Traffic Trace Info
DumpFile: 201002161400.dump
FileSize: 2346.85MB
Id: 201002161400
StartTime: Tue Feb 16 14:00:01 2010
EndTime: Tue Feb 16 14:15:01 2010
TotalTime: 899.74 seconds
TotalCapSize: 1824.96MB CapLen: 96 bytes
# of packets: 34201743 (20157.69MB)
AvgRate: 187.87Mbps stddev:22.70M
IP flow (unique src/dst pair) Information
# of flows: 1001004 (avg. 34.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.1% 2.1% 1.1% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 629628
Top 10 bandwidth usage (bytes/total in %):
25.9% 7.5% 6.9% 5.7% 3.3% 2.9% 2.4% 2.2% 2.2% 2.1%
# of IPv6 addresses: 1012
Top 10 bandwidth usage (bytes/total in %):
54.9% 54.9% 10.5% 7.5% 7.2% 3.7% 3.7% 3.2% 3.0% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002161400.pktlen.png)
detailed numbers
[ 32- 63]: 5073317
[ 64- 127]: 11006401
[ 128- 255]: 2152775
[ 256- 511]: 2320451
[ 512- 1023]: 859048
[ 1024- 2047]: 12789751
Protocol Breakdown
![[protocol breakdown chart]](201002161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34201743 (100.00%) 21136874899 (100.00%) 618.01
ip 34152278 ( 99.86%) 21111713660 ( 99.88%) 618.16
tcp 18428057 ( 53.88%) 12787883543 ( 60.50%) 693.94
http(s) 6133513 ( 17.93%) 8198347765 ( 38.79%) 1336.65
http(c) 4378962 ( 12.80%) 542757030 ( 2.57%) 123.95
squid 710420 ( 2.08%) 113246304 ( 0.54%) 159.41
smtp 231307 ( 0.68%) 61800836 ( 0.29%) 267.18
ftp 154498 ( 0.45%) 133722056 ( 0.63%) 865.53
pop3 21709 ( 0.06%) 14188619 ( 0.07%) 653.58
imap 2793 ( 0.01%) 993001 ( 0.00%) 355.53
telnet 3059 ( 0.01%) 228401 ( 0.00%) 74.67
ssh 184194 ( 0.54%) 20701765 ( 0.10%) 112.39
dns 65279 ( 0.19%) 8011853 ( 0.04%) 122.73
bgp 164 ( 0.00%) 59927 ( 0.00%) 365.41
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 31576 ( 0.09%) 11683047 ( 0.06%) 370.00
icecast 422 ( 0.00%) 27724 ( 0.00%) 65.70
other 6510155 ( 19.03%) 3682114849 ( 17.42%) 565.60
udp 12534365 ( 36.65%) 6692471708 ( 31.66%) 533.93
dns 1019066 ( 2.98%) 152786494 ( 0.72%) 149.93
realaud 1600 ( 0.00%) 97142 ( 0.00%) 60.71
halflif 150 ( 0.00%) 12763 ( 0.00%) 85.09
starcra 183 ( 0.00%) 24666 ( 0.00%) 134.79
everque 172 ( 0.00%) 32094 ( 0.00%) 186.59
unreal 110 ( 0.00%) 20216 ( 0.00%) 183.78
quake 22 ( 0.00%) 2548 ( 0.00%) 115.82
cuseeme 3 ( 0.00%) 258 ( 0.00%) 86.00
other 11508521 ( 33.65%) 6539147206 ( 30.94%) 568.20
icmp 457279 ( 1.34%) 33268014 ( 0.16%) 72.75
ipip 333 ( 0.00%) 38826 ( 0.00%) 116.59
ipsec 91547 ( 0.27%) 85223282 ( 0.40%) 930.92
ip6 2602471 ( 7.61%) 1474480645 ( 6.98%) 566.57
other 38226 ( 0.11%) 38347642 ( 0.18%) 1003.18
frag 19917 ( 0.06%) 15845178 ( 0.07%) 795.56
ip6 49465 ( 0.14%) 25161239 ( 0.12%) 508.67
tcp6 22425 ( 0.07%) 20229373 ( 0.10%) 902.09
http(s) 11735 ( 0.03%) 16411198 ( 0.08%) 1398.48
http(c) 4073 ( 0.01%) 368571 ( 0.00%) 90.49
smtp 704 ( 0.00%) 160333 ( 0.00%) 227.75
imap 39 ( 0.00%) 28896 ( 0.00%) 740.92
ssh 1924 ( 0.01%) 1066956 ( 0.01%) 554.55
dns 45 ( 0.00%) 14510 ( 0.00%) 322.44
bgp 119 ( 0.00%) 16723 ( 0.00%) 140.53
other 3786 ( 0.01%) 2162186 ( 0.01%) 571.10
udp6 23086 ( 0.07%) 4412111 ( 0.02%) 191.12
dns 23059 ( 0.07%) 4407905 ( 0.02%) 191.16
other 27 ( 0.00%) 4206 ( 0.00%) 155.78
icmp6 3862 ( 0.01%) 458546 ( 0.00%) 118.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 61 ( 0.00%) 56993 ( 0.00%) 934.31
tcpdump file: 201002161400.dump.gz (847.36 MB)