Traffic Trace Info
DumpFile: 201002131400.dump
FileSize: 2724.25MB
Id: 201002131400
StartTime: Sat Feb 13 14:00:01 2010
EndTime: Sat Feb 13 14:15:01 2010
TotalTime: 900.18 seconds
TotalCapSize: -1960.14MB CapLen: 96 bytes
# of packets: 38559914 (21083.27MB)
AvgRate: 196.49Mbps stddev:11.94M
IP flow (unique src/dst pair) Information
# of flows: 1101689 (avg. 35.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.2% 2.8% 2.3% 2.3% 2.3% 1.9% 1.7% 1.7% 1.4%
IP address Information
# of IPv4 addresses: 668338
Top 10 bandwidth usage (bytes/total in %):
20.0% 10.3% 7.7% 6.3% 5.5% 5.0% 4.5% 4.3% 4.2% 3.1%
# of IPv6 addresses: 865
Top 10 bandwidth usage (bytes/total in %):
36.9% 6.6% 5.8% 5.5% 5.5% 4.6% 4.3% 4.1% 3.8% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002131400.pktlen.png)
detailed numbers
[ 32- 63]: 5285699
[ 64- 127]: 15093176
[ 128- 255]: 2035189
[ 256- 511]: 1843900
[ 512- 1023]: 1341508
[ 1024- 2047]: 12960442
Protocol Breakdown
![[protocol breakdown chart]](201002131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38559914 (100.00%) 22107405801 (100.00%) 573.33
ip 38529553 ( 99.92%) 22102522692 ( 99.98%) 573.65
tcp 26001232 ( 67.43%) 15798617704 ( 71.46%) 607.61
http(s) 9322390 ( 24.18%) 10089051251 ( 45.64%) 1082.24
http(c) 7765618 ( 20.14%) 779609169 ( 3.53%) 100.39
squid 889772 ( 2.31%) 160429627 ( 0.73%) 180.30
smtp 198719 ( 0.52%) 82536010 ( 0.37%) 415.34
ftp 27163 ( 0.07%) 4941443 ( 0.02%) 181.92
pop3 18048 ( 0.05%) 14532238 ( 0.07%) 805.20
imap 1534 ( 0.00%) 709408 ( 0.00%) 462.46
telnet 4748 ( 0.01%) 354263 ( 0.00%) 74.61
ssh 725014 ( 1.88%) 503421119 ( 2.28%) 694.36
dns 60598 ( 0.16%) 7760866 ( 0.04%) 128.07
bgp 161 ( 0.00%) 54165 ( 0.00%) 336.43
napster 48 ( 0.00%) 7359 ( 0.00%) 153.31
realaud 12 ( 0.00%) 1607 ( 0.00%) 133.92
rtsp 89025 ( 0.23%) 50109905 ( 0.23%) 562.87
icecast 10874 ( 0.03%) 718513 ( 0.00%) 66.08
other 6887503 ( 17.86%) 4104380241 ( 18.57%) 595.92
udp 10215074 ( 26.49%) 5285313815 ( 23.91%) 517.40
dns 990902 ( 2.57%) 141100954 ( 0.64%) 142.40
realaud 141 ( 0.00%) 17101 ( 0.00%) 121.28
halflif 96 ( 0.00%) 18932 ( 0.00%) 197.21
starcra 209 ( 0.00%) 26343 ( 0.00%) 126.04
everque 202 ( 0.00%) 38418 ( 0.00%) 190.19
unreal 64 ( 0.00%) 10785 ( 0.00%) 168.52
quake 17 ( 0.00%) 1832 ( 0.00%) 107.76
cuseeme 42 ( 0.00%) 7271 ( 0.00%) 173.12
other 9219365 ( 23.91%) 5142338912 ( 23.26%) 557.78
icmp 525876 ( 1.36%) 39498243 ( 0.18%) 75.11
ipip 364 ( 0.00%) 46052 ( 0.00%) 126.52
ipsec 50 ( 0.00%) 9244 ( 0.00%) 184.88
ip6 1759904 ( 4.56%) 960315619 ( 4.34%) 545.66
other 27053 ( 0.07%) 18722015 ( 0.08%) 692.05
frag 15845 ( 0.04%) 8099686 ( 0.04%) 511.18
ip6 30361 ( 0.08%) 4883109 ( 0.02%) 160.83
tcp6 6980 ( 0.02%) 894598 ( 0.00%) 128.17
http(s) 333 ( 0.00%) 180140 ( 0.00%) 540.96
http(c) 3039 ( 0.01%) 275898 ( 0.00%) 90.79
smtp 228 ( 0.00%) 75657 ( 0.00%) 331.83
ssh 12 ( 0.00%) 1736 ( 0.00%) 144.67
dns 8 ( 0.00%) 784 ( 0.00%) 98.00
bgp 122 ( 0.00%) 16633 ( 0.00%) 136.34
other 3238 ( 0.01%) 343750 ( 0.00%) 106.16
udp6 19603 ( 0.05%) 3535486 ( 0.02%) 180.35
dns 19592 ( 0.05%) 3533850 ( 0.02%) 180.37
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
other 10 ( 0.00%) 1532 ( 0.00%) 153.20
icmp6 3740 ( 0.01%) 443971 ( 0.00%) 118.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 4974 ( 0.00%) 621.75
tcpdump file: 201002131400.dump.gz (975.09 MB)