Traffic Trace Info
DumpFile: 201001181400.dump
FileSize: 1818.97MB
Id: 201001181400
StartTime: Mon Jan 18 14:00:00 2010
EndTime: Mon Jan 18 14:15:00 2010
TotalTime: 900.38 seconds
TotalCapSize: 1426.20MB CapLen: 96 bytes
# of packets: 25739478 (14841.14MB)
AvgRate: 138.27Mbps stddev:15.70M
IP flow (unique src/dst pair) Information
# of flows: 1154080 (avg. 22.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.5% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 632922
Top 10 bandwidth usage (bytes/total in %):
3.7% 3.7% 3.4% 3.2% 2.9% 2.9% 2.8% 2.8% 2.7% 2.6%
# of IPv6 addresses: 1027
Top 10 bandwidth usage (bytes/total in %):
15.0% 9.3% 8.9% 6.2% 5.5% 5.4% 5.3% 5.2% 5.0% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001181400.pktlen.png)
detailed numbers
[ 32- 63]: 6320060
[ 64- 127]: 6772139
[ 128- 255]: 1122994
[ 256- 511]: 833683
[ 512- 1023]: 1663859
[ 1024- 2047]: 9026743
Protocol Breakdown
![[protocol breakdown chart]](201001181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25739478 (100.00%) 15562065592 (100.00%) 604.60
ip 25709218 ( 99.88%) 15555549389 ( 99.96%) 605.06
tcp 20982554 ( 81.52%) 13704593242 ( 88.06%) 653.14
http(s) 6881928 ( 26.74%) 8877076582 ( 57.04%) 1289.91
http(c) 6679557 ( 25.95%) 958465978 ( 6.16%) 143.49
squid 332929 ( 1.29%) 76307273 ( 0.49%) 229.20
smtp 297098 ( 1.15%) 93548500 ( 0.60%) 314.87
ftp 38726 ( 0.15%) 4078218 ( 0.03%) 105.31
pop3 35265 ( 0.14%) 16131443 ( 0.10%) 457.43
imap 8099 ( 0.03%) 1451646 ( 0.01%) 179.24
telnet 1038 ( 0.00%) 79083 ( 0.00%) 76.19
ssh 430534 ( 1.67%) 51332125 ( 0.33%) 119.23
dns 48499 ( 0.19%) 6895093 ( 0.04%) 142.17
bgp 144 ( 0.00%) 49251 ( 0.00%) 342.02
napster 1066 ( 0.00%) 977661 ( 0.01%) 917.13
realaud 31 ( 0.00%) 4804 ( 0.00%) 154.97
rtsp 62920 ( 0.24%) 36491877 ( 0.23%) 579.97
icecast 58625 ( 0.23%) 27892762 ( 0.18%) 475.78
other 6106085 ( 23.72%) 3553810286 ( 22.84%) 582.01
udp 3484930 ( 13.54%) 1312472834 ( 8.43%) 376.61
dns 1173435 ( 4.56%) 170932967 ( 1.10%) 145.67
realaud 2694 ( 0.01%) 168702 ( 0.00%) 62.62
halflif 82 ( 0.00%) 7448 ( 0.00%) 90.83
starcra 143 ( 0.00%) 21087 ( 0.00%) 147.46
everque 302 ( 0.00%) 60717 ( 0.00%) 201.05
unreal 116 ( 0.00%) 18057 ( 0.00%) 155.66
quake 22 ( 0.00%) 2784 ( 0.00%) 126.55
cuseeme 8 ( 0.00%) 1512 ( 0.00%) 189.00
other 2307673 ( 8.97%) 1141195542 ( 7.33%) 494.52
icmp 566914 ( 2.20%) 77175545 ( 0.50%) 136.13
ipip 349 ( 0.00%) 43708 ( 0.00%) 125.24
ipsec 2339 ( 0.01%) 810562 ( 0.01%) 346.54
ip6 525046 ( 2.04%) 432862734 ( 2.78%) 824.43
other 147086 ( 0.57%) 27590764 ( 0.18%) 187.58
frag 8123 ( 0.03%) 6580170 ( 0.04%) 810.07
ip6 30260 ( 0.12%) 6516203 ( 0.04%) 215.34
tcp6 7576 ( 0.03%) 1262170 ( 0.01%) 166.60
http(s) 265 ( 0.00%) 230639 ( 0.00%) 870.34
http(c) 3786 ( 0.01%) 342585 ( 0.00%) 90.49
smtp 192 ( 0.00%) 59849 ( 0.00%) 311.71
ssh 53 ( 0.00%) 9854 ( 0.00%) 185.92
dns 1833 ( 0.01%) 477728 ( 0.00%) 260.63
bgp 116 ( 0.00%) 14539 ( 0.00%) 125.34
other 1331 ( 0.01%) 126976 ( 0.00%) 95.40
udp6 18413 ( 0.07%) 4748128 ( 0.03%) 257.87
dns 18394 ( 0.07%) 4745691 ( 0.03%) 258.00
other 19 ( 0.00%) 2437 ( 0.00%) 128.26
icmp6 4209 ( 0.02%) 469480 ( 0.00%) 111.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 32 ( 0.00%) 32345 ( 0.00%) 1010.78
tcpdump file: 201001181400.dump.gz (650.71 MB)