Traffic Trace Info
DumpFile: 201001101400.dump
FileSize: 1094.91MB
Id: 201001101400
StartTime: Sun Jan 10 14:00:01 2010
EndTime: Sun Jan 10 14:15:00 2010
TotalTime: 899.27 seconds
TotalCapSize: 851.91MB CapLen: 96 bytes
# of packets: 15924502 (9059.90MB)
AvgRate: 84.50Mbps stddev:14.04M
IP flow (unique src/dst pair) Information
# of flows: 824404 (avg. 19.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 2.0% 1.6% 1.4% 1.3% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 503322
Top 10 bandwidth usage (bytes/total in %):
7.1% 5.9% 5.4% 3.6% 3.2% 3.0% 2.6% 2.4% 2.4% 2.4%
# of IPv6 addresses: 820
Top 10 bandwidth usage (bytes/total in %):
19.7% 11.9% 11.6% 10.2% 7.2% 5.4% 4.7% 4.6% 4.2% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001101400.pktlen.png)
detailed numbers
[ 32- 63]: 4284450
[ 64- 127]: 4322463
[ 128- 255]: 835788
[ 256- 511]: 382387
[ 512- 1023]: 375519
[ 1024- 2047]: 5723895
Protocol Breakdown
![[protocol breakdown chart]](201001101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15924502 (100.00%) 9499998823 (100.00%) 596.56
ip 15901824 ( 99.86%) 9495274477 ( 99.95%) 597.12
tcp 12211336 ( 76.68%) 8005743509 ( 84.27%) 655.60
http(s) 4451122 ( 27.95%) 5569360119 ( 58.62%) 1251.23
http(c) 2982082 ( 18.73%) 265631146 ( 2.80%) 89.08
squid 449726 ( 2.82%) 95339493 ( 1.00%) 211.99
smtp 165507 ( 1.04%) 33362783 ( 0.35%) 201.58
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 110190 ( 0.69%) 13899865 ( 0.15%) 126.14
pop3 15004 ( 0.09%) 11708930 ( 0.12%) 780.39
imap 722 ( 0.00%) 145631 ( 0.00%) 201.70
telnet 288 ( 0.00%) 21065 ( 0.00%) 73.14
ssh 139455 ( 0.88%) 38191465 ( 0.40%) 273.86
dns 20279 ( 0.13%) 4829247 ( 0.05%) 238.14
bgp 177 ( 0.00%) 58457 ( 0.00%) 330.27
napster 33 ( 0.00%) 4562 ( 0.00%) 138.24
realaud 7 ( 0.00%) 440 ( 0.00%) 62.86
rtsp 37016 ( 0.23%) 54997838 ( 0.58%) 1485.79
icecast 447 ( 0.00%) 42101 ( 0.00%) 94.19
other 3839276 ( 24.11%) 1918150065 ( 20.19%) 499.61
udp 3118799 ( 19.58%) 1434271935 ( 15.10%) 459.88
dns 769829 ( 4.83%) 111738169 ( 1.18%) 145.15
realaud 15 ( 0.00%) 1747 ( 0.00%) 116.47
halflif 77 ( 0.00%) 6121 ( 0.00%) 79.49
starcra 65 ( 0.00%) 10106 ( 0.00%) 155.48
everque 118 ( 0.00%) 23562 ( 0.00%) 199.68
unreal 22 ( 0.00%) 3875 ( 0.00%) 176.14
quake 25 ( 0.00%) 3004 ( 0.00%) 120.16
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 2348342 ( 14.75%) 1322291475 ( 13.92%) 563.07
icmp 493344 ( 3.10%) 37193771 ( 0.39%) 75.39
ipip 335 ( 0.00%) 41554 ( 0.00%) 124.04
ipsec 21110 ( 0.13%) 7656044 ( 0.08%) 362.67
ip6 51310 ( 0.32%) 8128799 ( 0.09%) 158.43
other 5590 ( 0.04%) 2238865 ( 0.02%) 400.51
frag 1260 ( 0.01%) 1352597 ( 0.01%) 1073.49
ip6 22678 ( 0.14%) 4724346 ( 0.05%) 208.32
tcp6 6867 ( 0.04%) 1130521 ( 0.01%) 164.63
http(c) 3636 ( 0.02%) 327953 ( 0.00%) 90.20
smtp 1127 ( 0.01%) 570795 ( 0.01%) 506.47
pop3 500 ( 0.00%) 37252 ( 0.00%) 74.50
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 103 ( 0.00%) 12716 ( 0.00%) 123.46
other 1496 ( 0.01%) 181023 ( 0.00%) 121.00
udp6 11442 ( 0.07%) 3063838 ( 0.03%) 267.77
dns 11403 ( 0.07%) 3058772 ( 0.03%) 268.24
other 39 ( 0.00%) 5066 ( 0.00%) 129.90
icmp6 4312 ( 0.03%) 495542 ( 0.01%) 114.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27 ( 0.00%) 30365 ( 0.00%) 1124.63
tcpdump file: 201001101400.dump.gz (387.10 MB)