Traffic Trace Info
DumpFile: 201002061400.dump
FileSize: 1464.93MB
Id: 201002061400
StartTime: Sat Feb 6 14:00:00 2010
EndTime: Sat Feb 6 14:15:00 2010
TotalTime: 899.71 seconds
TotalCapSize: 1152.62MB CapLen: 96 bytes
# of packets: 20466908 (12721.45MB)
AvgRate: 118.60Mbps stddev:19.20M
IP flow (unique src/dst pair) Information
# of flows: 988763 (avg. 20.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.8% 3.2% 2.3% 2.2% 2.2% 2.1% 1.7% 1.7% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 566775
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.2% 4.5% 4.4% 3.4% 3.3% 3.3% 3.2% 2.7% 2.6%
# of IPv6 addresses: 984
Top 10 bandwidth usage (bytes/total in %):
64.1% 64.0% 12.1% 5.2% 2.7% 2.6% 2.4% 2.0% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002061400.pktlen.png)
detailed numbers
[ 32- 63]: 4863579
[ 64- 127]: 5781394
[ 128- 255]: 790072
[ 256- 511]: 384164
[ 512- 1023]: 444817
[ 1024- 2047]: 8202882
Protocol Breakdown
![[protocol breakdown chart]](201002061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20466908 (100.00%) 13339402931 (100.00%) 651.75
ip 20292805 ( 99.15%) 13321894195 ( 99.87%) 656.48
tcp 17627572 ( 86.13%) 12619239833 ( 94.60%) 715.88
http(s) 6902490 ( 33.73%) 8713260438 ( 65.32%) 1262.34
http(c) 4566857 ( 22.31%) 531890580 ( 3.99%) 116.47
squid 172249 ( 0.84%) 69235963 ( 0.52%) 401.95
smtp 238117 ( 1.16%) 62522624 ( 0.47%) 262.57
ftp 21846 ( 0.11%) 7980809 ( 0.06%) 365.32
pop3 20350 ( 0.10%) 14349478 ( 0.11%) 705.13
imap 13102 ( 0.06%) 16908931 ( 0.13%) 1290.56
telnet 5918 ( 0.03%) 439703 ( 0.00%) 74.30
ssh 924829 ( 4.52%) 178741336 ( 1.34%) 193.27
dns 63690 ( 0.31%) 7863946 ( 0.06%) 123.47
bgp 149 ( 0.00%) 47996 ( 0.00%) 322.12
napster 13 ( 0.00%) 1330 ( 0.00%) 102.31
rtsp 351169 ( 1.72%) 53770543 ( 0.40%) 153.12
icecast 26104 ( 0.13%) 16090100 ( 0.12%) 616.38
hotline 23 ( 0.00%) 9056 ( 0.00%) 393.74
other 4320589 ( 21.11%) 2946120774 ( 22.09%) 681.88
udp 2059841 ( 10.06%) 632214809 ( 4.74%) 306.92
dns 892742 ( 4.36%) 130667928 ( 0.98%) 146.37
realaud 5426 ( 0.03%) 327145 ( 0.00%) 60.29
halflif 68 ( 0.00%) 10481 ( 0.00%) 154.13
starcra 136 ( 0.00%) 21056 ( 0.00%) 154.82
everque 237 ( 0.00%) 47740 ( 0.00%) 201.43
unreal 211 ( 0.00%) 37867 ( 0.00%) 179.46
quake 20 ( 0.00%) 2991 ( 0.00%) 149.55
cuseeme 4 ( 0.00%) 464 ( 0.00%) 116.00
other 1160773 ( 5.67%) 500933349 ( 3.76%) 431.55
icmp 522700 ( 2.55%) 38532468 ( 0.29%) 73.72
ipip 324 ( 0.00%) 40116 ( 0.00%) 123.81
ipsec 81 ( 0.00%) 13190 ( 0.00%) 162.84
ip6 78418 ( 0.38%) 29914987 ( 0.22%) 381.48
other 3869 ( 0.02%) 1938792 ( 0.01%) 501.11
frag 3558 ( 0.02%) 3460331 ( 0.03%) 972.55
ip6 174103 ( 0.85%) 17508736 ( 0.13%) 100.57
tcp6 148301 ( 0.72%) 13156425 ( 0.10%) 88.71
http(s) 365 ( 0.00%) 136190 ( 0.00%) 373.12
http(c) 3591 ( 0.02%) 322950 ( 0.00%) 89.93
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 81 ( 0.00%) 29263 ( 0.00%) 361.27
ftp 5322 ( 0.03%) 530419 ( 0.00%) 99.67
ssh 346 ( 0.00%) 53480 ( 0.00%) 154.57
dns 5 ( 0.00%) 1774 ( 0.00%) 354.80
bgp 90 ( 0.00%) 10701 ( 0.00%) 118.90
other 138498 ( 0.68%) 12071394 ( 0.09%) 87.16
udp6 20955 ( 0.10%) 3821513 ( 0.03%) 182.37
dns 20838 ( 0.10%) 3798135 ( 0.03%) 182.27
other 117 ( 0.00%) 23378 ( 0.00%) 199.81
icmp6 4809 ( 0.02%) 520049 ( 0.00%) 108.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 6669 ( 0.00%) 833.62
tcpdump file: 201002061400.dump.gz (510.57 MB)