Traffic Trace Info
DumpFile: 201001031400.dump
FileSize: 1051.00MB
Id: 201001031400
StartTime: Sun Jan 3 14:00:00 2010
EndTime: Sun Jan 3 14:15:01 2010
TotalTime: 900.49 seconds
TotalCapSize: 819.55MB CapLen: 96 bytes
# of packets: 15167723 (10430.34MB)
AvgRate: 97.16Mbps stddev:12.45M
IP flow (unique src/dst pair) Information
# of flows: 617127 (avg. 24.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.6% 3.2% 2.1% 2.0% 1.4% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 370054
Top 10 bandwidth usage (bytes/total in %):
7.8% 7.3% 5.1% 4.9% 4.6% 3.8% 3.7% 3.5% 3.3% 3.1%
# of IPv6 addresses: 809
Top 10 bandwidth usage (bytes/total in %):
12.1% 9.5% 7.8% 7.3% 7.3% 6.6% 6.2% 5.6% 3.9% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001031400.pktlen.png)
detailed numbers
[ 32- 63]: 3164781
[ 64- 127]: 3738248
[ 128- 255]: 592332
[ 256- 511]: 434674
[ 512- 1023]: 382287
[ 1024- 2047]: 6855401
Protocol Breakdown
![[protocol breakdown chart]](201001031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15167723 (100.00%) 10937007531 (100.00%) 721.07
ip 15146257 ( 99.86%) 10933722195 ( 99.97%) 721.88
tcp 12007919 ( 79.17%) 9560302037 ( 87.41%) 796.17
http(s) 4677185 ( 30.84%) 6329898143 ( 57.88%) 1353.36
http(c) 2423863 ( 15.98%) 211957408 ( 1.94%) 87.45
squid 367429 ( 2.42%) 83074322 ( 0.76%) 226.10
smtp 178391 ( 1.18%) 62488624 ( 0.57%) 350.29
ftp 640804 ( 4.22%) 567173271 ( 5.19%) 885.10
pop3 3942 ( 0.03%) 1910096 ( 0.02%) 484.55
imap 1646 ( 0.01%) 915205 ( 0.01%) 556.02
telnet 416 ( 0.00%) 31602 ( 0.00%) 75.97
ssh 31736 ( 0.21%) 6234571 ( 0.06%) 196.45
dns 34122 ( 0.22%) 8027443 ( 0.07%) 235.26
bgp 133 ( 0.00%) 35827 ( 0.00%) 269.38
napster 20 ( 0.00%) 3387 ( 0.00%) 169.35
realaud 16 ( 0.00%) 1152 ( 0.00%) 72.00
rtsp 17875 ( 0.12%) 24558938 ( 0.22%) 1373.93
icecast 15912 ( 0.10%) 15460891 ( 0.14%) 971.65
hotline 6 ( 0.00%) 364 ( 0.00%) 60.67
other 3614421 ( 23.83%) 2248530673 ( 20.56%) 622.10
udp 2734313 ( 18.03%) 1331380365 ( 12.17%) 486.92
dns 694032 ( 4.58%) 100273538 ( 0.92%) 144.48
realaud 22 ( 0.00%) 2933 ( 0.00%) 133.32
halflif 80 ( 0.00%) 6006 ( 0.00%) 75.08
starcra 49 ( 0.00%) 6890 ( 0.00%) 140.61
everque 117 ( 0.00%) 24180 ( 0.00%) 206.67
unreal 26 ( 0.00%) 3419 ( 0.00%) 131.50
quake 84 ( 0.00%) 14062 ( 0.00%) 167.40
cuseeme 6 ( 0.00%) 580 ( 0.00%) 96.67
other 2034745 ( 13.41%) 1230456996 ( 11.25%) 604.72
icmp 262727 ( 1.73%) 22374029 ( 0.20%) 85.16
ipip 363 ( 0.00%) 44488 ( 0.00%) 122.56
ipsec 222 ( 0.00%) 55948 ( 0.00%) 252.02
ip6 70173 ( 0.46%) 12062534 ( 0.11%) 171.90
other 70540 ( 0.47%) 7502794 ( 0.07%) 106.36
frag 16010 ( 0.11%) 12829026 ( 0.12%) 801.31
ip6 21466 ( 0.14%) 3285336 ( 0.03%) 153.05
tcp6 7551 ( 0.05%) 780685 ( 0.01%) 103.39
http(s) 37 ( 0.00%) 18084 ( 0.00%) 488.76
http(c) 3634 ( 0.02%) 381634 ( 0.00%) 105.02
smtp 24 ( 0.00%) 3359 ( 0.00%) 139.96
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 5 ( 0.00%) 1774 ( 0.00%) 354.80
bgp 109 ( 0.00%) 13870 ( 0.00%) 127.25
other 3737 ( 0.02%) 361182 ( 0.00%) 96.65
udp6 9614 ( 0.06%) 1984175 ( 0.02%) 206.38
dns 9600 ( 0.06%) 1982511 ( 0.02%) 206.51
other 14 ( 0.00%) 1664 ( 0.00%) 118.86
icmp6 4247 ( 0.03%) 493644 ( 0.00%) 116.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24 ( 0.00%) 22752 ( 0.00%) 948.00
tcpdump file: 201001031400.dump.gz (365.61 MB)