Traffic Trace Info
DumpFile: 201002121400.dump
FileSize: 2024.74MB
Id: 201002121400
StartTime: Fri Feb 12 14:00:00 2010
EndTime: Fri Feb 12 14:15:01 2010
TotalTime: 900.61 seconds
TotalCapSize: 1569.88MB CapLen: 96 bytes
# of packets: 29809083 (17071.65MB)
AvgRate: 159.02Mbps stddev:17.31M
IP flow (unique src/dst pair) Information
# of flows: 834412 (avg. 35.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.3% 2.2% 1.8% 1.2% 1.2% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 490817
Top 10 bandwidth usage (bytes/total in %):
24.4% 7.2% 4.6% 4.6% 4.6% 3.2% 2.6% 2.5% 2.4% 2.4%
# of IPv6 addresses: 997
Top 10 bandwidth usage (bytes/total in %):
25.4% 9.2% 9.2% 5.6% 5.6% 4.7% 4.7% 4.5% 4.1% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002121400.pktlen.png)
detailed numbers
[ 32- 63]: 5770791
[ 64- 127]: 8929785
[ 128- 255]: 1645669
[ 256- 511]: 1891354
[ 512- 1023]: 701213
[ 1024- 2047]: 10870271
Protocol Breakdown
![[protocol breakdown chart]](201002121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29809083 (100.00%) 17900926268 (100.00%) 600.52
ip 29772138 ( 99.88%) 17893813141 ( 99.96%) 601.03
tcp 16960323 ( 56.90%) 11415804328 ( 63.77%) 673.09
http(s) 6368751 ( 21.37%) 8272852313 ( 46.21%) 1298.98
http(c) 4515091 ( 15.15%) 812569557 ( 4.54%) 179.97
squid 684403 ( 2.30%) 99552217 ( 0.56%) 145.46
smtp 249693 ( 0.84%) 116514847 ( 0.65%) 466.63
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 95155 ( 0.32%) 57425408 ( 0.32%) 603.49
pop3 32392 ( 0.11%) 21554514 ( 0.12%) 665.43
imap 6418 ( 0.02%) 1658751 ( 0.01%) 258.45
telnet 8026 ( 0.03%) 593602 ( 0.00%) 73.96
ssh 150870 ( 0.51%) 20015504 ( 0.11%) 132.67
dns 66966 ( 0.22%) 8143248 ( 0.05%) 121.60
bgp 136 ( 0.00%) 46403 ( 0.00%) 341.20
napster 41 ( 0.00%) 2472 ( 0.00%) 60.29
realaud 82 ( 0.00%) 9153 ( 0.00%) 111.62
rtsp 24930 ( 0.08%) 30271422 ( 0.17%) 1214.26
icecast 26866 ( 0.09%) 23391306 ( 0.13%) 870.67
other 4730497 ( 15.87%) 1951203247 ( 10.90%) 412.47
udp 10065076 ( 33.77%) 5123646727 ( 28.62%) 509.05
dns 890440 ( 2.99%) 133840317 ( 0.75%) 150.31
realaud 915 ( 0.00%) 55405 ( 0.00%) 60.55
halflif 68 ( 0.00%) 8553 ( 0.00%) 125.78
starcra 193 ( 0.00%) 23907 ( 0.00%) 123.87
everque 540 ( 0.00%) 96506 ( 0.00%) 178.71
unreal 75 ( 0.00%) 12242 ( 0.00%) 163.23
quake 34 ( 0.00%) 3787 ( 0.00%) 111.38
cuseeme 5 ( 0.00%) 532 ( 0.00%) 106.40
other 9170891 ( 30.77%) 4988729629 ( 27.87%) 543.97
icmp 455597 ( 1.53%) 33766534 ( 0.19%) 74.11
ipip 353 ( 0.00%) 46046 ( 0.00%) 130.44
ipsec 552 ( 0.00%) 112864 ( 0.00%) 204.46
ip6 2153818 ( 7.23%) 1303761445 ( 7.28%) 605.33
other 136419 ( 0.46%) 16675197 ( 0.09%) 122.24
frag 5690 ( 0.02%) 3586733 ( 0.02%) 630.36
ip6 36945 ( 0.12%) 7113127 ( 0.04%) 192.53
tcp6 11161 ( 0.04%) 2577923 ( 0.01%) 230.98
http(s) 1116 ( 0.00%) 1263949 ( 0.01%) 1132.57
http(c) 5743 ( 0.02%) 552801 ( 0.00%) 96.26
smtp 106 ( 0.00%) 19789 ( 0.00%) 186.69
ssh 1068 ( 0.00%) 359356 ( 0.00%) 336.48
dns 22 ( 0.00%) 6978 ( 0.00%) 317.18
bgp 120 ( 0.00%) 16304 ( 0.00%) 135.87
other 2986 ( 0.01%) 358746 ( 0.00%) 120.14
udp6 21520 ( 0.07%) 4016764 ( 0.02%) 186.65
dns 21509 ( 0.07%) 4015498 ( 0.02%) 186.69
other 11 ( 0.00%) 1266 ( 0.00%) 115.09
icmp6 4204 ( 0.01%) 489304 ( 0.00%) 116.39
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 29 ( 0.00%) 24920 ( 0.00%) 859.31
tcpdump file: 201002121400.dump.gz (745.57 MB)