Traffic Trace Info
DumpFile: 201002091400.dump
FileSize: 2267.17MB
Id: 201002091400
StartTime: Tue Feb 9 14:00:01 2010
EndTime: Tue Feb 9 14:15:01 2010
TotalTime: 899.94 seconds
TotalCapSize: 1762.89MB CapLen: 96 bytes
# of packets: 33048209 (19041.33MB)
AvgRate: 177.49Mbps stddev:26.73M
IP flow (unique src/dst pair) Information
# of flows: 959613 (avg. 34.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.7% 1.6% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 557839
Top 10 bandwidth usage (bytes/total in %):
27.8% 11.3% 6.4% 4.1% 2.6% 2.2% 1.8% 1.8% 1.7% 1.6%
# of IPv6 addresses: 1106
Top 10 bandwidth usage (bytes/total in %):
26.7% 15.1% 14.9% 5.1% 4.3% 4.0% 3.5% 3.4% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002091400.pktlen.png)
detailed numbers
[ 32- 63]: 5873984
[ 64- 127]: 10308064
[ 128- 255]: 1749938
[ 256- 511]: 2178633
[ 512- 1023]: 876203
[ 1024- 2047]: 12061387
Protocol Breakdown
![[protocol breakdown chart]](201002091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33048209 (100.00%) 19966286461 (100.00%) 604.16
ip 32995699 ( 99.84%) 19958352539 ( 99.96%) 604.88
tcp 19022789 ( 57.56%) 12357025057 ( 61.89%) 649.59
http(s) 6567391 ( 19.87%) 8569437717 ( 42.92%) 1304.85
http(c) 5348851 ( 16.18%) 643382455 ( 3.22%) 120.28
squid 783460 ( 2.37%) 133864810 ( 0.67%) 170.86
smtp 329578 ( 1.00%) 77377194 ( 0.39%) 234.78
ftp 43128 ( 0.13%) 8782983 ( 0.04%) 203.65
pop3 23829 ( 0.07%) 13849383 ( 0.07%) 581.20
imap 2335 ( 0.01%) 499198 ( 0.00%) 213.79
telnet 8869 ( 0.03%) 649618 ( 0.00%) 73.25
ssh 24686 ( 0.07%) 4906716 ( 0.02%) 198.77
dns 65779 ( 0.20%) 8118468 ( 0.04%) 123.42
bgp 122 ( 0.00%) 37152 ( 0.00%) 304.52
napster 34 ( 0.00%) 3501 ( 0.00%) 102.97
realaud 12 ( 0.00%) 2278 ( 0.00%) 189.83
rtsp 93858 ( 0.28%) 7136286 ( 0.04%) 76.03
icecast 44380 ( 0.13%) 24206190 ( 0.12%) 545.43
hotline 12 ( 0.00%) 1527 ( 0.00%) 127.25
other 5686464 ( 17.21%) 2864769521 ( 14.35%) 503.79
udp 11384067 ( 34.45%) 6245012910 ( 31.28%) 548.57
dns 1497635 ( 4.53%) 196857317 ( 0.99%) 131.45
rip 2 ( 0.00%) 455 ( 0.00%) 227.50
realaud 1269 ( 0.00%) 78920 ( 0.00%) 62.19
halflif 111 ( 0.00%) 13878 ( 0.00%) 125.03
starcra 140 ( 0.00%) 24568 ( 0.00%) 175.49
everque 227 ( 0.00%) 46053 ( 0.00%) 202.88
unreal 211 ( 0.00%) 37450 ( 0.00%) 177.49
quake 76 ( 0.00%) 9696 ( 0.00%) 127.58
cuseeme 12 ( 0.00%) 1317 ( 0.00%) 109.75
other 9876906 ( 29.89%) 6046531629 ( 30.28%) 612.19
icmp 536257 ( 1.62%) 60844175 ( 0.30%) 113.46
ipip 319 ( 0.00%) 40884 ( 0.00%) 128.16
ipsec 188 ( 0.00%) 35248 ( 0.00%) 187.49
ip6 2012527 ( 6.09%) 1286348373 ( 6.44%) 639.17
other 39552 ( 0.12%) 9045892 ( 0.05%) 228.71
frag 35682 ( 0.11%) 22237113 ( 0.11%) 623.20
ip6 52510 ( 0.16%) 7933922 ( 0.04%) 151.09
tcp6 21542 ( 0.07%) 2197569 ( 0.01%) 102.01
http(s) 362 ( 0.00%) 190565 ( 0.00%) 526.42
http(c) 3845 ( 0.01%) 368700 ( 0.00%) 95.89
smtp 54 ( 0.00%) 9410 ( 0.00%) 174.26
ssh 175 ( 0.00%) 28586 ( 0.00%) 163.35
dns 62 ( 0.00%) 21395 ( 0.00%) 345.08
bgp 112 ( 0.00%) 14539 ( 0.00%) 129.81
other 16932 ( 0.05%) 1564374 ( 0.01%) 92.39
udp6 26037 ( 0.08%) 5156989 ( 0.03%) 198.06
dns 25901 ( 0.08%) 5129071 ( 0.03%) 198.03
other 136 ( 0.00%) 27918 ( 0.00%) 205.28
icmp6 4863 ( 0.01%) 541089 ( 0.00%) 111.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 38 ( 0.00%) 34195 ( 0.00%) 899.87
tcpdump file: 201002091400.dump.gz (826.99 MB)