Traffic Trace Info
DumpFile: 201001021400.dump
FileSize: 1031.52MB
Id: 201001021400
StartTime: Sat Jan 2 14:00:00 2010
EndTime: Sat Jan 2 14:15:00 2010
TotalTime: 900.58 seconds
TotalCapSize: 807.98MB CapLen: 96 bytes
# of packets: 14648937 (9797.07MB)
AvgRate: 91.27Mbps stddev:10.76M
IP flow (unique src/dst pair) Information
# of flows: 747759 (avg. 19.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 6.9% 2.7% 2.1% 1.9% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 453707
Top 10 bandwidth usage (bytes/total in %):
15.1% 9.4% 9.2% 7.1% 7.0% 3.7% 3.3% 3.1% 3.1% 2.8%
# of IPv6 addresses: 841
Top 10 bandwidth usage (bytes/total in %):
33.9% 11.5% 9.7% 6.2% 5.2% 4.2% 4.1% 3.0% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001021400.pktlen.png)
detailed numbers
[ 32- 63]: 2739057
[ 64- 127]: 4183853
[ 128- 255]: 713467
[ 256- 511]: 375458
[ 512- 1023]: 306923
[ 1024- 2047]: 6330179
Protocol Breakdown
![[protocol breakdown chart]](201001021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14648937 (100.00%) 10272969967 (100.00%) 701.28
ip 14614479 ( 99.76%) 10266707808 ( 99.94%) 702.50
tcp 11528343 ( 78.70%) 9065953096 ( 88.25%) 786.41
http(s) 4201195 ( 28.68%) 5599852701 ( 54.51%) 1332.92
http(c) 2346485 ( 16.02%) 246728336 ( 2.40%) 105.15
squid 378993 ( 2.59%) 110840059 ( 1.08%) 292.46
smtp 140686 ( 0.96%) 29632614 ( 0.29%) 210.63
ftp 22796 ( 0.16%) 3402844 ( 0.03%) 149.27
pop3 3269 ( 0.02%) 1272545 ( 0.01%) 389.28
imap 329 ( 0.00%) 72911 ( 0.00%) 221.61
telnet 302 ( 0.00%) 24626 ( 0.00%) 81.54
ssh 177684 ( 1.21%) 20241401 ( 0.20%) 113.92
dns 24491 ( 0.17%) 5026376 ( 0.05%) 205.23
bgp 132 ( 0.00%) 34000 ( 0.00%) 257.58
napster 2 ( 0.00%) 128 ( 0.00%) 64.00
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 63 ( 0.00%) 6402 ( 0.00%) 101.62
icecast 17258 ( 0.12%) 15432124 ( 0.15%) 894.20
other 4214656 ( 28.77%) 3033385907 ( 29.53%) 719.72
udp 2655417 ( 18.13%) 1159024389 ( 11.28%) 436.48
dns 829810 ( 5.66%) 120018209 ( 1.17%) 144.63
rip 2 ( 0.00%) 229 ( 0.00%) 114.50
realaud 16 ( 0.00%) 2039 ( 0.00%) 127.44
halflif 91 ( 0.00%) 6696 ( 0.00%) 73.58
starcra 54 ( 0.00%) 7419 ( 0.00%) 137.39
everque 2940 ( 0.02%) 2877485 ( 0.03%) 978.74
unreal 43 ( 0.00%) 9006 ( 0.00%) 209.44
quake 37 ( 0.00%) 5527 ( 0.00%) 149.38
cuseeme 4 ( 0.00%) 374 ( 0.00%) 93.50
other 1822370 ( 12.44%) 1036049948 ( 10.09%) 568.52
icmp 290028 ( 1.98%) 23982349 ( 0.23%) 82.69
ipip 346 ( 0.00%) 41916 ( 0.00%) 121.14
ipsec 404 ( 0.00%) 56752 ( 0.00%) 140.48
ip6 65996 ( 0.45%) 9738011 ( 0.09%) 147.55
other 73945 ( 0.50%) 7911295 ( 0.08%) 106.99
frag 436 ( 0.00%) 464251 ( 0.00%) 1064.80
ip6 34458 ( 0.24%) 6262159 ( 0.06%) 181.73
tcp6 5819 ( 0.04%) 1068672 ( 0.01%) 183.65
http(s) 51 ( 0.00%) 22732 ( 0.00%) 445.73
http(c) 3780 ( 0.03%) 340908 ( 0.00%) 90.19
smtp 1164 ( 0.01%) 615293 ( 0.01%) 528.60
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 24 ( 0.00%) 10033 ( 0.00%) 418.04
bgp 112 ( 0.00%) 14168 ( 0.00%) 126.50
other 683 ( 0.00%) 64756 ( 0.00%) 94.81
udp6 24117 ( 0.16%) 4606194 ( 0.04%) 190.99
dns 24095 ( 0.16%) 4603526 ( 0.04%) 191.06
other 22 ( 0.00%) 2668 ( 0.00%) 121.27
icmp6 4432 ( 0.03%) 519436 ( 0.01%) 117.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 60 ( 0.00%) 63777 ( 0.00%) 1062.95
tcpdump file: 201001021400.dump.gz (357.47 MB)