Traffic Trace Info
DumpFile: 201002111400.dump
FileSize: 1801.15MB
Id: 201002111400
StartTime: Thu Feb 11 14:00:00 2010
EndTime: Thu Feb 11 14:15:00 2010
TotalTime: 900.27 seconds
TotalCapSize: 1387.03MB CapLen: 96 bytes
# of packets: 27139262 (15384.37MB)
AvgRate: 143.36Mbps stddev:16.05M
IP flow (unique src/dst pair) Information
# of flows: 889574 (avg. 30.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.0% 1.5% 1.4% 1.3% 1.1% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 536199
Top 10 bandwidth usage (bytes/total in %):
27.3% 6.6% 4.3% 4.3% 3.7% 3.2% 2.7% 2.3% 2.1% 2.0%
# of IPv6 addresses: 891
Top 10 bandwidth usage (bytes/total in %):
28.0% 25.9% 25.7% 5.6% 4.4% 4.0% 3.4% 3.1% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002111400.pktlen.png)
detailed numbers
[ 32- 63]: 4539270
[ 64- 127]: 8782414
[ 128- 255]: 1663343
[ 256- 511]: 1648877
[ 512- 1023]: 599507
[ 1024- 2047]: 9905851
Protocol Breakdown
![[protocol breakdown chart]](201002111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27139262 (100.00%) 16131678636 (100.00%) 594.40
ip 27090612 ( 99.82%) 16125236049 ( 99.96%) 595.23
tcp 12683208 ( 46.73%) 7877230116 ( 48.83%) 621.08
http(s) 4575077 ( 16.86%) 5999960109 ( 37.19%) 1311.44
http(c) 3186407 ( 11.74%) 289495037 ( 1.79%) 90.85
squid 826284 ( 3.04%) 241479869 ( 1.50%) 292.25
smtp 321062 ( 1.18%) 60988609 ( 0.38%) 189.96
ftp 37676 ( 0.14%) 8488956 ( 0.05%) 225.31
pop3 16112 ( 0.06%) 12495038 ( 0.08%) 775.51
imap 3536 ( 0.01%) 595705 ( 0.00%) 168.47
telnet 7825 ( 0.03%) 578127 ( 0.00%) 73.88
ssh 50410 ( 0.19%) 5129543 ( 0.03%) 101.76
dns 63520 ( 0.23%) 7910427 ( 0.05%) 124.53
bgp 148 ( 0.00%) 53245 ( 0.00%) 359.76
napster 58 ( 0.00%) 3554 ( 0.00%) 61.28
realaud 72 ( 0.00%) 8204 ( 0.00%) 113.94
rtsp 4391 ( 0.02%) 309558 ( 0.00%) 70.50
icecast 20742 ( 0.08%) 15817874 ( 0.10%) 762.60
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 3569853 ( 13.15%) 1233913500 ( 7.65%) 345.65
udp 11203447 ( 41.28%) 6415623426 ( 39.77%) 572.65
dns 863505 ( 3.18%) 127922458 ( 0.79%) 148.14
realaud 11 ( 0.00%) 1012 ( 0.00%) 92.00
halflif 90 ( 0.00%) 15632 ( 0.00%) 173.69
starcra 129 ( 0.00%) 14949 ( 0.00%) 115.88
everque 217 ( 0.00%) 119895 ( 0.00%) 552.51
unreal 37 ( 0.00%) 4644 ( 0.00%) 125.51
quake 14 ( 0.00%) 1868 ( 0.00%) 133.43
cuseeme 6 ( 0.00%) 567 ( 0.00%) 94.50
other 10336782 ( 38.09%) 6286519437 ( 38.97%) 608.17
icmp 511152 ( 1.88%) 45269099 ( 0.28%) 88.56
ipip 331 ( 0.00%) 41290 ( 0.00%) 124.74
ipsec 739848 ( 2.73%) 694523864 ( 4.31%) 938.74
ip6 1769623 ( 6.52%) 1071353804 ( 6.64%) 605.41
other 183003 ( 0.67%) 21194450 ( 0.13%) 115.81
frag 24160 ( 0.09%) 15625996 ( 0.10%) 646.77
ip6 48650 ( 0.18%) 6442587 ( 0.04%) 132.43
tcp6 24146 ( 0.09%) 2235795 ( 0.01%) 92.59
http(s) 66 ( 0.00%) 32972 ( 0.00%) 499.58
http(c) 3608 ( 0.01%) 322136 ( 0.00%) 89.28
smtp 107 ( 0.00%) 15579 ( 0.00%) 145.60
ssh 13 ( 0.00%) 1806 ( 0.00%) 138.92
dns 3 ( 0.00%) 482 ( 0.00%) 160.67
bgp 104 ( 0.00%) 12686 ( 0.00%) 121.98
other 20245 ( 0.07%) 1850134 ( 0.01%) 91.39
udp6 20736 ( 0.08%) 3751760 ( 0.02%) 180.93
dns 20648 ( 0.08%) 3735836 ( 0.02%) 180.93
other 88 ( 0.00%) 15924 ( 0.00%) 180.95
icmp6 3726 ( 0.01%) 440233 ( 0.00%) 118.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 10719 ( 0.00%) 893.25
tcpdump file: 201002111400.dump.gz (657.74 MB)