Traffic Trace Info
DumpFile: 201002011400.dump
FileSize: 2233.82MB
Id: 201002011400
StartTime: Mon Feb 1 14:00:00 2010
EndTime: Mon Feb 1 14:15:01 2010
TotalTime: 900.54 seconds
TotalCapSize: 1736.33MB CapLen: 96 bytes
# of packets: 32602705 (20279.34MB)
AvgRate: 188.89Mbps stddev:19.85M
IP flow (unique src/dst pair) Information
# of flows: 1018728 (avg. 32.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.6% 2.5% 2.2% 1.7% 1.7% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 588929
Top 10 bandwidth usage (bytes/total in %):
21.7% 6.6% 6.3% 5.9% 4.6% 3.9% 3.9% 3.8% 2.7% 2.5%
# of IPv6 addresses: 960
Top 10 bandwidth usage (bytes/total in %):
46.4% 46.4% 7.8% 5.8% 5.8% 4.5% 4.5% 3.5% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002011400.pktlen.png)
detailed numbers
[ 32- 63]: 6439212
[ 64- 127]: 8938782
[ 128- 255]: 1354082
[ 256- 511]: 1781193
[ 512- 1023]: 1067338
[ 1024- 2047]: 13022098
Protocol Breakdown
![[protocol breakdown chart]](201002011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32602705 (100.00%) 21264429157 (100.00%) 652.23
ip 32560035 ( 99.87%) 21249233520 ( 99.93%) 652.62
tcp 21364323 ( 65.53%) 14942143976 ( 70.27%) 699.40
http(s) 7109753 ( 21.81%) 8873873781 ( 41.73%) 1248.13
http(c) 6550697 ( 20.09%) 1764700232 ( 8.30%) 269.39
squid 585110 ( 1.79%) 113219217 ( 0.53%) 193.50
smtp 264233 ( 0.81%) 126782090 ( 0.60%) 479.81
ftp 36685 ( 0.11%) 4093742 ( 0.02%) 111.59
pop3 23312 ( 0.07%) 14053007 ( 0.07%) 602.82
imap 3802 ( 0.01%) 1818757 ( 0.01%) 478.37
telnet 2574 ( 0.01%) 190669 ( 0.00%) 74.07
ssh 392146 ( 1.20%) 70512252 ( 0.33%) 179.81
dns 65693 ( 0.20%) 7994299 ( 0.04%) 121.69
bgp 151 ( 0.00%) 43286 ( 0.00%) 286.66
napster 31 ( 0.00%) 2753 ( 0.00%) 88.81
realaud 13 ( 0.00%) 1090 ( 0.00%) 83.85
rtsp 88448 ( 0.27%) 5879932 ( 0.03%) 66.48
icecast 5888 ( 0.02%) 367822 ( 0.00%) 62.47
hotline 12 ( 0.00%) 744 ( 0.00%) 62.00
other 6235622 ( 19.13%) 3958601086 ( 18.62%) 634.84
udp 9257451 ( 28.39%) 5367504525 ( 25.24%) 579.80
dns 1198744 ( 3.68%) 177666453 ( 0.84%) 148.21
realaud 1824 ( 0.01%) 113618 ( 0.00%) 62.29
halflif 5502 ( 0.02%) 408415 ( 0.00%) 74.23
starcra 202 ( 0.00%) 31908 ( 0.00%) 157.96
everque 221 ( 0.00%) 37782 ( 0.00%) 170.96
unreal 142 ( 0.00%) 26261 ( 0.00%) 184.94
quake 14 ( 0.00%) 1567 ( 0.00%) 111.93
cuseeme 17 ( 0.00%) 2800 ( 0.00%) 164.71
other 8050273 ( 24.69%) 5189160681 ( 24.40%) 644.59
icmp 536089 ( 1.64%) 74510199 ( 0.35%) 138.99
ipip 324 ( 0.00%) 38828 ( 0.00%) 119.84
ipsec 813 ( 0.00%) 252062 ( 0.00%) 310.04
ip6 1244526 ( 3.82%) 845817009 ( 3.98%) 679.63
other 156509 ( 0.48%) 18966921 ( 0.09%) 121.19
frag 3891 ( 0.01%) 3151768 ( 0.01%) 810.01
ip6 42670 ( 0.13%) 15195637 ( 0.07%) 356.12
tcp6 16927 ( 0.05%) 10525859 ( 0.05%) 621.84
http(s) 6498 ( 0.02%) 9068896 ( 0.04%) 1395.64
http(c) 4304 ( 0.01%) 383790 ( 0.00%) 89.17
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 174 ( 0.00%) 69458 ( 0.00%) 399.18
ssh 894 ( 0.00%) 412048 ( 0.00%) 460.90
dns 14 ( 0.00%) 5545 ( 0.00%) 396.07
bgp 112 ( 0.00%) 14293 ( 0.00%) 127.62
other 4922 ( 0.02%) 571067 ( 0.00%) 116.02
udp6 20758 ( 0.06%) 4098164 ( 0.02%) 197.43
dns 20733 ( 0.06%) 4092829 ( 0.02%) 197.41
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
other 24 ( 0.00%) 5232 ( 0.00%) 218.00
icmp6 4931 ( 0.02%) 545824 ( 0.00%) 110.69
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24 ( 0.00%) 21710 ( 0.00%) 904.58
tcpdump file: 201002011400.dump.gz (790.98 MB)