Traffic Trace Info
DumpFile: 201001211400.dump
FileSize: 2214.69MB
Id: 201001211400
StartTime: Thu Jan 21 14:00:00 2010
EndTime: Thu Jan 21 14:15:00 2010
TotalTime: 900.20 seconds
TotalCapSize: 1726.61MB CapLen: 96 bytes
# of packets: 31986506 (19655.00MB)
AvgRate: 183.15Mbps stddev:14.86M
IP flow (unique src/dst pair) Information
# of flows: 941316 (avg. 33.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 1.5% 1.3% 1.3% 1.1% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 561162
Top 10 bandwidth usage (bytes/total in %):
17.1% 8.0% 6.6% 5.7% 4.8% 4.8% 3.9% 2.4% 1.8% 1.7%
# of IPv6 addresses: 858
Top 10 bandwidth usage (bytes/total in %):
24.5% 24.3% 11.1% 11.1% 4.9% 4.0% 3.8% 3.7% 3.7% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001211400.pktlen.png)
detailed numbers
[ 32- 63]: 6184073
[ 64- 127]: 9203476
[ 128- 255]: 1404737
[ 256- 511]: 1411897
[ 512- 1023]: 1205137
[ 1024- 2047]: 12577186
Protocol Breakdown
![[protocol breakdown chart]](201001211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31986506 (100.00%) 20609756465 (100.00%) 644.33
ip 31943718 ( 99.87%) 20602974533 ( 99.97%) 644.98
tcp 21053443 ( 65.82%) 14582087248 ( 70.75%) 692.62
http(s) 6661494 ( 20.83%) 8581086304 ( 41.64%) 1288.16
http(c) 6145546 ( 19.21%) 844997099 ( 4.10%) 137.50
squid 358095 ( 1.12%) 84644765 ( 0.41%) 236.38
smtp 244384 ( 0.76%) 119185380 ( 0.58%) 487.70
nntp 3 ( 0.00%) 234 ( 0.00%) 78.00
ftp 31746 ( 0.10%) 3014880 ( 0.01%) 94.97
pop3 33955 ( 0.11%) 17402754 ( 0.08%) 512.52
imap 2914 ( 0.01%) 876581 ( 0.00%) 300.82
telnet 304 ( 0.00%) 22047 ( 0.00%) 72.52
ssh 64620 ( 0.20%) 7303913 ( 0.04%) 113.03
dns 51950 ( 0.16%) 7010490 ( 0.03%) 134.95
bgp 167 ( 0.00%) 67999 ( 0.00%) 407.18
napster 66 ( 0.00%) 5850 ( 0.00%) 88.64
realaud 21 ( 0.00%) 2120 ( 0.00%) 100.95
rtsp 103722 ( 0.32%) 34937435 ( 0.17%) 336.84
icecast 82039 ( 0.26%) 59765277 ( 0.29%) 728.50
other 7272413 ( 22.74%) 4821763880 ( 23.40%) 663.02
udp 8651879 ( 27.05%) 4670126397 ( 22.66%) 539.78
dns 1122615 ( 3.51%) 155678216 ( 0.76%) 138.67
rip 1 ( 0.00%) 140 ( 0.00%) 140.00
realaud 1830 ( 0.01%) 111780 ( 0.00%) 61.08
halflif 4766 ( 0.01%) 343826 ( 0.00%) 72.14
starcra 224 ( 0.00%) 39841 ( 0.00%) 177.86
everque 320 ( 0.00%) 61522 ( 0.00%) 192.26
unreal 66 ( 0.00%) 11318 ( 0.00%) 171.48
quake 23 ( 0.00%) 2999 ( 0.00%) 130.39
cuseeme 8 ( 0.00%) 1194 ( 0.00%) 149.25
other 7521937 ( 23.52%) 4513799447 ( 21.90%) 600.08
icmp 614034 ( 1.92%) 89963658 ( 0.44%) 146.51
ipip 332 ( 0.00%) 42148 ( 0.00%) 126.95
ipsec 1236 ( 0.00%) 445000 ( 0.00%) 360.03
ip6 1526172 ( 4.77%) 1185750374 ( 5.75%) 776.94
other 96622 ( 0.30%) 74559708 ( 0.36%) 771.66
frag 3015 ( 0.01%) 2615679 ( 0.01%) 867.56
ip6 42788 ( 0.13%) 6781932 ( 0.03%) 158.50
tcp6 26447 ( 0.08%) 3550133 ( 0.02%) 134.24
http(s) 1211 ( 0.00%) 1160606 ( 0.01%) 958.39
http(c) 3722 ( 0.01%) 343060 ( 0.00%) 92.17
smtp 159 ( 0.00%) 56349 ( 0.00%) 354.40
ftp 48 ( 0.00%) 4257 ( 0.00%) 88.69
ssh 57 ( 0.00%) 5626 ( 0.00%) 98.70
dns 14 ( 0.00%) 6176 ( 0.00%) 441.14
bgp 117 ( 0.00%) 17050 ( 0.00%) 145.73
other 21119 ( 0.07%) 1957009 ( 0.01%) 92.67
udp6 11969 ( 0.04%) 2756356 ( 0.01%) 230.29
dns 11959 ( 0.04%) 2755256 ( 0.01%) 230.39
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 9 ( 0.00%) 990 ( 0.00%) 110.00
icmp6 4313 ( 0.01%) 442715 ( 0.00%) 102.65
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 30 ( 0.00%) 28784 ( 0.00%) 959.47
tcpdump file: 201001211400.dump.gz (784.81 MB)