Traffic Trace Info
DumpFile: 201002151400.dump
FileSize: 2292.89MB
Id: 201002151400
StartTime: Mon Feb 15 14:00:01 2010
EndTime: Mon Feb 15 14:15:01 2010
TotalTime: 899.99 seconds
TotalCapSize: 1771.54MB CapLen: 96 bytes
# of packets: 34166798 (19360.93MB)
AvgRate: 180.46Mbps stddev:15.45M
IP flow (unique src/dst pair) Information
# of flows: 953898 (avg. 35.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.4% 1.9% 1.2% 1.1% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 576283
Top 10 bandwidth usage (bytes/total in %):
20.0% 6.5% 5.6% 5.5% 4.8% 4.7% 3.5% 3.5% 3.4% 2.8%
# of IPv6 addresses: 954
Top 10 bandwidth usage (bytes/total in %):
94.8% 94.8% 1.4% 0.3% 0.3% 0.3% 0.3% 0.3% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002151400.pktlen.png)
detailed numbers
[ 32- 63]: 4979370
[ 64- 127]: 11829471
[ 128- 255]: 1862754
[ 256- 511]: 2191149
[ 512- 1023]: 1228312
[ 1024- 2047]: 12075742
Protocol Breakdown
![[protocol breakdown chart]](201002151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34166798 (100.00%) 20301408493 (100.00%) 594.19
ip 34034981 ( 99.61%) 20172145803 ( 99.36%) 592.69
tcp 17594588 ( 51.50%) 10984383431 ( 54.11%) 624.30
http(s) 5796088 ( 16.96%) 7335935241 ( 36.14%) 1265.67
http(c) 3824091 ( 11.19%) 752539356 ( 3.71%) 196.79
squid 673233 ( 1.97%) 123812495 ( 0.61%) 183.91
smtp 253418 ( 0.74%) 85382222 ( 0.42%) 336.92
ftp 83633 ( 0.24%) 7103716 ( 0.03%) 84.94
pop3 28015 ( 0.08%) 16703461 ( 0.08%) 596.23
imap 2413 ( 0.01%) 556779 ( 0.00%) 230.74
telnet 1597 ( 0.00%) 119677 ( 0.00%) 74.94
ssh 1571466 ( 4.60%) 288046990 ( 1.42%) 183.30
dns 65409 ( 0.19%) 7964779 ( 0.04%) 121.77
bgp 139 ( 0.00%) 46726 ( 0.00%) 336.16
napster 103 ( 0.00%) 14525 ( 0.00%) 141.02
realaud 15 ( 0.00%) 2227 ( 0.00%) 148.47
rtsp 41194 ( 0.12%) 2551378 ( 0.01%) 61.94
icecast 5816 ( 0.02%) 416929 ( 0.00%) 71.69
other 5247955 ( 15.36%) 2363186750 ( 11.64%) 450.31
udp 13244188 ( 38.76%) 7326239729 ( 36.09%) 553.17
dns 940810 ( 2.75%) 143257562 ( 0.71%) 152.27
realaud 1635 ( 0.00%) 102936 ( 0.00%) 62.96
halflif 67 ( 0.00%) 9076 ( 0.00%) 135.46
starcra 247 ( 0.00%) 34241 ( 0.00%) 138.63
everque 208 ( 0.00%) 47505 ( 0.00%) 228.39
unreal 120 ( 0.00%) 21105 ( 0.00%) 175.88
quake 28 ( 0.00%) 2485 ( 0.00%) 88.75
cuseeme 8 ( 0.00%) 1011 ( 0.00%) 126.38
other 12299970 ( 36.00%) 7182642873 ( 35.38%) 583.96
icmp 484897 ( 1.42%) 35318059 ( 0.17%) 72.84
ipip 321 ( 0.00%) 37906 ( 0.00%) 118.09
ipsec 763082 ( 2.23%) 712474320 ( 3.51%) 933.68
ip6 1945420 ( 5.69%) 1113243233 ( 5.48%) 572.24
other 2485 ( 0.01%) 449125 ( 0.00%) 180.73
frag 7460 ( 0.02%) 5535086 ( 0.03%) 741.97
ip6 131817 ( 0.39%) 129262690 ( 0.64%) 980.62
tcp6 105309 ( 0.31%) 124500178 ( 0.61%) 1182.24
http(s) 98631 ( 0.29%) 123798893 ( 0.61%) 1255.17
http(c) 3826 ( 0.01%) 347388 ( 0.00%) 90.80
smtp 111 ( 0.00%) 33591 ( 0.00%) 302.62
ftp 69 ( 0.00%) 6214 ( 0.00%) 90.06
ssh 45 ( 0.00%) 10638 ( 0.00%) 236.40
dns 36 ( 0.00%) 11298 ( 0.00%) 313.83
bgp 118 ( 0.00%) 15409 ( 0.00%) 130.58
other 2473 ( 0.01%) 276747 ( 0.00%) 111.91
udp6 22556 ( 0.07%) 4271207 ( 0.02%) 189.36
dns 22501 ( 0.07%) 4265717 ( 0.02%) 189.58
other 55 ( 0.00%) 5490 ( 0.00%) 99.82
icmp6 3891 ( 0.01%) 462607 ( 0.00%) 118.89
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 30 ( 0.00%) 24482 ( 0.00%) 816.07
tcpdump file: 201002151400.dump.gz (856.42 MB)