Traffic Trace Info
DumpFile: 201002141400.dump
FileSize: 2204.47MB
Id: 201002141400
StartTime: Sun Feb 14 14:00:01 2010
EndTime: Sun Feb 14 14:15:00 2010
TotalTime: 899.58 seconds
TotalCapSize: 1673.34MB CapLen: 96 bytes
# of packets: 34807876 (19571.59MB)
AvgRate: 182.50Mbps stddev:11.87M
IP flow (unique src/dst pair) Information
# of flows: 794602 (avg. 43.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
35.3% 1.7% 1.5% 1.1% 1.0% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 483585
Top 10 bandwidth usage (bytes/total in %):
35.4% 35.4% 21.4% 6.7% 2.7% 1.9% 1.8% 1.7% 1.5% 1.4%
# of IPv6 addresses: 841
Top 10 bandwidth usage (bytes/total in %):
80.8% 43.7% 37.3% 7.4% 1.2% 1.1% 1.0% 1.0% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002141400.pktlen.png)
detailed numbers
[ 32- 63]: 7917474
[ 64- 127]: 8107185
[ 128- 255]: 1629953
[ 256- 511]: 2043722
[ 512- 1023]: 3988858
[ 1024- 2047]: 11120684
Protocol Breakdown
![[protocol breakdown chart]](201002141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34807876 (100.00%) 20522299902 (100.00%) 589.59
ip 34561127 ( 99.29%) 20497861718 ( 99.88%) 593.09
tcp 10640938 ( 30.57%) 6594874901 ( 32.14%) 619.76
http(s) 3119929 ( 8.96%) 3956939638 ( 19.28%) 1268.28
http(c) 2089049 ( 6.00%) 422205885 ( 2.06%) 202.10
squid 689480 ( 1.98%) 129027957 ( 0.63%) 187.14
smtp 166354 ( 0.48%) 36787111 ( 0.18%) 221.14
ftp 29743 ( 0.09%) 8598422 ( 0.04%) 289.09
pop3 15015 ( 0.04%) 13177870 ( 0.06%) 877.65
imap 1295 ( 0.00%) 549400 ( 0.00%) 424.25
telnet 3817 ( 0.01%) 284527 ( 0.00%) 74.54
ssh 100154 ( 0.29%) 35364004 ( 0.17%) 353.10
dns 66660 ( 0.19%) 8173033 ( 0.04%) 122.61
bgp 157 ( 0.00%) 59824 ( 0.00%) 381.04
napster 39 ( 0.00%) 3127 ( 0.00%) 80.18
realaud 85 ( 0.00%) 10430 ( 0.00%) 122.71
rtsp 405 ( 0.00%) 98041 ( 0.00%) 242.08
icecast 420 ( 0.00%) 37225 ( 0.00%) 88.63
other 4358332 ( 12.52%) 1983558167 ( 9.67%) 455.12
udp 21154445 ( 60.77%) 12484469083 ( 60.83%) 590.16
dns 770229 ( 2.21%) 113646943 ( 0.55%) 147.55
realaud 1873 ( 0.01%) 113378 ( 0.00%) 60.53
halflif 774 ( 0.00%) 51195 ( 0.00%) 66.14
starcra 275 ( 0.00%) 34702 ( 0.00%) 126.19
everque 187 ( 0.00%) 37647 ( 0.00%) 201.32
unreal 74 ( 0.00%) 12154 ( 0.00%) 164.24
quake 21 ( 0.00%) 2381 ( 0.00%) 113.38
cuseeme 25 ( 0.00%) 2713 ( 0.00%) 108.52
other 20379662 ( 58.55%) 12370400495 ( 60.28%) 607.00
icmp 447316 ( 1.29%) 32235869 ( 0.16%) 72.07
ipip 351 ( 0.00%) 45550 ( 0.00%) 129.77
ipsec 771 ( 0.00%) 137314 ( 0.00%) 178.10
ip6 2312245 ( 6.64%) 1385450444 ( 6.75%) 599.18
other 5061 ( 0.01%) 648557 ( 0.00%) 128.15
frag 6680469 ( 19.19%) 6986599627 ( 34.04%) 1045.82
ip6 246749 ( 0.71%) 24438184 ( 0.12%) 99.04
tcp6 223793 ( 0.64%) 20516843 ( 0.10%) 91.68
http(s) 227 ( 0.00%) 165107 ( 0.00%) 727.34
http(c) 3669 ( 0.01%) 330881 ( 0.00%) 90.18
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 14 ( 0.00%) 1791 ( 0.00%) 127.93
ssh 12 ( 0.00%) 1736 ( 0.00%) 144.67
dns 20 ( 0.00%) 8184 ( 0.00%) 409.20
bgp 123 ( 0.00%) 15692 ( 0.00%) 127.58
other 219725 ( 0.63%) 19993198 ( 0.10%) 90.99
udp6 19050 ( 0.05%) 3457239 ( 0.02%) 181.48
dns 19029 ( 0.05%) 3453793 ( 0.02%) 181.50
other 21 ( 0.00%) 3446 ( 0.00%) 164.10
icmp6 3865 ( 0.01%) 451536 ( 0.00%) 116.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 8486 ( 0.00%) 771.45
tcpdump file: 201002141400.dump.gz (711.99 MB)