Traffic Trace Info
DumpFile: 201001071400.dump
FileSize: 1739.33MB
Id: 201001071400
StartTime: Thu Jan 7 14:00:01 2010
EndTime: Thu Jan 7 14:15:00 2010
TotalTime: 899.25 seconds
TotalCapSize: 1360.09MB CapLen: 96 bytes
# of packets: 24853066 (15087.88MB)
AvgRate: 140.77Mbps stddev:14.34M
IP flow (unique src/dst pair) Information
# of flows: 1134598 (avg. 21.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 2.5% 1.7% 1.5% 1.4% 1.3% 1.2% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 713221
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.9% 6.4% 3.9% 3.2% 3.0% 2.9% 2.6% 2.5% 2.4%
# of IPv6 addresses: 1027
Top 10 bandwidth usage (bytes/total in %):
40.4% 40.4% 25.3% 25.2% 5.2% 4.3% 3.0% 2.4% 2.1% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001071400.pktlen.png)
detailed numbers
[ 32- 63]: 6469867
[ 64- 127]: 6542733
[ 128- 255]: 1042782
[ 256- 511]: 568975
[ 512- 1023]: 588592
[ 1024- 2047]: 9640117
Protocol Breakdown
![[protocol breakdown chart]](201001071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24853066 (100.00%) 15820786545 (100.00%) 636.57
ip 24757701 ( 99.62%) 15799735040 ( 99.87%) 638.17
tcp 21053285 ( 84.71%) 14618376721 ( 92.40%) 694.35
http(s) 6676668 ( 26.86%) 8710963123 ( 55.06%) 1304.69
http(c) 6219240 ( 25.02%) 1277308235 ( 8.07%) 205.38
squid 236728 ( 0.95%) 61790533 ( 0.39%) 261.02
smtp 270715 ( 1.09%) 111557801 ( 0.71%) 412.09
nntp 13050 ( 0.05%) 792832 ( 0.01%) 60.75
ftp 37722 ( 0.15%) 5004798 ( 0.03%) 132.68
pop3 29521 ( 0.12%) 14925646 ( 0.09%) 505.59
imap 5001 ( 0.02%) 2590939 ( 0.02%) 518.08
telnet 323 ( 0.00%) 23595 ( 0.00%) 73.05
ssh 711352 ( 2.86%) 212666372 ( 1.34%) 298.96
dns 22213 ( 0.09%) 5019326 ( 0.03%) 225.96
bgp 136 ( 0.00%) 48903 ( 0.00%) 359.58
napster 179 ( 0.00%) 35895 ( 0.00%) 200.53
realaud 60 ( 0.00%) 9620 ( 0.00%) 160.33
rtsp 197776 ( 0.80%) 81177484 ( 0.51%) 410.45
icecast 44072 ( 0.18%) 17645281 ( 0.11%) 400.37
hotline 38 ( 0.00%) 6178 ( 0.00%) 162.58
other 6588485 ( 26.51%) 4116809800 ( 26.02%) 624.85
udp 2916957 ( 11.74%) 1098982490 ( 6.95%) 376.76
dns 1012339 ( 4.07%) 146457697 ( 0.93%) 144.67
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 314 ( 0.00%) 21545 ( 0.00%) 68.61
halflif 88 ( 0.00%) 8156 ( 0.00%) 92.68
starcra 120 ( 0.00%) 26876 ( 0.00%) 223.97
everque 241 ( 0.00%) 46865 ( 0.00%) 194.46
unreal 74 ( 0.00%) 12644 ( 0.00%) 170.86
quake 20 ( 0.00%) 2142 ( 0.00%) 107.10
cuseeme 12 ( 0.00%) 1261 ( 0.00%) 105.08
other 1903629 ( 7.66%) 952303576 ( 6.02%) 500.26
icmp 601438 ( 2.42%) 55777960 ( 0.35%) 92.74
ipip 344 ( 0.00%) 46220 ( 0.00%) 134.36
ipsec 1087 ( 0.00%) 398490 ( 0.00%) 366.60
ip6 58894 ( 0.24%) 8105536 ( 0.05%) 137.63
other 125696 ( 0.51%) 18047623 ( 0.11%) 143.58
frag 1481 ( 0.01%) 1355244 ( 0.01%) 915.09
ip6 95365 ( 0.38%) 21051505 ( 0.13%) 220.75
tcp6 72355 ( 0.29%) 15292432 ( 0.10%) 211.35
http(s) 6015 ( 0.02%) 8885454 ( 0.06%) 1477.22
http(c) 3146 ( 0.01%) 290465 ( 0.00%) 92.33
smtp 944 ( 0.00%) 480577 ( 0.00%) 509.09
ssh 1118 ( 0.00%) 197796 ( 0.00%) 176.92
dns 33 ( 0.00%) 14199 ( 0.00%) 430.27
bgp 105 ( 0.00%) 12868 ( 0.00%) 122.55
other 60994 ( 0.25%) 5411073 ( 0.03%) 88.71
udp6 16813 ( 0.07%) 5009371 ( 0.03%) 297.95
dns 16778 ( 0.07%) 5005545 ( 0.03%) 298.34
other 35 ( 0.00%) 3826 ( 0.00%) 109.31
icmp6 6116 ( 0.02%) 694172 ( 0.00%) 113.50
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 50 ( 0.00%) 51314 ( 0.00%) 1026.28
tcpdump file: 201001071400.dump.gz (628.50 MB)