79746 ( 0.00%) 351.30
ip6 1275854 ( 2.70%) 792899814 ( 2.82%) 621.47
other 20376 ( 0.04%) 5026668 ( 0.02%) 246.70
frag 71449 ( 0.15%) 54526409 ( 0.19%) 763.15
ip6 111283 ( 0.24%) 51467491 ( 0.18%) 462.49
tcp6 54938 ( 0.12%) 38645021 ( 0.14%) 703.43
http(s) 6114 ( 0.01%) 7417146 ( 0.03%) 1213.14
http(c) 12225 ( 0.03%) 1082929 ( 0.00%) 88.58
smtp 89 ( 0.00%) 16618 ( 0.00%) 186.72
pop3 65 ( 0.00%) 13640 ( 0.00%) 209.85
dns 305 ( 0.00%) 70586 ( 0.00%) 231.43
bgp 86 ( 0.00%) 12531 ( 0.00%) 145.71
other 36054 ( 0.08%) 30031571 ( 0.11%) 832.96
udp6 33270 ( 0.07%) 9080222 ( 0.03%) 272.93
dns 29544 ( 0.06%) 8173313 ( 0.03%) 276.65
everque 4 ( 0.00%) 368 ( 0.00%) 92.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3721 ( 0.01%) 906434 ( 0.00%) 243.60
icmp6 22564 ( 0.05%) 3408477 ( 0.01%) 151.06
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 399 ( 0.00%) 318515 ( 0.00%) 798.28
tcpdump file: 201111271400.dump.gz (1151.87 MB)