Traffic Trace Info
DumpFile: 201001241400.dump
FileSize: 1804.82MB
Id: 201001241400
StartTime: Sun Jan 24 14:00:01 2010
EndTime: Sun Jan 24 14:15:00 2010
TotalTime: 899.54 seconds
TotalCapSize: 1399.40MB CapLen: 96 bytes
# of packets: 26568882 (17563.66MB)
AvgRate: 163.81Mbps stddev:16.88M
IP flow (unique src/dst pair) Information
# of flows: 844041 (avg. 31.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.4% 1.4% 1.2% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 503179
Top 10 bandwidth usage (bytes/total in %):
20.5% 4.4% 4.0% 4.0% 4.0% 3.5% 3.4% 2.6% 2.4% 2.1%
# of IPv6 addresses: 743
Top 10 bandwidth usage (bytes/total in %):
36.2% 32.1% 6.9% 4.6% 4.6% 4.3% 4.1% 4.0% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001241400.pktlen.png)
detailed numbers
[ 32- 63]: 3905902
[ 64- 127]: 8213401
[ 128- 255]: 1180158
[ 256- 511]: 1145025
[ 512- 1023]: 578083
[ 1024- 2047]: 11546313
Protocol Breakdown
![[protocol breakdown chart]](201001241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26568882 (100.00%) 18416834093 (100.00%) 693.17
ip 26545371 ( 99.91%) 18411563326 ( 99.97%) 693.59
tcp 15031009 ( 56.57%) 11878070630 ( 64.50%) 790.24
http(s) 5738195 ( 21.60%) 7833408468 ( 42.53%) 1365.13
http(c) 3504296 ( 13.19%) 314852254 ( 1.71%) 89.85
squid 361720 ( 1.36%) 97119163 ( 0.53%) 268.49
smtp 158038 ( 0.59%) 41212778 ( 0.22%) 260.78
ftp 36663 ( 0.14%) 13393597 ( 0.07%) 365.32
pop3 13833 ( 0.05%) 10693927 ( 0.06%) 773.07
imap 2356 ( 0.01%) 2503675 ( 0.01%) 1062.68
telnet 380 ( 0.00%) 27167 ( 0.00%) 71.49
ssh 135698 ( 0.51%) 20335592 ( 0.11%) 149.86
dns 47627 ( 0.18%) 6795636 ( 0.04%) 142.68
bgp 136 ( 0.00%) 45541 ( 0.00%) 334.86
napster 77 ( 0.00%) 70218 ( 0.00%) 911.92
rtsp 5050 ( 0.02%) 4170372 ( 0.02%) 825.82
icecast 1578 ( 0.01%) 117032 ( 0.00%) 74.16
other 5025354 ( 18.91%) 3533324730 ( 19.19%) 703.10
udp 9627392 ( 36.24%) 5731657407 ( 31.12%) 595.35
dns 826812 ( 3.11%) 118549335 ( 0.64%) 143.38
realaud 19 ( 0.00%) 2052 ( 0.00%) 108.00
halflif 112 ( 0.00%) 20424 ( 0.00%) 182.36
starcra 168 ( 0.00%) 27459 ( 0.00%) 163.45
everque 411 ( 0.00%) 159223 ( 0.00%) 387.40
unreal 35 ( 0.00%) 4943 ( 0.00%) 141.23
quake 29 ( 0.00%) 4622 ( 0.00%) 159.38
cuseeme 6 ( 0.00%) 576 ( 0.00%) 96.00
other 8797254 ( 33.11%) 5612654710 ( 30.48%) 638.00
icmp 460765 ( 1.73%) 34471636 ( 0.19%) 74.81
ipip 333 ( 0.00%) 41164 ( 0.00%) 123.62
ipsec 1054 ( 0.00%) 433796 ( 0.00%) 411.57
ip6 1360851 ( 5.12%) 747224881 ( 4.06%) 549.09
other 63967 ( 0.24%) 19663812 ( 0.11%) 307.41
frag 11403 ( 0.04%) 8833516 ( 0.05%) 774.67
ip6 23511 ( 0.09%) 5270767 ( 0.03%) 224.18
tcp6 9038 ( 0.03%) 2759147 ( 0.01%) 305.28
http(s) 2005 ( 0.01%) 1792740 ( 0.01%) 894.13
http(c) 3947 ( 0.01%) 360475 ( 0.00%) 91.33
smtp 354 ( 0.00%) 254335 ( 0.00%) 718.46
ssh 61 ( 0.00%) 5938 ( 0.00%) 97.34
dns 134 ( 0.00%) 35747 ( 0.00%) 266.77
bgp 116 ( 0.00%) 15391 ( 0.00%) 132.68
other 2421 ( 0.01%) 294521 ( 0.00%) 121.65
udp6 9637 ( 0.04%) 1975008 ( 0.01%) 204.94
dns 9482 ( 0.04%) 1940210 ( 0.01%) 204.62
other 155 ( 0.00%) 34798 ( 0.00%) 224.50
icmp6 4796 ( 0.02%) 523763 ( 0.00%) 109.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8769 ( 0.00%) 876.90
tcpdump file: 201001241400.dump.gz (631.64 MB)