Traffic Trace Info
DumpFile: 201001011400.dump
FileSize: 817.51MB
Id: 201001011400
StartTime: Fri Jan 1 14:00:00 2010
EndTime: Fri Jan 1 14:15:01 2010
TotalTime: 900.51 seconds
TotalCapSize: 642.74MB CapLen: 96 bytes
# of packets: 11452979 (6810.39MB)
AvgRate: 63.43Mbps stddev:13.96M
IP flow (unique src/dst pair) Information
# of flows: 771738 (avg. 14.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.0% 2.8% 2.2% 1.9% 1.6% 1.6% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 463025
Top 10 bandwidth usage (bytes/total in %):
6.5% 4.7% 4.3% 4.1% 3.9% 3.7% 3.5% 3.4% 3.3% 3.3%
# of IPv6 addresses: 871
Top 10 bandwidth usage (bytes/total in %):
50.6% 48.2% 14.4% 6.6% 6.2% 3.1% 2.5% 2.3% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001011400.pktlen.png)
detailed numbers
[ 32- 63]: 2461492
[ 64- 127]: 3518938
[ 128- 255]: 584907
[ 256- 511]: 331712
[ 512- 1023]: 267089
[ 1024- 2047]: 4288841
Protocol Breakdown
![[protocol breakdown chart]](201001011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11452979 (100.00%) 7141206824 (100.00%) 623.52
ip 11331916 ( 98.94%) 7126460353 ( 99.79%) 628.88
tcp 8968209 ( 78.30%) 6590863852 ( 92.29%) 734.91
http(s) 3655987 ( 31.92%) 4762149866 ( 66.69%) 1302.56
http(c) 1879895 ( 16.41%) 155309350 ( 2.17%) 82.62
squid 293361 ( 2.56%) 61758248 ( 0.86%) 210.52
smtp 174858 ( 1.53%) 45200518 ( 0.63%) 258.50
ftp 33093 ( 0.29%) 5176366 ( 0.07%) 156.42
pop3 6304 ( 0.06%) 4711901 ( 0.07%) 747.45
imap 1983 ( 0.02%) 1798864 ( 0.03%) 907.14
telnet 1097 ( 0.01%) 80186 ( 0.00%) 73.10
ssh 273100 ( 2.38%) 51867369 ( 0.73%) 189.92
dns 27700 ( 0.24%) 8790600 ( 0.12%) 317.35
bgp 129 ( 0.00%) 31154 ( 0.00%) 241.50
napster 78 ( 0.00%) 52352 ( 0.00%) 671.18
rtsp 21477 ( 0.19%) 24384511 ( 0.34%) 1135.38
icecast 252 ( 0.00%) 16210 ( 0.00%) 64.33
other 2598893 ( 22.69%) 1469536237 ( 20.58%) 565.45
udp 1735135 ( 15.15%) 479084855 ( 6.71%) 276.11
dns 856543 ( 7.48%) 116208998 ( 1.63%) 135.67
realaud 93 ( 0.00%) 16950 ( 0.00%) 182.26
halflif 79 ( 0.00%) 5931 ( 0.00%) 75.08
starcra 4555 ( 0.04%) 316176 ( 0.00%) 69.41
everque 102 ( 0.00%) 21743 ( 0.00%) 213.17
unreal 54 ( 0.00%) 11478 ( 0.00%) 212.56
quake 19 ( 0.00%) 1742 ( 0.00%) 91.68
cuseeme 6 ( 0.00%) 520 ( 0.00%) 86.67
other 873602 ( 7.63%) 362436955 ( 5.08%) 414.88
icmp 495271 ( 4.32%) 40563096 ( 0.57%) 81.90
ipip 366 ( 0.00%) 44732 ( 0.00%) 122.22
ipsec 144 ( 0.00%) 22896 ( 0.00%) 159.00
ip6 62025 ( 0.54%) 8251793 ( 0.12%) 133.04
other 70766 ( 0.62%) 7629129 ( 0.11%) 107.81
frag 633 ( 0.01%) 658196 ( 0.01%) 1039.80
ip6 121063 ( 1.06%) 14746471 ( 0.21%) 121.81
tcp6 90309 ( 0.79%) 8840436 ( 0.12%) 97.89
http(s) 50 ( 0.00%) 27289 ( 0.00%) 545.78
http(c) 3387 ( 0.03%) 304828 ( 0.00%) 90.00
smtp 1799 ( 0.02%) 911091 ( 0.01%) 506.44
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 23 ( 0.00%) 4684 ( 0.00%) 203.65
bgp 101 ( 0.00%) 12501 ( 0.00%) 123.77
other 84944 ( 0.74%) 7579261 ( 0.11%) 89.23
udp6 26246 ( 0.23%) 5240089 ( 0.07%) 199.65
dns 26224 ( 0.23%) 5237669 ( 0.07%) 199.73
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 4348 ( 0.04%) 527128 ( 0.01%) 121.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 130 ( 0.00%) 134738 ( 0.00%) 1036.45
tcpdump file: 201001011400.dump.gz (294.28 MB)