Traffic Trace Info
DumpFile: 201002081400.dump
FileSize: 1906.16MB
Id: 201002081400
StartTime: Mon Feb 8 14:00:01 2010
EndTime: Mon Feb 8 14:15:00 2010
TotalTime: 899.34 seconds
TotalCapSize: 1477.11MB CapLen: 96 bytes
# of packets: 28117341 (15641.93MB)
AvgRate: 145.87Mbps stddev:19.02M
IP flow (unique src/dst pair) Information
# of flows: 1032426 (avg. 27.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.3% 1.9% 1.5% 1.5% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 615714
Top 10 bandwidth usage (bytes/total in %):
25.8% 5.1% 4.3% 4.3% 3.6% 3.4% 2.6% 2.3% 2.3% 1.9%
# of IPv6 addresses: 1072
Top 10 bandwidth usage (bytes/total in %):
76.0% 74.3% 7.3% 1.8% 1.6% 1.2% 1.0% 0.9% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002081400.pktlen.png)
detailed numbers
[ 32- 63]: 6351134
[ 64- 127]: 8083267
[ 128- 255]: 1379602
[ 256- 511]: 1440299
[ 512- 1023]: 1068327
[ 1024- 2047]: 9794712
Protocol Breakdown
![[protocol breakdown chart]](201002081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28117341 (100.00%) 16401756018 (100.00%) 583.33
ip 28056933 ( 99.79%) 16372726387 ( 99.82%) 583.55
tcp 17073302 ( 60.72%) 10567924240 ( 64.43%) 618.97
http(s) 5578444 ( 19.84%) 6689647099 ( 40.79%) 1199.20
http(c) 4825663 ( 17.16%) 815572715 ( 4.97%) 169.01
squid 760000 ( 2.70%) 118573635 ( 0.72%) 156.02
smtp 335434 ( 1.19%) 140792163 ( 0.86%) 419.73
nntp 3 ( 0.00%) 234 ( 0.00%) 78.00
ftp 26458 ( 0.09%) 8574037 ( 0.05%) 324.06
pop3 52151 ( 0.19%) 39758236 ( 0.24%) 762.37
imap 3591 ( 0.01%) 921521 ( 0.01%) 256.62
telnet 4585 ( 0.02%) 340177 ( 0.00%) 74.19
ssh 50002 ( 0.18%) 6807911 ( 0.04%) 136.15
dns 69087 ( 0.25%) 8204366 ( 0.05%) 118.75
bgp 148 ( 0.00%) 52483 ( 0.00%) 354.61
napster 23 ( 0.00%) 1496 ( 0.00%) 65.04
realaud 13 ( 0.00%) 2426 ( 0.00%) 186.62
rtsp 257593 ( 0.92%) 16816391 ( 0.10%) 65.28
icecast 21948 ( 0.08%) 15878994 ( 0.10%) 723.48
other 5088129 ( 18.10%) 2705978556 ( 16.50%) 531.82
udp 8674982 ( 30.85%) 4851907907 ( 29.58%) 559.30
dns 942753 ( 3.35%) 140955364 ( 0.86%) 149.51
realaud 27 ( 0.00%) 3736 ( 0.00%) 138.37
halflif 64 ( 0.00%) 7249 ( 0.00%) 113.27
starcra 126 ( 0.00%) 22238 ( 0.00%) 176.49
everque 13512 ( 0.05%) 12124515 ( 0.07%) 897.31
unreal 87 ( 0.00%) 14474 ( 0.00%) 166.37
quake 40 ( 0.00%) 5137 ( 0.00%) 128.43
cuseeme 8 ( 0.00%) 773 ( 0.00%) 96.62
other 7718094 ( 27.45%) 4698584326 ( 28.65%) 608.78
icmp 821221 ( 2.92%) 94121193 ( 0.57%) 114.61
ipip 343 ( 0.00%) 43898 ( 0.00%) 127.98
ipsec 418 ( 0.00%) 150228 ( 0.00%) 359.40
ip6 1339562 ( 4.76%) 843121639 ( 5.14%) 629.40
other 147105 ( 0.52%) 15457282 ( 0.09%) 105.08
frag 3341 ( 0.01%) 3561502 ( 0.02%) 1066.00
ip6 60408 ( 0.21%) 29029631 ( 0.18%) 480.56
tcp6 30243 ( 0.11%) 23377725 ( 0.14%) 773.00
http(s) 382 ( 0.00%) 137726 ( 0.00%) 360.54
http(c) 5223 ( 0.02%) 530055 ( 0.00%) 101.48
smtp 108 ( 0.00%) 66183 ( 0.00%) 612.81
ftp 2597 ( 0.01%) 277072 ( 0.00%) 106.69
ssh 12 ( 0.00%) 1720 ( 0.00%) 143.33
dns 43 ( 0.00%) 16240 ( 0.00%) 377.67
bgp 104 ( 0.00%) 13122 ( 0.00%) 126.17
other 21774 ( 0.08%) 22335607 ( 0.14%) 1025.79
udp6 24922 ( 0.09%) 5049677 ( 0.03%) 202.62
dns 24765 ( 0.09%) 5017755 ( 0.03%) 202.61
other 157 ( 0.00%) 31922 ( 0.00%) 203.32
icmp6 5173 ( 0.02%) 563972 ( 0.00%) 109.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 40 ( 0.00%) 34177 ( 0.00%) 854.42
tcpdump file: 201002081400.dump.gz (686.94 MB)