Traffic Trace Info
DumpFile: 201002021400.dump
FileSize: 1526.20MB
Id: 201002021400
StartTime: Tue Feb 2 14:00:01 2010
EndTime: Tue Feb 2 14:15:01 2010
TotalTime: 899.96 seconds
TotalCapSize: 1191.89MB CapLen: 96 bytes
# of packets: 21908607 (12446.17MB)
AvgRate: 116.01Mbps stddev:15.31M
IP flow (unique src/dst pair) Information
# of flows: 924139 (avg. 23.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 4.7% 2.3% 2.0% 1.4% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 546923
Top 10 bandwidth usage (bytes/total in %):
16.6% 8.2% 6.9% 5.9% 4.9% 4.8% 3.4% 3.1% 2.3% 2.3%
# of IPv6 addresses: 954
Top 10 bandwidth usage (bytes/total in %):
48.2% 48.2% 10.5% 6.3% 3.3% 3.2% 3.2% 3.1% 3.1% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002021400.pktlen.png)
detailed numbers
[ 32- 63]: 5456316
[ 64- 127]: 6232643
[ 128- 255]: 1123365
[ 256- 511]: 609400
[ 512- 1023]: 663986
[ 1024- 2047]: 7822897
Protocol Breakdown
![[protocol breakdown chart]](201002021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21908607 (100.00%) 13050755820 (100.00%) 595.69
ip 21868906 ( 99.82%) 13039553944 ( 99.91%) 596.26
tcp 17492335 ( 79.84%) 11430494956 ( 87.58%) 653.46
http(s) 6146802 ( 28.06%) 7888916541 ( 60.45%) 1283.42
http(c) 5104453 ( 23.30%) 683419657 ( 5.24%) 133.89
squid 470067 ( 2.15%) 76822268 ( 0.59%) 163.43
smtp 303464 ( 1.39%) 138922647 ( 1.06%) 457.79
nntp 3 ( 0.00%) 234 ( 0.00%) 78.00
ftp 40757 ( 0.19%) 11929884 ( 0.09%) 292.71
pop3 53365 ( 0.24%) 15583875 ( 0.12%) 292.02
imap 3764 ( 0.02%) 2086115 ( 0.02%) 554.23
telnet 8993 ( 0.04%) 667811 ( 0.01%) 74.26
ssh 36705 ( 0.17%) 17042671 ( 0.13%) 464.31
dns 67971 ( 0.31%) 8133391 ( 0.06%) 119.66
bgp 156 ( 0.00%) 61640 ( 0.00%) 395.13
napster 15 ( 0.00%) 2158 ( 0.00%) 143.87
realaud 14 ( 0.00%) 1592 ( 0.00%) 113.71
rtsp 328574 ( 1.50%) 152845900 ( 1.17%) 465.18
icecast 6213 ( 0.03%) 412550 ( 0.00%) 66.40
hotline 14 ( 0.00%) 2550 ( 0.00%) 182.14
other 4921000 ( 22.46%) 2433643150 ( 18.65%) 494.54
udp 3671488 ( 16.76%) 1523606580 ( 11.67%) 414.98
dns 1141068 ( 5.21%) 164682907 ( 1.26%) 144.32
realaud 31 ( 0.00%) 4310 ( 0.00%) 139.03
halflif 5486 ( 0.03%) 401057 ( 0.00%) 73.11
starcra 179 ( 0.00%) 30322 ( 0.00%) 169.40
everque 208 ( 0.00%) 46836 ( 0.00%) 225.17
unreal 90 ( 0.00%) 15787 ( 0.00%) 175.41
quake 21 ( 0.00%) 2182 ( 0.00%) 103.90
cuseeme 5 ( 0.00%) 690 ( 0.00%) 138.00
other 2523847 ( 11.52%) 1358317056 ( 10.41%) 538.19
icmp 515850 ( 2.35%) 56547907 ( 0.43%) 109.62
ipip 361 ( 0.00%) 44136 ( 0.00%) 122.26
ipsec 392 ( 0.00%) 81504 ( 0.00%) 207.92
ip6 69117 ( 0.32%) 9491562 ( 0.07%) 137.33
other 119363 ( 0.54%) 19287299 ( 0.15%) 161.59
frag 2855 ( 0.01%) 2246047 ( 0.02%) 786.71
ip6 39701 ( 0.18%) 11201876 ( 0.09%) 282.16
tcp6 14460 ( 0.07%) 6709946 ( 0.05%) 464.03
http(s) 4334 ( 0.02%) 5582729 ( 0.04%) 1288.12
http(c) 3617 ( 0.02%) 326664 ( 0.00%) 90.31
smtp 116 ( 0.00%) 23577 ( 0.00%) 203.25
ftp 22 ( 0.00%) 1821 ( 0.00%) 82.77
ssh 171 ( 0.00%) 33362 ( 0.00%) 195.10
dns 7 ( 0.00%) 772 ( 0.00%) 110.29
bgp 114 ( 0.00%) 14931 ( 0.00%) 130.97
other 6079 ( 0.03%) 726090 ( 0.01%) 119.44
udp6 20628 ( 0.09%) 3965008 ( 0.03%) 192.21
dns 20615 ( 0.09%) 3963150 ( 0.03%) 192.25
other 13 ( 0.00%) 1858 ( 0.00%) 142.92
icmp6 4554 ( 0.02%) 494821 ( 0.00%) 108.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 29 ( 0.00%) 28021 ( 0.00%) 966.24
tcpdump file: 201002021400.dump.gz (552.83 MB)