Traffic Trace Info
DumpFile: 201001151400.dump
FileSize: 2051.91MB
Id: 201001151400
StartTime: Fri Jan 15 14:00:01 2010
EndTime: Fri Jan 15 14:15:00 2010
TotalTime: 899.85 seconds
TotalCapSize: 1599.02MB CapLen: 96 bytes
# of packets: 29680027 (18644.59MB)
AvgRate: 173.82Mbps stddev:15.69M
IP flow (unique src/dst pair) Information
# of flows: 1097232 (avg. 27.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.9% 1.8% 1.3% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 640490
Top 10 bandwidth usage (bytes/total in %):
8.5% 8.0% 4.7% 3.8% 3.7% 3.5% 3.0% 2.9% 2.7% 2.0%
# of IPv6 addresses: 1021
Top 10 bandwidth usage (bytes/total in %):
16.3% 8.3% 6.9% 5.2% 4.9% 4.6% 4.4% 4.2% 4.1% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001151400.pktlen.png)
detailed numbers
[ 32- 63]: 6697761
[ 64- 127]: 7742537
[ 128- 255]: 1369109
[ 256- 511]: 998039
[ 512- 1023]: 1029214
[ 1024- 2047]: 11843367
Protocol Breakdown
![[protocol breakdown chart]](201001151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29680027 (100.00%) 19550271859 (100.00%) 658.70
ip 29648212 ( 99.89%) 19544181015 ( 99.97%) 659.20
tcp 21356501 ( 71.96%) 15189359698 ( 77.69%) 711.23
http(s) 7683597 ( 25.89%) 10229572844 ( 52.32%) 1331.35
http(c) 6866638 ( 23.14%) 1134924540 ( 5.81%) 165.28
squid 326059 ( 1.10%) 81414105 ( 0.42%) 249.69
smtp 352171 ( 1.19%) 145614615 ( 0.74%) 413.48
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 116958 ( 0.39%) 34836411 ( 0.18%) 297.85
pop3 35332 ( 0.12%) 15489686 ( 0.08%) 438.40
imap 1914 ( 0.01%) 211058 ( 0.00%) 110.27
telnet 14432 ( 0.05%) 1064086 ( 0.01%) 73.73
ssh 697974 ( 2.35%) 611172791 ( 3.13%) 875.64
dns 45948 ( 0.15%) 6579156 ( 0.03%) 143.19
bgp 147 ( 0.00%) 53625 ( 0.00%) 364.80
napster 214 ( 0.00%) 17690 ( 0.00%) 82.66
realaud 3 ( 0.00%) 194 ( 0.00%) 64.67
rtsp 23734 ( 0.08%) 10961504 ( 0.06%) 461.85
icecast 74341 ( 0.25%) 48108893 ( 0.25%) 647.14
hotline 8 ( 0.00%) 702 ( 0.00%) 87.75
other 5117024 ( 17.24%) 2869337378 ( 14.68%) 560.74
udp 6384262 ( 21.51%) 3540831735 ( 18.11%) 554.62
dns 1389401 ( 4.68%) 189701099 ( 0.97%) 136.53
realaud 36 ( 0.00%) 5816 ( 0.00%) 161.56
halflif 78 ( 0.00%) 7601 ( 0.00%) 97.45
starcra 211 ( 0.00%) 38219 ( 0.00%) 181.13
everque 278 ( 0.00%) 44384 ( 0.00%) 159.65
unreal 73 ( 0.00%) 11313 ( 0.00%) 154.97
quake 16 ( 0.00%) 1946 ( 0.00%) 121.62
cuseeme 5 ( 0.00%) 489 ( 0.00%) 97.80
other 4992498 ( 16.82%) 3350566205 ( 17.14%) 671.12
icmp 720327 ( 2.43%) 98386022 ( 0.50%) 136.59
ipip 315 ( 0.00%) 38444 ( 0.00%) 122.04
ipsec 766 ( 0.00%) 401572 ( 0.00%) 524.25
ip6 1005212 ( 3.39%) 690400257 ( 3.53%) 686.82
other 180829 ( 0.61%) 24763287 ( 0.13%) 136.94
frag 75870 ( 0.26%) 40780646 ( 0.21%) 537.51
ip6 31815 ( 0.11%) 6090844 ( 0.03%) 191.45
tcp6 7386 ( 0.02%) 1015265 ( 0.01%) 137.46
http(s) 1541 ( 0.01%) 366466 ( 0.00%) 237.81
http(c) 4132 ( 0.01%) 403352 ( 0.00%) 97.62
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 257 ( 0.00%) 96837 ( 0.00%) 376.80
ssh 58 ( 0.00%) 11812 ( 0.00%) 203.66
dns 6 ( 0.00%) 2249 ( 0.00%) 374.83
bgp 113 ( 0.00%) 14486 ( 0.00%) 128.19
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 1276 ( 0.00%) 119841 ( 0.00%) 93.92
udp6 18683 ( 0.06%) 4371880 ( 0.02%) 234.00
dns 18651 ( 0.06%) 4366728 ( 0.02%) 234.13
other 32 ( 0.00%) 5152 ( 0.00%) 161.00
icmp6 5651 ( 0.02%) 625804 ( 0.00%) 110.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 65 ( 0.00%) 73815 ( 0.00%) 1135.62
tcpdump file: 201001151400.dump.gz (734.87 MB)