Traffic Trace Info
DumpFile: 201001251400.dump
FileSize: 2454.36MB
Id: 201001251400
StartTime: Mon Jan 25 14:00:01 2010
EndTime: Mon Jan 25 14:15:01 2010
TotalTime: 899.77 seconds
TotalCapSize: 1916.59MB CapLen: 96 bytes
# of packets: 35242727 (22894.87MB)
AvgRate: 213.43Mbps stddev:18.99M
IP flow (unique src/dst pair) Information
# of flows: 1102591 (avg. 31.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.9% 1.5% 1.3% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 597968
Top 10 bandwidth usage (bytes/total in %):
13.1% 4.9% 3.1% 2.9% 2.9% 2.8% 2.8% 2.4% 2.4% 2.3%
# of IPv6 addresses: 947
Top 10 bandwidth usage (bytes/total in %):
14.1% 14.1% 7.8% 6.2% 5.6% 5.6% 5.2% 5.2% 5.0% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001251400.pktlen.png)
detailed numbers
[ 32- 63]: 7259651
[ 64- 127]: 9816877
[ 128- 255]: 1342728
[ 256- 511]: 1163374
[ 512- 1023]: 704300
[ 1024- 2047]: 14955797
Protocol Breakdown
![[protocol breakdown chart]](201001251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35242727 (100.00%) 24007009635 (100.00%) 681.19
ip 35189372 ( 99.85%) 23998683180 ( 99.97%) 681.99
tcp 25581553 ( 72.59%) 19192091983 ( 79.94%) 750.23
http(s) 10244258 ( 29.07%) 13942424682 ( 58.08%) 1361.00
http(c) 7873878 ( 22.34%) 924445539 ( 3.85%) 117.41
squid 370865 ( 1.05%) 117270766 ( 0.49%) 316.21
smtp 276126 ( 0.78%) 118626754 ( 0.49%) 429.61
ftp 54031 ( 0.15%) 6638882 ( 0.03%) 122.87
pop3 25440 ( 0.07%) 14676064 ( 0.06%) 576.89
imap 5180 ( 0.01%) 2261859 ( 0.01%) 436.65
telnet 32 ( 0.00%) 5047 ( 0.00%) 157.72
ssh 508792 ( 1.44%) 61728941 ( 0.26%) 121.32
dns 50510 ( 0.14%) 6972951 ( 0.03%) 138.05
bgp 147 ( 0.00%) 50857 ( 0.00%) 345.97
napster 120 ( 0.00%) 58781 ( 0.00%) 489.84
realaud 72 ( 0.00%) 7499 ( 0.00%) 104.15
rtsp 42352 ( 0.12%) 57032573 ( 0.24%) 1346.63
icecast 8667 ( 0.02%) 5923407 ( 0.02%) 683.44
hotline 35 ( 0.00%) 5969 ( 0.00%) 170.54
other 6121045 ( 17.37%) 3933961232 ( 16.39%) 642.69
udp 7757339 ( 22.01%) 3999526257 ( 16.66%) 515.58
dns 978991 ( 2.78%) 142210870 ( 0.59%) 145.26
realaud 935 ( 0.00%) 61634 ( 0.00%) 65.92
halflif 81 ( 0.00%) 7872 ( 0.00%) 97.19
starcra 201 ( 0.00%) 36212 ( 0.00%) 180.16
everque 3410 ( 0.01%) 2663952 ( 0.01%) 781.22
unreal 101 ( 0.00%) 17761 ( 0.00%) 175.85
quake 28 ( 0.00%) 3655 ( 0.00%) 130.54
cuseeme 13 ( 0.00%) 4100 ( 0.00%) 315.38
other 6773467 ( 19.22%) 3854426395 ( 16.06%) 569.05
icmp 673488 ( 1.91%) 49687366 ( 0.21%) 73.78
ipip 308 ( 0.00%) 39064 ( 0.00%) 126.83
ipsec 2083 ( 0.01%) 893138 ( 0.00%) 428.77
ip6 1102401 ( 3.13%) 744302234 ( 3.10%) 675.16
other 72200 ( 0.20%) 12143138 ( 0.05%) 168.19
frag 3326 ( 0.01%) 3225498 ( 0.01%) 969.78
ip6 53355 ( 0.15%) 8326455 ( 0.03%) 156.06
tcp6 24005 ( 0.07%) 2781401 ( 0.01%) 115.87
http(s) 431 ( 0.00%) 348006 ( 0.00%) 807.44
http(c) 10558 ( 0.03%) 853329 ( 0.00%) 80.82
smtp 329 ( 0.00%) 85764 ( 0.00%) 260.68
ftp 22 ( 0.00%) 1821 ( 0.00%) 82.77
ssh 40 ( 0.00%) 4100 ( 0.00%) 102.50
dns 501 ( 0.00%) 127814 ( 0.00%) 255.12
bgp 150 ( 0.00%) 71180 ( 0.00%) 474.53
other 11974 ( 0.03%) 1289387 ( 0.01%) 107.68
udp6 24390 ( 0.07%) 5003479 ( 0.02%) 205.14
dns 24150 ( 0.07%) 4952935 ( 0.02%) 205.09
other 240 ( 0.00%) 50544 ( 0.00%) 210.60
icmp6 4910 ( 0.01%) 521148 ( 0.00%) 106.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 19 ( 0.00%) 16211 ( 0.00%) 853.21
tcpdump file: 201001251400.dump.gz (859.90 MB)