Traffic Trace Info
DumpFile: 201002051400.dump
FileSize: 1617.36MB
Id: 201002051400
StartTime: Fri Feb 5 14:00:00 2010
EndTime: Fri Feb 5 14:15:00 2010
TotalTime: 899.98 seconds
TotalCapSize: 1267.56MB CapLen: 96 bytes
# of packets: 22924026 (14951.93MB)
AvgRate: 139.37Mbps stddev:22.24M
IP flow (unique src/dst pair) Information
# of flows: 1077801 (avg. 21.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.3% 3.3% 3.3% 1.7% 1.5% 1.5% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 608090
Top 10 bandwidth usage (bytes/total in %):
9.8% 5.0% 4.6% 4.4% 3.8% 3.7% 3.7% 3.5% 3.4% 3.4%
# of IPv6 addresses: 1063
Top 10 bandwidth usage (bytes/total in %):
26.3% 8.2% 6.5% 5.7% 5.5% 5.4% 5.1% 4.5% 4.4% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002051400.pktlen.png)
detailed numbers
[ 32- 63]: 5816236
[ 64- 127]: 5337034
[ 128- 255]: 945685
[ 256- 511]: 622910
[ 512- 1023]: 646724
[ 1024- 2047]: 9555437
Protocol Breakdown
![[protocol breakdown chart]](201002051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22924026 (100.00%) 15678238780 (100.00%) 683.92
ip 22876852 ( 99.79%) 15670161074 ( 99.95%) 684.98
tcp 19869281 ( 86.67%) 14917506502 ( 95.15%) 750.78
http(s) 7120334 ( 31.06%) 8793087174 ( 56.08%) 1234.93
http(c) 5919925 ( 25.82%) 1563667199 ( 9.97%) 264.14
squid 405437 ( 1.77%) 59852659 ( 0.38%) 147.63
smtp 302248 ( 1.32%) 139063922 ( 0.89%) 460.10
ftp 22635 ( 0.10%) 6899520 ( 0.04%) 304.82
pop3 36420 ( 0.16%) 25831839 ( 0.16%) 709.28
imap 4189 ( 0.02%) 2054922 ( 0.01%) 490.55
telnet 11748 ( 0.05%) 870887 ( 0.01%) 74.13
ssh 14468 ( 0.06%) 3169778 ( 0.02%) 219.09
dns 64317 ( 0.28%) 7965353 ( 0.05%) 123.85
bgp 178 ( 0.00%) 80280 ( 0.00%) 451.01
napster 151 ( 0.00%) 14011 ( 0.00%) 92.79
realaud 91 ( 0.00%) 18633 ( 0.00%) 204.76
rtsp 122122 ( 0.53%) 10987823 ( 0.07%) 89.97
icecast 7350 ( 0.03%) 524314 ( 0.00%) 71.34
other 5837653 ( 25.47%) 4303417288 ( 27.45%) 737.18
udp 2272209 ( 9.91%) 665440971 ( 4.24%) 292.86
dns 1048941 ( 4.58%) 154759387 ( 0.99%) 147.54
realaud 2745 ( 0.01%) 165635 ( 0.00%) 60.34
halflif 1441 ( 0.01%) 109964 ( 0.00%) 76.31
starcra 166 ( 0.00%) 27580 ( 0.00%) 166.14
everque 173 ( 0.00%) 36215 ( 0.00%) 209.34
unreal 58 ( 0.00%) 10004 ( 0.00%) 172.48
quake 21 ( 0.00%) 2550 ( 0.00%) 121.43
cuseeme 6 ( 0.00%) 873 ( 0.00%) 145.50
other 1218577 ( 5.32%) 510269659 ( 3.25%) 418.74
icmp 688000 ( 3.00%) 77976833 ( 0.50%) 113.34
ipip 325 ( 0.00%) 39282 ( 0.00%) 120.87
ipsec 247 ( 0.00%) 71666 ( 0.00%) 290.15
ip6 36969 ( 0.16%) 5527091 ( 0.04%) 149.51
other 9821 ( 0.04%) 3598729 ( 0.02%) 366.43
frag 980 ( 0.00%) 915451 ( 0.01%) 934.13
ip6 47174 ( 0.21%) 8077706 ( 0.05%) 171.23
tcp6 15334 ( 0.07%) 2593983 ( 0.02%) 169.17
http(s) 1363 ( 0.01%) 1246483 ( 0.01%) 914.51
http(c) 4548 ( 0.02%) 402793 ( 0.00%) 88.56
smtp 111 ( 0.00%) 26009 ( 0.00%) 234.32
ftp 2539 ( 0.01%) 262673 ( 0.00%) 103.46
ssh 12 ( 0.00%) 1736 ( 0.00%) 144.67
dns 15 ( 0.00%) 5592 ( 0.00%) 372.80
bgp 105 ( 0.00%) 12945 ( 0.00%) 123.29
other 6641 ( 0.03%) 635752 ( 0.00%) 95.73
udp6 25171 ( 0.11%) 4757973 ( 0.03%) 189.03
dns 25033 ( 0.11%) 4730454 ( 0.03%) 188.97
other 138 ( 0.00%) 27519 ( 0.00%) 199.41
icmp6 6608 ( 0.03%) 694321 ( 0.00%) 105.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 30 ( 0.00%) 27213 ( 0.00%) 907.10
tcpdump file: 201002051400.dump.gz (567.40 MB)