Traffic Trace Info
DumpFile: 201001271400.dump
FileSize: 2506.97MB
Id: 201001271400
StartTime: Wed Jan 27 14:00:00 2010
EndTime: Wed Jan 27 14:15:01 2010
TotalTime: 900.49 seconds
TotalCapSize: 1952.83MB CapLen: 96 bytes
# of packets: 36315684 (22347.20MB)
AvgRate: 208.19Mbps stddev:25.98M
IP flow (unique src/dst pair) Information
# of flows: 1174693 (avg. 30.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.4% 1.3% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 647786
Top 10 bandwidth usage (bytes/total in %):
15.2% 10.9% 4.0% 3.9% 3.7% 3.3% 2.3% 2.2% 2.0% 1.9%
# of IPv6 addresses: 965
Top 10 bandwidth usage (bytes/total in %):
31.9% 29.8% 15.3% 15.3% 10.4% 3.8% 3.8% 3.2% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001271400.pktlen.png)
detailed numbers
[ 32- 63]: 6566918
[ 64- 127]: 11193856
[ 128- 255]: 1658381
[ 256- 511]: 1270215
[ 512- 1023]: 1069469
[ 1024- 2047]: 14556845
Protocol Breakdown
![[protocol breakdown chart]](201001271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36315684 (100.00%) 23432734548 (100.00%) 645.25
ip 36273849 ( 99.88%) 23421408706 ( 99.95%) 645.68
tcp 23894624 ( 65.80%) 16174394589 ( 69.02%) 676.91
http(s) 8225655 ( 22.65%) 10578903725 ( 45.15%) 1286.09
http(c) 7107930 ( 19.57%) 994095038 ( 4.24%) 139.86
squid 753664 ( 2.08%) 123365700 ( 0.53%) 163.69
smtp 414720 ( 1.14%) 162289104 ( 0.69%) 391.32
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 38454 ( 0.11%) 9443483 ( 0.04%) 245.58
pop3 31088 ( 0.09%) 21245726 ( 0.09%) 683.41
imap 4926 ( 0.01%) 2404302 ( 0.01%) 488.08
telnet 4505 ( 0.01%) 335866 ( 0.00%) 74.55
ssh 381074 ( 1.05%) 57234754 ( 0.24%) 150.19
dns 64990 ( 0.18%) 7942240 ( 0.03%) 122.21
bgp 153 ( 0.00%) 54671 ( 0.00%) 357.33
napster 110 ( 0.00%) 10161 ( 0.00%) 92.37
realaud 16 ( 0.00%) 1317 ( 0.00%) 82.31
rtsp 177405 ( 0.49%) 207022097 ( 0.88%) 1166.95
icecast 208560 ( 0.57%) 158058436 ( 0.67%) 757.86
hotline 5 ( 0.00%) 419 ( 0.00%) 83.80
other 6481366 ( 17.85%) 3851987370 ( 16.44%) 594.32
udp 10420383 ( 28.69%) 6184947341 ( 26.39%) 593.54
dns 1215356 ( 3.35%) 170326189 ( 0.73%) 140.15
realaud 81 ( 0.00%) 12009 ( 0.00%) 148.26
halflif 48 ( 0.00%) 5997 ( 0.00%) 124.94
starcra 149 ( 0.00%) 22989 ( 0.00%) 154.29
everque 497 ( 0.00%) 90512 ( 0.00%) 182.12
unreal 98 ( 0.00%) 16938 ( 0.00%) 172.84
quake 33 ( 0.00%) 6205 ( 0.00%) 188.03
cuseeme 10 ( 0.00%) 1784 ( 0.00%) 178.40
other 9203965 ( 25.34%) 6014357449 ( 25.67%) 653.45
icmp 526269 ( 1.45%) 56714789 ( 0.24%) 107.77
ipip 302 ( 0.00%) 36736 ( 0.00%) 121.64
ipsec 30135 ( 0.08%) 25847698 ( 0.11%) 857.73
ip6 1221536 ( 3.36%) 935900556 ( 3.99%) 766.17
other 180600 ( 0.50%) 43566997 ( 0.19%) 241.23
frag 6352 ( 0.02%) 5199101 ( 0.02%) 818.50
ip6 41835 ( 0.12%) 11325842 ( 0.05%) 270.73
tcp6 13269 ( 0.04%) 3156371 ( 0.01%) 237.88
http(s) 265 ( 0.00%) 199745 ( 0.00%) 753.75
http(c) 6206 ( 0.02%) 560824 ( 0.00%) 90.37
smtp 200 ( 0.00%) 84528 ( 0.00%) 422.64
ftp 26 ( 0.00%) 2181 ( 0.00%) 83.88
ssh 362 ( 0.00%) 36876 ( 0.00%) 101.87
dns 34 ( 0.00%) 8812 ( 0.00%) 259.18
bgp 205 ( 0.00%) 29238 ( 0.00%) 142.62
other 5971 ( 0.02%) 2234167 ( 0.01%) 374.17
udp6 21370 ( 0.06%) 4279710 ( 0.02%) 200.27
dns 21341 ( 0.06%) 4274754 ( 0.02%) 200.31
other 29 ( 0.00%) 4956 ( 0.00%) 170.90
icmp6 7131 ( 0.02%) 3848135 ( 0.02%) 539.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 35 ( 0.00%) 37546 ( 0.00%) 1072.74
tcpdump file: 201001271400.dump.gz (912.15 MB)