Traffic Trace Info
DumpFile: 201002101400.dump
FileSize: 2075.97MB
Id: 201002101400
StartTime: Wed Feb 10 14:00:01 2010
EndTime: Wed Feb 10 14:15:01 2010
TotalTime: 900.36 seconds
TotalCapSize: 1624.45MB CapLen: 96 bytes
# of packets: 29590760 (17612.18MB)
AvgRate: 164.07Mbps stddev:16.53M
IP flow (unique src/dst pair) Information
# of flows: 930583 (avg. 31.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 2.0% 2.0% 1.5% 1.4% 1.4% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 547078
Top 10 bandwidth usage (bytes/total in %):
23.2% 7.7% 6.7% 6.1% 5.1% 5.0% 4.4% 2.4% 2.1% 2.0%
# of IPv6 addresses: 1060
Top 10 bandwidth usage (bytes/total in %):
36.0% 35.9% 14.7% 13.4% 5.5% 5.0% 4.7% 4.7% 3.0% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002101400.pktlen.png)
detailed numbers
[ 32- 63]: 4990939
[ 64- 127]: 9689350
[ 128- 255]: 1424961
[ 256- 511]: 1481927
[ 512- 1023]: 686045
[ 1024- 2047]: 11317538
Protocol Breakdown
![[protocol breakdown chart]](201002101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29590760 (100.00%) 18467706509 (100.00%) 624.10
ip 29492748 ( 99.67%) 18455444771 ( 99.93%) 625.76
tcp 18116875 ( 61.22%) 12084409878 ( 65.44%) 667.03
http(s) 5501835 ( 18.59%) 6582024046 ( 35.64%) 1196.33
http(c) 4464991 ( 15.09%) 1020836627 ( 5.53%) 228.63
squid 755330 ( 2.55%) 139746724 ( 0.76%) 185.01
smtp 266031 ( 0.90%) 109320796 ( 0.59%) 410.93
ftp 44170 ( 0.15%) 7897435 ( 0.04%) 178.80
pop3 21564 ( 0.07%) 13704194 ( 0.07%) 635.51
imap 4943 ( 0.02%) 3195828 ( 0.02%) 646.54
telnet 4809 ( 0.02%) 355437 ( 0.00%) 73.91
ssh 11240 ( 0.04%) 2289098 ( 0.01%) 203.66
dns 75039 ( 0.25%) 8907223 ( 0.05%) 118.70
bgp 175 ( 0.00%) 67557 ( 0.00%) 386.04
napster 133 ( 0.00%) 15983 ( 0.00%) 120.17
realaud 4176 ( 0.01%) 277183 ( 0.00%) 66.38
rtsp 158936 ( 0.54%) 66523791 ( 0.36%) 418.56
icecast 35579 ( 0.12%) 31203400 ( 0.17%) 877.02
hotline 7 ( 0.00%) 687 ( 0.00%) 98.14
other 6767911 ( 22.87%) 4098043509 ( 22.19%) 605.51
udp 8921791 ( 30.15%) 4889580805 ( 26.48%) 548.05
dns 1085645 ( 3.67%) 159898786 ( 0.87%) 147.28
realaud 2993 ( 0.01%) 213837 ( 0.00%) 71.45
halflif 71 ( 0.00%) 9469 ( 0.00%) 133.37
starcra 128 ( 0.00%) 14457 ( 0.00%) 112.95
everque 208 ( 0.00%) 39652 ( 0.00%) 190.63
unreal 66 ( 0.00%) 11344 ( 0.00%) 171.88
quake 23 ( 0.00%) 2656 ( 0.00%) 115.48
cuseeme 3 ( 0.00%) 319 ( 0.00%) 106.33
other 7832601 ( 26.47%) 4729353520 ( 25.61%) 603.80
icmp 481410 ( 1.63%) 35854137 ( 0.19%) 74.48
ipip 316 ( 0.00%) 37888 ( 0.00%) 119.90
ipsec 407 ( 0.00%) 163226 ( 0.00%) 401.05
ip6 1947229 ( 6.58%) 1429548133 ( 7.74%) 734.14
other 24720 ( 0.08%) 15850704 ( 0.09%) 641.21
frag 3319 ( 0.01%) 2683694 ( 0.01%) 808.59
ip6 98012 ( 0.33%) 12261738 ( 0.07%) 125.10
tcp6 59136 ( 0.20%) 5983896 ( 0.03%) 101.19
http(s) 331 ( 0.00%) 169656 ( 0.00%) 512.56
http(c) 3552 ( 0.01%) 320330 ( 0.00%) 90.18
smtp 182 ( 0.00%) 57946 ( 0.00%) 318.38
ssh 2169 ( 0.01%) 699606 ( 0.00%) 322.55
dns 30 ( 0.00%) 12260 ( 0.00%) 408.67
bgp 105 ( 0.00%) 12934 ( 0.00%) 123.18
other 52767 ( 0.18%) 4711164 ( 0.03%) 89.28
udp6 23146 ( 0.08%) 4445036 ( 0.02%) 192.04
dns 22990 ( 0.08%) 4412016 ( 0.02%) 191.91
other 156 ( 0.00%) 33020 ( 0.00%) 211.67
icmp6 15667 ( 0.05%) 1798641 ( 0.01%) 114.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 33 ( 0.00%) 30085 ( 0.00%) 911.67
tcpdump file: 201002101400.dump.gz (759.48 MB)