Traffic Trace Info
DumpFile: 201001111400.dump
FileSize: 1223.42MB
Id: 201001111400
StartTime: Mon Jan 11 14:00:00 2010
EndTime: Mon Jan 11 14:15:00 2010
TotalTime: 899.93 seconds
TotalCapSize: 956.59MB CapLen: 96 bytes
# of packets: 17486529 (10380.24MB)
AvgRate: 96.75Mbps stddev:14.32M
IP flow (unique src/dst pair) Information
# of flows: 888471 (avg. 19.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.3% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 555711
Top 10 bandwidth usage (bytes/total in %):
4.7% 4.1% 4.0% 3.2% 3.0% 3.0% 2.9% 2.8% 2.6% 2.5%
# of IPv6 addresses: 883
Top 10 bandwidth usage (bytes/total in %):
21.9% 15.9% 11.4% 8.1% 5.9% 5.5% 4.7% 4.6% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001111400.pktlen.png)
detailed numbers
[ 32- 63]: 4460588
[ 64- 127]: 4676871
[ 128- 255]: 944335
[ 256- 511]: 448672
[ 512- 1023]: 325713
[ 1024- 2047]: 6630350
Protocol Breakdown
![[protocol breakdown chart]](201001111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17486529 (100.00%) 10884468243 (100.00%) 622.45
ip 17460040 ( 99.85%) 10878242547 ( 99.94%) 623.04
tcp 14061877 ( 80.42%) 9994736860 ( 91.83%) 710.77
http(s) 5764571 ( 32.97%) 7644917187 ( 70.24%) 1326.19
http(c) 4073385 ( 23.29%) 443854986 ( 4.08%) 108.96
squid 584604 ( 3.34%) 132065492 ( 1.21%) 225.91
smtp 228795 ( 1.31%) 85868647 ( 0.79%) 375.31
nntp 66 ( 0.00%) 5882 ( 0.00%) 89.12
ftp 45962 ( 0.26%) 9550532 ( 0.09%) 207.79
pop3 23950 ( 0.14%) 16686924 ( 0.15%) 696.74
imap 1756 ( 0.01%) 719602 ( 0.01%) 409.80
telnet 26 ( 0.00%) 4291 ( 0.00%) 165.04
ssh 48062 ( 0.27%) 12824449 ( 0.12%) 266.83
dns 27915 ( 0.16%) 5285770 ( 0.05%) 189.35
bgp 138 ( 0.00%) 43680 ( 0.00%) 316.52
napster 152 ( 0.00%) 18514 ( 0.00%) 121.80
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 3563 ( 0.02%) 344331 ( 0.00%) 96.64
icecast 700 ( 0.00%) 50674 ( 0.00%) 72.39
hotline 20 ( 0.00%) 1541 ( 0.00%) 77.05
other 3258208 ( 18.63%) 1642494116 ( 15.09%) 504.11
udp 2765832 ( 15.82%) 814579024 ( 7.48%) 294.52
dns 1295058 ( 7.41%) 175159413 ( 1.61%) 135.25
realaud 1938 ( 0.01%) 120027 ( 0.00%) 61.93
halflif 94 ( 0.00%) 7527 ( 0.00%) 80.07
starcra 121 ( 0.00%) 23741 ( 0.00%) 196.21
everque 189 ( 0.00%) 35325 ( 0.00%) 186.90
unreal 86 ( 0.00%) 18696 ( 0.00%) 217.40
quake 34 ( 0.00%) 3855 ( 0.00%) 113.38
cuseeme 10 ( 0.00%) 1211 ( 0.00%) 121.10
other 1467017 ( 8.39%) 638752741 ( 5.87%) 435.41
icmp 561432 ( 3.21%) 42343061 ( 0.39%) 75.42
ipip 331 ( 0.00%) 42570 ( 0.00%) 128.61
ipsec 68 ( 0.00%) 11192 ( 0.00%) 164.59
ip6 64913 ( 0.37%) 25617042 ( 0.24%) 394.64
other 5587 ( 0.03%) 912798 ( 0.01%) 163.38
frag 5232 ( 0.03%) 4903021 ( 0.05%) 937.12
ip6 26487 ( 0.15%) 6225576 ( 0.06%) 235.04
tcp6 5765 ( 0.03%) 983610 ( 0.01%) 170.62
http(c) 3860 ( 0.02%) 358353 ( 0.00%) 92.84
smtp 1021 ( 0.01%) 535572 ( 0.00%) 524.56
ftp 9 ( 0.00%) 774 ( 0.00%) 86.00
ssh 10 ( 0.00%) 1548 ( 0.00%) 154.80
dns 16 ( 0.00%) 2992 ( 0.00%) 187.00
bgp 99 ( 0.00%) 12137 ( 0.00%) 122.60
other 750 ( 0.00%) 72234 ( 0.00%) 96.31
udp6 16016 ( 0.09%) 4593675 ( 0.04%) 286.82
dns 15979 ( 0.09%) 4587585 ( 0.04%) 287.10
other 37 ( 0.00%) 6090 ( 0.00%) 164.59
icmp6 4584 ( 0.03%) 532457 ( 0.00%) 116.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 92 ( 0.00%) 111754 ( 0.00%) 1214.72
tcpdump file: 201001111400.dump.gz (440.96 MB)