Traffic Trace Info
DumpFile: 201001301400.dump
FileSize: 2066.94MB
Id: 201001301400
StartTime: Sat Jan 30 14:00:01 2010
EndTime: Sat Jan 30 14:15:01 2010
TotalTime: 900.08 seconds
TotalCapSize: 1618.80MB CapLen: 96 bytes
# of packets: 29368528 (17790.18MB)
AvgRate: 165.82Mbps stddev:19.81M
IP flow (unique src/dst pair) Information
# of flows: 975377 (avg. 30.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.7% 1.5% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 597152
Top 10 bandwidth usage (bytes/total in %):
16.4% 6.7% 4.6% 4.3% 4.0% 3.9% 3.6% 3.2% 3.0% 2.8%
# of IPv6 addresses: 813
Top 10 bandwidth usage (bytes/total in %):
43.3% 43.2% 12.0% 9.3% 9.3% 5.2% 2.8% 2.6% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001301400.pktlen.png)
detailed numbers
[ 32- 63]: 4848080
[ 64- 127]: 9895979
[ 128- 255]: 1400463
[ 256- 511]: 968986
[ 512- 1023]: 702420
[ 1024- 2047]: 11552600
Protocol Breakdown
![[protocol breakdown chart]](201001301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29368528 (100.00%) 18654359033 (100.00%) 635.18
ip 29300235 ( 99.77%) 18644543230 ( 99.95%) 636.33
tcp 20650548 ( 70.32%) 13955420393 ( 74.81%) 675.79
http(s) 8139197 ( 27.71%) 9660081130 ( 51.78%) 1186.86
http(c) 6263842 ( 21.33%) 833301620 ( 4.47%) 133.03
squid 384535 ( 1.31%) 82514068 ( 0.44%) 214.58
smtp 203357 ( 0.69%) 78459788 ( 0.42%) 385.82
ftp 67343 ( 0.23%) 28523412 ( 0.15%) 423.55
pop3 35701 ( 0.12%) 13908807 ( 0.07%) 389.59
imap 2255 ( 0.01%) 1192736 ( 0.01%) 528.93
telnet 15944 ( 0.05%) 1177997 ( 0.01%) 73.88
ssh 272217 ( 0.93%) 263524075 ( 1.41%) 968.07
dns 66630 ( 0.23%) 8029871 ( 0.04%) 120.51
bgp 132 ( 0.00%) 41841 ( 0.00%) 316.98
napster 17 ( 0.00%) 1487 ( 0.00%) 87.47
realaud 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 69963 ( 0.24%) 22730851 ( 0.12%) 324.90
icecast 7358 ( 0.03%) 6583552 ( 0.04%) 894.75
hotline 16 ( 0.00%) 3054 ( 0.00%) 190.88
other 5122036 ( 17.44%) 2955345798 ( 15.84%) 576.99
udp 7183653 ( 24.46%) 3923004786 ( 21.03%) 546.10
dns 986404 ( 3.36%) 143541603 ( 0.77%) 145.52
realaud 1183 ( 0.00%) 114528 ( 0.00%) 96.81
halflif 97 ( 0.00%) 16418 ( 0.00%) 169.26
starcra 150 ( 0.00%) 26897 ( 0.00%) 179.31
everque 288 ( 0.00%) 54486 ( 0.00%) 189.19
unreal 55 ( 0.00%) 8474 ( 0.00%) 154.07
quake 25 ( 0.00%) 3151 ( 0.00%) 126.04
cuseeme 5 ( 0.00%) 705 ( 0.00%) 141.00
other 6194922 ( 21.09%) 3778584067 ( 20.26%) 609.95
icmp 453547 ( 1.54%) 34021247 ( 0.18%) 75.01
ipip 302 ( 0.00%) 36330 ( 0.00%) 120.30
ipsec 335 ( 0.00%) 44362 ( 0.00%) 132.42
ip6 1010234 ( 3.44%) 731776937 ( 3.92%) 724.36
other 1616 ( 0.01%) 239175 ( 0.00%) 148.00
frag 3904 ( 0.01%) 5048427 ( 0.03%) 1293.14
ip6 68293 ( 0.23%) 9815803 ( 0.05%) 143.73
tcp6 47432 ( 0.16%) 6151161 ( 0.03%) 129.68
http(s) 127 ( 0.00%) 39310 ( 0.00%) 309.53
http(c) 3474 ( 0.01%) 311839 ( 0.00%) 89.76
smtp 215 ( 0.00%) 72518 ( 0.00%) 337.29
ssh 2176 ( 0.01%) 911680 ( 0.00%) 418.97
dns 15 ( 0.00%) 4876 ( 0.00%) 325.07
bgp 109 ( 0.00%) 14270 ( 0.00%) 130.92
other 41316 ( 0.14%) 4796668 ( 0.03%) 116.10
udp6 17275 ( 0.06%) 3274877 ( 0.02%) 189.57
dns 17249 ( 0.06%) 3271467 ( 0.02%) 189.66
other 26 ( 0.00%) 3410 ( 0.00%) 131.15
icmp6 3542 ( 0.01%) 374361 ( 0.00%) 105.69
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 11324 ( 0.00%) 808.86
tcpdump file: 201001301400.dump.gz (729.25 MB)