Traffic Trace Info
DumpFile: 201001061400.dump
FileSize: 1708.62MB
Id: 201001061400
StartTime: Wed Jan 6 14:00:00 2010
EndTime: Wed Jan 6 14:15:01 2010
TotalTime: 900.27 seconds
TotalCapSize: 1335.24MB CapLen: 96 bytes
# of packets: 24469345 (14437.30MB)
AvgRate: 134.53Mbps stddev:15.17M
IP flow (unique src/dst pair) Information
# of flows: 948870 (avg. 25.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.9% 2.2% 1.6% 1.4% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 541147
Top 10 bandwidth usage (bytes/total in %):
6.2% 5.4% 3.4% 3.4% 3.4% 3.1% 3.0% 2.9% 2.7% 2.5%
# of IPv6 addresses: 985
Top 10 bandwidth usage (bytes/total in %):
12.4% 12.2% 11.5% 11.3% 4.6% 4.3% 4.3% 3.9% 3.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001061400.pktlen.png)
detailed numbers
[ 32- 63]: 6450474
[ 64- 127]: 6829594
[ 128- 255]: 885628
[ 256- 511]: 594117
[ 512- 1023]: 458012
[ 1024- 2047]: 9251520
Protocol Breakdown
![[protocol breakdown chart]](201001061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24469345 (100.00%) 15138607932 (100.00%) 618.68
ip 24434177 ( 99.86%) 15131293526 ( 99.95%) 619.27
tcp 20418166 ( 83.44%) 14364300906 ( 94.89%) 703.51
http(s) 7699263 ( 31.46%) 10129658899 ( 66.91%) 1315.67
http(c) 5902819 ( 24.12%) 872927228 ( 5.77%) 147.88
squid 1067156 ( 4.36%) 209650059 ( 1.38%) 196.46
smtp 256182 ( 1.05%) 107322531 ( 0.71%) 418.93
nntp 61 ( 0.00%) 5925 ( 0.00%) 97.13
ftp 40981 ( 0.17%) 3790778 ( 0.03%) 92.50
pop3 23683 ( 0.10%) 12726724 ( 0.08%) 537.38
imap 1266 ( 0.01%) 189559 ( 0.00%) 149.73
telnet 399 ( 0.00%) 28536 ( 0.00%) 71.52
ssh 54490 ( 0.22%) 7651546 ( 0.05%) 140.42
dns 24901 ( 0.10%) 5210783 ( 0.03%) 209.26
bgp 138 ( 0.00%) 43622 ( 0.00%) 316.10
napster 133 ( 0.00%) 15342 ( 0.00%) 115.35
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 143749 ( 0.59%) 93588077 ( 0.62%) 651.05
icecast 39239 ( 0.16%) 31068616 ( 0.21%) 791.78
hotline 7 ( 0.00%) 434 ( 0.00%) 62.00
other 5163695 ( 21.10%) 2890422005 ( 19.09%) 559.76
udp 2028234 ( 8.29%) 595866203 ( 3.94%) 293.79
dns 852571 ( 3.48%) 128673411 ( 0.85%) 150.92
rip 2 ( 0.00%) 252 ( 0.00%) 126.00
realaud 15 ( 0.00%) 1835 ( 0.00%) 122.33
halflif 84 ( 0.00%) 6804 ( 0.00%) 81.00
starcra 183 ( 0.00%) 32195 ( 0.00%) 175.93
everque 241 ( 0.00%) 57776 ( 0.00%) 239.73
unreal 105 ( 0.00%) 16299 ( 0.00%) 155.23
quake 17 ( 0.00%) 1902 ( 0.00%) 111.88
cuseeme 2 ( 0.00%) 185 ( 0.00%) 92.50
other 1174874 ( 4.80%) 466981997 ( 3.08%) 397.47
icmp 1908403 ( 7.80%) 154232973 ( 1.02%) 80.82
ipip 340 ( 0.00%) 44624 ( 0.00%) 131.25
ipsec 1596 ( 0.01%) 1017328 ( 0.01%) 637.42
ip6 61109 ( 0.25%) 10112794 ( 0.07%) 165.49
other 16329 ( 0.07%) 5718698 ( 0.04%) 350.22
frag 2276 ( 0.01%) 1955349 ( 0.01%) 859.12
ip6 35168 ( 0.14%) 7314406 ( 0.05%) 207.98
tcp6 15202 ( 0.06%) 2823100 ( 0.02%) 185.71
http(s) 512 ( 0.00%) 611246 ( 0.00%) 1193.84
http(c) 3478 ( 0.01%) 312094 ( 0.00%) 89.73
smtp 1677 ( 0.01%) 846723 ( 0.01%) 504.90
ssh 97 ( 0.00%) 30738 ( 0.00%) 316.89
dns 52 ( 0.00%) 18417 ( 0.00%) 354.17
bgp 109 ( 0.00%) 13425 ( 0.00%) 123.17
other 9277 ( 0.04%) 990457 ( 0.01%) 106.76
udp6 15440 ( 0.06%) 3899002 ( 0.03%) 252.53
dns 15340 ( 0.06%) 3879130 ( 0.03%) 252.88
other 100 ( 0.00%) 19872 ( 0.00%) 198.72
icmp6 4414 ( 0.02%) 507062 ( 0.00%) 114.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 82 ( 0.00%) 81162 ( 0.00%) 989.78
tcpdump file: 201001061400.dump.gz (612.33 MB)