Traffic Trace Info
DumpFile: 201001311400.dump
FileSize: 1485.09MB
Id: 201001311400
StartTime: Sun Jan 31 14:00:01 2010
EndTime: Sun Jan 31 14:15:00 2010
TotalTime: 899.65 seconds
TotalCapSize: 1152.00MB CapLen: 96 bytes
# of packets: 21828271 (12893.00MB)
AvgRate: 120.21Mbps stddev:19.51M
IP flow (unique src/dst pair) Information
# of flows: 944939 (avg. 23.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.9% 1.6% 1.5% 1.4% 1.4% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 593908
Top 10 bandwidth usage (bytes/total in %):
23.1% 5.0% 4.5% 4.2% 3.4% 3.1% 2.6% 2.4% 2.2% 2.1%
# of IPv6 addresses: 814
Top 10 bandwidth usage (bytes/total in %):
26.8% 9.4% 6.7% 5.8% 5.7% 4.1% 3.9% 3.9% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201001311400.pktlen.png)
detailed numbers
[ 32- 63]: 4283613
[ 64- 127]: 6839659
[ 128- 255]: 965392
[ 256- 511]: 991379
[ 512- 1023]: 400930
[ 1024- 2047]: 8347298
Protocol Breakdown
![[protocol breakdown chart]](201001311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21828271 (100.00%) 13519295032 (100.00%) 619.35
ip 21799523 ( 99.87%) 13514906288 ( 99.97%) 619.96
tcp 13138695 ( 60.19%) 9192773053 ( 68.00%) 699.67
http(s) 4735541 ( 21.69%) 6266968694 ( 46.36%) 1323.39
http(c) 3214344 ( 14.73%) 339238598 ( 2.51%) 105.54
squid 465023 ( 2.13%) 78801903 ( 0.58%) 169.46
smtp 187178 ( 0.86%) 37967218 ( 0.28%) 202.84
ftp 27043 ( 0.12%) 2707381 ( 0.02%) 100.11
pop3 15014 ( 0.07%) 11578048 ( 0.09%) 771.15
imap 1258 ( 0.01%) 427102 ( 0.00%) 339.51
telnet 11574 ( 0.05%) 854779 ( 0.01%) 73.85
ssh 109044 ( 0.50%) 19404901 ( 0.14%) 177.95
dns 65707 ( 0.30%) 7953295 ( 0.06%) 121.04
bgp 132 ( 0.00%) 38658 ( 0.00%) 292.86
napster 82 ( 0.00%) 5088 ( 0.00%) 62.05
realaud 4 ( 0.00%) 248 ( 0.00%) 62.00
rtsp 6790 ( 0.03%) 9747855 ( 0.07%) 1435.62
icecast 410 ( 0.00%) 41277 ( 0.00%) 100.68
hotline 5 ( 0.00%) 351 ( 0.00%) 70.20
other 4299543 ( 19.70%) 2417037477 ( 17.88%) 562.16
udp 7166752 ( 32.83%) 3662702820 ( 27.09%) 511.07
dns 943827 ( 4.32%) 139902325 ( 1.03%) 148.23
realaud 32 ( 0.00%) 4211 ( 0.00%) 131.59
halflif 155 ( 0.00%) 19010 ( 0.00%) 122.65
starcra 120 ( 0.00%) 18747 ( 0.00%) 156.22
everque 276 ( 0.00%) 53841 ( 0.00%) 195.08
unreal 72 ( 0.00%) 11389 ( 0.00%) 158.18
quake 29 ( 0.00%) 3091 ( 0.00%) 106.59
cuseeme 6 ( 0.00%) 798 ( 0.00%) 133.00
other 6213374 ( 28.46%) 3522102561 ( 26.05%) 566.86
icmp 510885 ( 2.34%) 37320521 ( 0.28%) 73.05
ipip 294 ( 0.00%) 37072 ( 0.00%) 126.10
ipsec 64 ( 0.00%) 10432 ( 0.00%) 163.00
ip6 958794 ( 4.39%) 615062989 ( 4.55%) 641.50
other 24039 ( 0.11%) 6999401 ( 0.05%) 291.17
frag 22794 ( 0.10%) 16109875 ( 0.12%) 706.76
ip6 28748 ( 0.13%) 4388744 ( 0.03%) 152.66
tcp6 8951 ( 0.04%) 1115062 ( 0.01%) 124.57
http(s) 211 ( 0.00%) 76214 ( 0.00%) 361.20
http(c) 3547 ( 0.02%) 317378 ( 0.00%) 89.48
smtp 114 ( 0.00%) 41474 ( 0.00%) 363.81
ftp 22 ( 0.00%) 1821 ( 0.00%) 82.77
ssh 42 ( 0.00%) 4316 ( 0.00%) 102.76
bgp 101 ( 0.00%) 12519 ( 0.00%) 123.95
other 4914 ( 0.02%) 661340 ( 0.00%) 134.58
udp6 16075 ( 0.07%) 2871293 ( 0.02%) 178.62
dns 16056 ( 0.07%) 2867551 ( 0.02%) 178.60
other 19 ( 0.00%) 3742 ( 0.00%) 196.95
icmp6 3686 ( 0.02%) 392955 ( 0.00%) 106.61
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5354 ( 0.00%) 892.33
tcpdump file: 201001311400.dump.gz (529.78 MB)