Traffic Trace Info
DumpFile: 201002041400.dump
FileSize: 1509.40MB
Id: 201002041400
StartTime: Thu Feb 4 14:00:01 2010
EndTime: Thu Feb 4 14:15:00 2010
TotalTime: 899.63 seconds
TotalCapSize: 1180.52MB CapLen: 96 bytes
# of packets: 21553091 (13253.20MB)
AvgRate: 123.57Mbps stddev:13.99M
IP flow (unique src/dst pair) Information
# of flows: 1035405 (avg. 20.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.2% 3.1% 3.0% 1.7% 1.6% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 608751
Top 10 bandwidth usage (bytes/total in %):
6.3% 5.9% 5.3% 5.1% 4.6% 4.3% 4.0% 3.5% 3.3% 3.3%
# of IPv6 addresses: 1038
Top 10 bandwidth usage (bytes/total in %):
71.7% 70.1% 7.2% 3.9% 3.0% 1.6% 1.5% 1.4% 1.2% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002041400.pktlen.png)
detailed numbers
[ 32- 63]: 5268665
[ 64- 127]: 5365443
[ 128- 255]: 1014396
[ 256- 511]: 690655
[ 512- 1023]: 847975
[ 1024- 2047]: 8365957
Protocol Breakdown
![[protocol breakdown chart]](201002041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21553091 (100.00%) 13896990717 (100.00%) 644.78
ip 21492590 ( 99.72%) 13867502173 ( 99.79%) 645.22
tcp 17555585 ( 81.45%) 12627165607 ( 90.86%) 719.27
http(s) 6110466 ( 28.35%) 7837835126 ( 56.40%) 1282.69
http(c) 5016845 ( 23.28%) 788618302 ( 5.67%) 157.19
squid 77967 ( 0.36%) 12533646 ( 0.09%) 160.76
smtp 361993 ( 1.68%) 112632160 ( 0.81%) 311.14
ftp 42794 ( 0.20%) 8873296 ( 0.06%) 207.35
pop3 31089 ( 0.14%) 22369350 ( 0.16%) 719.53
imap 3322 ( 0.02%) 1561006 ( 0.01%) 469.90
telnet 12378 ( 0.06%) 915293 ( 0.01%) 73.95
ssh 46870 ( 0.22%) 11238594 ( 0.08%) 239.78
dns 67020 ( 0.31%) 8075374 ( 0.06%) 120.49
bgp 151 ( 0.00%) 61127 ( 0.00%) 404.81
napster 21 ( 0.00%) 6700 ( 0.00%) 319.05
realaud 33 ( 0.00%) 3888 ( 0.00%) 117.82
rtsp 182329 ( 0.85%) 51733846 ( 0.37%) 283.74
icecast 21854 ( 0.10%) 1446863 ( 0.01%) 66.21
hotline 22 ( 0.00%) 4088 ( 0.00%) 185.82
other 5580431 ( 25.89%) 3769256948 ( 27.12%) 675.44
udp 3242472 ( 15.04%) 1127643712 ( 8.11%) 347.77
dns 1234729 ( 5.73%) 178194425 ( 1.28%) 144.32
realaud 3581 ( 0.02%) 216368 ( 0.00%) 60.42
halflif 1155 ( 0.01%) 91633 ( 0.00%) 79.34
starcra 169 ( 0.00%) 28731 ( 0.00%) 170.01
everque 856 ( 0.00%) 630317 ( 0.00%) 736.35
unreal 75 ( 0.00%) 12401 ( 0.00%) 165.35
quake 28 ( 0.00%) 2828 ( 0.00%) 101.00
cuseeme 10 ( 0.00%) 2102 ( 0.00%) 210.20
other 2001784 ( 9.29%) 948394139 ( 6.82%) 473.77
icmp 600072 ( 2.78%) 89344653 ( 0.64%) 148.89
ipip 330 ( 0.00%) 41466 ( 0.00%) 125.65
ipsec 526 ( 0.00%) 133284 ( 0.00%) 253.39
ip6 92431 ( 0.43%) 22991155 ( 0.17%) 248.74
other 1174 ( 0.01%) 182296 ( 0.00%) 155.28
frag 1919 ( 0.01%) 1742414 ( 0.01%) 907.98
ip6 60501 ( 0.28%) 29488544 ( 0.21%) 487.41
tcp6 29698 ( 0.14%) 23887687 ( 0.17%) 804.35
http(s) 1389 ( 0.01%) 1637134 ( 0.01%) 1178.64
http(c) 4686 ( 0.02%) 441233 ( 0.00%) 94.16
smtp 204 ( 0.00%) 87108 ( 0.00%) 427.00
ftp 2353 ( 0.01%) 237247 ( 0.00%) 100.83
ssh 12 ( 0.00%) 1720 ( 0.00%) 143.33
dns 21 ( 0.00%) 6129 ( 0.00%) 291.86
bgp 115 ( 0.00%) 18963 ( 0.00%) 164.90
other 20918 ( 0.10%) 21458153 ( 0.15%) 1025.82
udp6 25858 ( 0.12%) 5043331 ( 0.04%) 195.04
dns 25845 ( 0.12%) 5041944 ( 0.04%) 195.08
other 13 ( 0.00%) 1387 ( 0.00%) 106.69
icmp6 4899 ( 0.02%) 538006 ( 0.00%) 109.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 15440 ( 0.00%) 965.00
tcpdump file: 201002041400.dump.gz (535.13 MB)