Traffic Trace Info
DumpFile: 201001121400.dump
FileSize: 2116.85MB
Id: 201001121400
StartTime: Tue Jan 12 14:00:00 2010
EndTime: Tue Jan 12 14:15:01 2010
TotalTime: 900.36 seconds
TotalCapSize: 1658.27MB CapLen: 96 bytes
# of packets: 30052963 (19551.13MB)
AvgRate: 182.17Mbps stddev:23.16M
IP flow (unique src/dst pair) Information
# of flows: 999748 (avg. 30.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 3.5% 2.4% 1.3% 1.0% 1.0% 1.0% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 604763
Top 10 bandwidth usage (bytes/total in %):
5.6% 5.6% 5.1% 4.8% 3.7% 3.6% 3.5% 3.0% 2.7% 2.5%
# of IPv6 addresses: 951
Top 10 bandwidth usage (bytes/total in %):
73.3% 73.0% 7.0% 7.0% 2.5% 2.0% 2.0% 1.4% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001121400.pktlen.png)
detailed numbers
[ 32- 63]: 6782498
[ 64- 127]: 7534931
[ 128- 255]: 1383249
[ 256- 511]: 729033
[ 512- 1023]: 1152380
[ 1024- 2047]: 12470872
Protocol Breakdown
![[protocol breakdown chart]](201001121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30052963 (100.00%) 20500850402 (100.00%) 682.16
ip 30006767 ( 99.85%) 20468901402 ( 99.84%) 682.14
tcp 25114787 ( 83.57%) 18588696426 ( 90.67%) 740.15
http(s) 9568947 ( 31.84%) 12642219791 ( 61.67%) 1321.17
http(c) 6702356 ( 22.30%) 789188696 ( 3.85%) 117.75
squid 566004 ( 1.88%) 116642798 ( 0.57%) 206.08
smtp 331661 ( 1.10%) 141764637 ( 0.69%) 427.44
ftp 58478 ( 0.19%) 10208172 ( 0.05%) 174.56
pop3 28638 ( 0.10%) 17614014 ( 0.09%) 615.06
imap 4760 ( 0.02%) 3336259 ( 0.02%) 700.89
telnet 11414 ( 0.04%) 845629 ( 0.00%) 74.09
ssh 612904 ( 2.04%) 93937525 ( 0.46%) 153.27
dns 7003 ( 0.02%) 3998589 ( 0.02%) 570.98
bgp 179 ( 0.00%) 71520 ( 0.00%) 399.55
napster 31 ( 0.00%) 2225 ( 0.00%) 71.77
realaud 95 ( 0.00%) 9364 ( 0.00%) 98.57
rtsp 2017 ( 0.01%) 409579 ( 0.00%) 203.06
icecast 26853 ( 0.09%) 16087535 ( 0.08%) 599.10
hotline 48 ( 0.00%) 4277 ( 0.00%) 89.10
other 7193395 ( 23.94%) 4752355570 ( 23.18%) 660.66
udp 4252488 ( 14.15%) 1798733958 ( 8.77%) 422.98
dns 1484373 ( 4.94%) 198895050 ( 0.97%) 133.99
realaud 925 ( 0.00%) 57823 ( 0.00%) 62.51
halflif 68 ( 0.00%) 5449 ( 0.00%) 80.13
starcra 194 ( 0.00%) 28169 ( 0.00%) 145.20
everque 312 ( 0.00%) 52373 ( 0.00%) 167.86
unreal 88 ( 0.00%) 21724 ( 0.00%) 246.86
quake 58 ( 0.00%) 5935 ( 0.00%) 102.33
cuseeme 5 ( 0.00%) 692 ( 0.00%) 138.40
other 2753723 ( 9.16%) 1597083672 ( 7.79%) 579.97
icmp 577769 ( 1.92%) 71942122 ( 0.35%) 124.52
ipip 355 ( 0.00%) 45546 ( 0.00%) 128.30
ipsec 1055 ( 0.00%) 406730 ( 0.00%) 385.53
ip6 57899 ( 0.19%) 8435539 ( 0.04%) 145.69
other 2414 ( 0.01%) 641081 ( 0.00%) 265.57
frag 51636 ( 0.17%) 38747470 ( 0.19%) 750.40
ip6 46194 ( 0.15%) 31948880 ( 0.16%) 691.62
tcp6 24064 ( 0.08%) 27358644 ( 0.13%) 1136.91
http(s) 2629 ( 0.01%) 2988277 ( 0.01%) 1136.66
http(c) 2927 ( 0.01%) 265212 ( 0.00%) 90.61
smtp 848 ( 0.00%) 441629 ( 0.00%) 520.79
ssh 55 ( 0.00%) 5418 ( 0.00%) 98.51
dns 708 ( 0.00%) 177176 ( 0.00%) 250.25
bgp 119 ( 0.00%) 15669 ( 0.00%) 131.67
other 16778 ( 0.06%) 23465263 ( 0.11%) 1398.57
udp6 16826 ( 0.06%) 3931349 ( 0.02%) 233.65
dns 16739 ( 0.06%) 3922374 ( 0.02%) 234.33
other 87 ( 0.00%) 8975 ( 0.00%) 103.16
icmp6 5234 ( 0.02%) 615914 ( 0.00%) 117.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 40 ( 0.00%) 38893 ( 0.00%) 972.33
tcpdump file: 201001121400.dump.gz (744.19 MB)