Traffic Trace Info
DumpFile: 201001191400.dump
FileSize: 1799.78MB
Id: 201001191400
StartTime: Tue Jan 19 14:00:01 2010
EndTime: Tue Jan 19 14:15:00 2010
TotalTime: 899.65 seconds
TotalCapSize: 1407.91MB CapLen: 96 bytes
# of packets: 25681014 (15526.69MB)
AvgRate: 144.74Mbps stddev:15.28M
IP flow (unique src/dst pair) Information
# of flows: 962903 (avg. 26.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.4% 1.9% 1.8% 1.3% 1.2% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 537815
Top 10 bandwidth usage (bytes/total in %):
8.2% 6.7% 3.5% 3.2% 3.2% 3.0% 2.6% 2.6% 2.4% 2.1%
# of IPv6 addresses: 985
Top 10 bandwidth usage (bytes/total in %):
11.6% 11.5% 6.3% 6.3% 6.0% 5.4% 5.1% 4.8% 4.8% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001191400.pktlen.png)
detailed numbers
[ 32- 63]: 6554490
[ 64- 127]: 6316594
[ 128- 255]: 1154883
[ 256- 511]: 786809
[ 512- 1023]: 1060098
[ 1024- 2047]: 9808140
Protocol Breakdown
![[protocol breakdown chart]](201001191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25681014 (100.00%) 16280911239 (100.00%) 633.97
ip 25640290 ( 99.84%) 16274297645 ( 99.96%) 634.72
tcp 21525155 ( 83.82%) 14832824104 ( 91.11%) 689.09
http(s) 7857270 ( 30.60%) 10144503213 ( 62.31%) 1291.10
http(c) 6777571 ( 26.39%) 1068699065 ( 6.56%) 157.68
squid 382782 ( 1.49%) 83273109 ( 0.51%) 217.55
smtp 356798 ( 1.39%) 181011318 ( 1.11%) 507.32
ftp 35293 ( 0.14%) 4922874 ( 0.03%) 139.49
pop3 24108 ( 0.09%) 15797390 ( 0.10%) 655.28
imap 1911 ( 0.01%) 346724 ( 0.00%) 181.44
telnet 1889 ( 0.01%) 142696 ( 0.00%) 75.54
ssh 42986 ( 0.17%) 7558224 ( 0.05%) 175.83
dns 49045 ( 0.19%) 6853251 ( 0.04%) 139.73
bgp 155 ( 0.00%) 60610 ( 0.00%) 391.03
napster 26 ( 0.00%) 3064 ( 0.00%) 117.85
realaud 30 ( 0.00%) 2776 ( 0.00%) 92.53
rtsp 53659 ( 0.21%) 39838735 ( 0.24%) 742.44
icecast 41518 ( 0.16%) 16961262 ( 0.10%) 408.53
hotline 63 ( 0.00%) 20737 ( 0.00%) 329.16
other 5900044 ( 22.97%) 3262828636 ( 20.04%) 553.02
udp 3218616 ( 12.53%) 1220478894 ( 7.50%) 379.19
dns 1052717 ( 4.10%) 153988974 ( 0.95%) 146.28
realaud 111 ( 0.00%) 13426 ( 0.00%) 120.95
halflif 57 ( 0.00%) 5132 ( 0.00%) 90.04
starcra 96 ( 0.00%) 13763 ( 0.00%) 143.36
everque 250 ( 0.00%) 53403 ( 0.00%) 213.61
unreal 101 ( 0.00%) 17005 ( 0.00%) 168.37
quake 28 ( 0.00%) 3635 ( 0.00%) 129.82
cuseeme 12 ( 0.00%) 1483 ( 0.00%) 123.58
other 2165179 ( 8.43%) 1066335313 ( 6.55%) 492.49
icmp 575585 ( 2.24%) 78446025 ( 0.48%) 136.29
ipip 347 ( 0.00%) 41500 ( 0.00%) 119.60
ipsec 167 ( 0.00%) 25114 ( 0.00%) 150.38
ip6 265688 ( 1.03%) 128570628 ( 0.79%) 483.92
other 54732 ( 0.21%) 13911380 ( 0.09%) 254.17
frag 11860 ( 0.05%) 9604305 ( 0.06%) 809.81
ip6 40724 ( 0.16%) 6613594 ( 0.04%) 162.40
tcp6 20345 ( 0.08%) 2623887 ( 0.02%) 128.97
http(s) 59 ( 0.00%) 32642 ( 0.00%) 553.25
http(c) 4325 ( 0.02%) 416168 ( 0.00%) 96.22
smtp 1625 ( 0.01%) 319095 ( 0.00%) 196.37
ftp 22 ( 0.00%) 1821 ( 0.00%) 82.77
ssh 949 ( 0.00%) 417706 ( 0.00%) 440.15
dns 833 ( 0.00%) 205261 ( 0.00%) 246.41
bgp 112 ( 0.00%) 14208 ( 0.00%) 126.86
other 12420 ( 0.05%) 1216986 ( 0.01%) 97.99
udp6 15381 ( 0.06%) 3396160 ( 0.02%) 220.80
dns 15322 ( 0.06%) 3383444 ( 0.02%) 220.82
other 59 ( 0.00%) 12716 ( 0.00%) 215.53
icmp6 4904 ( 0.02%) 517982 ( 0.00%) 105.62
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 63 ( 0.00%) 71349 ( 0.00%) 1132.52
tcpdump file: 201001191400.dump.gz (637.22 MB)