Traffic Trace Info
DumpFile: 201001291400.dump
FileSize: 2216.83MB
Id: 201001291400
StartTime: Fri Jan 29 14:00:01 2010
EndTime: Fri Jan 29 14:15:00 2010
TotalTime: 899.17 seconds
TotalCapSize: 1726.56MB CapLen: 96 bytes
# of packets: 32129955 (19693.07MB)
AvgRate: 183.71Mbps stddev:20.02M
IP flow (unique src/dst pair) Information
# of flows: 909210 (avg. 35.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.9% 2.4% 1.9% 1.5% 1.4% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 523844
Top 10 bandwidth usage (bytes/total in %):
20.9% 4.6% 4.5% 4.1% 3.9% 3.9% 3.3% 3.1% 2.9% 2.5%
# of IPv6 addresses: 907
Top 10 bandwidth usage (bytes/total in %):
82.1% 71.7% 10.3% 3.7% 1.2% 1.0% 0.9% 0.9% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001291400.pktlen.png)
detailed numbers
[ 32- 63]: 5339269
[ 64- 127]: 10250777
[ 128- 255]: 1464690
[ 256- 511]: 1459084
[ 512- 1023]: 660363
[ 1024- 2047]: 12955772
Protocol Breakdown
![[protocol breakdown chart]](201001291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32129955 (100.00%) 20649676093 (100.00%) 642.69
ip 32045467 ( 99.74%) 20617758942 ( 99.85%) 643.39
tcp 20017880 ( 62.30%) 13672677717 ( 66.21%) 683.02
http(s) 6877869 ( 21.41%) 9000982569 ( 43.59%) 1308.69
http(c) 5639644 ( 17.55%) 788266640 ( 3.82%) 139.77
squid 463050 ( 1.44%) 77057285 ( 0.37%) 166.41
smtp 261832 ( 0.81%) 129461197 ( 0.63%) 494.44
ftp 37861 ( 0.12%) 11147140 ( 0.05%) 294.42
pop3 40202 ( 0.13%) 28079358 ( 0.14%) 698.46
imap 3603 ( 0.01%) 1453383 ( 0.01%) 403.38
telnet 2577 ( 0.01%) 189841 ( 0.00%) 73.67
ssh 1530524 ( 4.76%) 952438775 ( 4.61%) 622.30
dns 66245 ( 0.21%) 8164778 ( 0.04%) 123.25
bgp 143 ( 0.00%) 57057 ( 0.00%) 399.00
napster 37 ( 0.00%) 4816 ( 0.00%) 130.16
realaud 4535 ( 0.01%) 300846 ( 0.00%) 66.34
rtsp 180158 ( 0.56%) 14639093 ( 0.07%) 81.26
icecast 39746 ( 0.12%) 17004074 ( 0.08%) 427.82
other 4869851 ( 15.16%) 2643430685 ( 12.80%) 542.82
udp 10282104 ( 32.00%) 6043564857 ( 29.27%) 587.78
dns 1166623 ( 3.63%) 171247357 ( 0.83%) 146.79
realaud 19551 ( 0.06%) 17312367 ( 0.08%) 885.50
halflif 2342 ( 0.01%) 178808 ( 0.00%) 76.35
starcra 121 ( 0.00%) 21146 ( 0.00%) 174.76
everque 230 ( 0.00%) 44469 ( 0.00%) 193.34
unreal 103 ( 0.00%) 21877 ( 0.00%) 212.40
quake 25 ( 0.00%) 2338 ( 0.00%) 93.52
cuseeme 9 ( 0.00%) 1283 ( 0.00%) 142.56
other 9092639 ( 28.30%) 5854607178 ( 28.35%) 643.88
icmp 466268 ( 1.45%) 34989330 ( 0.17%) 75.04
ipip 353 ( 0.00%) 42762 ( 0.00%) 121.14
ipsec 4976 ( 0.02%) 3698948 ( 0.02%) 743.36
ip6 1219532 ( 3.80%) 855023662 ( 4.14%) 701.11
other 54354 ( 0.17%) 7761666 ( 0.04%) 142.80
frag 7448 ( 0.02%) 5913753 ( 0.03%) 794.01
ip6 84488 ( 0.26%) 31917151 ( 0.15%) 377.77
tcp6 59633 ( 0.19%) 27277151 ( 0.13%) 457.42
http(s) 542 ( 0.00%) 330193 ( 0.00%) 609.21
http(c) 4172 ( 0.01%) 412381 ( 0.00%) 98.84
smtp 148 ( 0.00%) 48493 ( 0.00%) 327.66
ftp 5 ( 0.00%) 458 ( 0.00%) 91.60
ssh 48 ( 0.00%) 14784 ( 0.00%) 308.00
dns 6 ( 0.00%) 2249 ( 0.00%) 374.83
bgp 116 ( 0.00%) 15313 ( 0.00%) 132.01
other 54596 ( 0.17%) 26453280 ( 0.13%) 484.53
udp6 20251 ( 0.06%) 4129160 ( 0.02%) 203.90
dns 20162 ( 0.06%) 4117684 ( 0.02%) 204.23
other 89 ( 0.00%) 11476 ( 0.00%) 128.94
icmp6 4554 ( 0.01%) 487643 ( 0.00%) 107.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 19117 ( 0.00%) 955.85
tcpdump file: 201001291400.dump.gz (775.71 MB)