Traffic Trace Info
DumpFile: 201002171400.dump
FileSize: 2592.05MB
Id: 201002171400
StartTime: Wed Feb 17 14:00:01 2010
EndTime: Wed Feb 17 14:15:00 2010
TotalTime: 899.57 seconds
TotalCapSize: 1979.77MB CapLen: 96 bytes
# of packets: 40125798 (23718.46MB)
AvgRate: 221.19Mbps stddev:26.08M
IP flow (unique src/dst pair) Information
# of flows: 911800 (avg. 44.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
29.6% 8.3% 1.5% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 533349
Top 10 bandwidth usage (bytes/total in %):
29.6% 29.6% 15.4% 13.1% 8.5% 4.6% 2.3% 2.0% 1.6% 1.5%
# of IPv6 addresses: 1026
Top 10 bandwidth usage (bytes/total in %):
26.1% 26.0% 17.8% 9.5% 9.5% 4.9% 3.6% 3.6% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002171400.pktlen.png)
detailed numbers
[ 32- 63]: 8976541
[ 64- 127]: 9790620
[ 128- 255]: 1550616
[ 256- 511]: 1871019
[ 512- 1023]: 4070305
[ 1024- 2047]: 13866697
Protocol Breakdown
![[protocol breakdown chart]](201002171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40125798 (100.00%) 24870604103 (100.00%) 619.82
ip 40086756 ( 99.90%) 24860442932 ( 99.96%) 620.17
tcp 16732032 ( 41.70%) 11517613824 ( 46.31%) 688.36
http(s) 6056396 ( 15.09%) 8137180188 ( 32.72%) 1343.57
http(c) 4682435 ( 11.67%) 848517009 ( 3.41%) 181.21
squid 671011 ( 1.67%) 116096372 ( 0.47%) 173.02
smtp 332074 ( 0.83%) 97773931 ( 0.39%) 294.43
nntp 5 ( 0.00%) 310 ( 0.00%) 62.00
ftp 27991 ( 0.07%) 8539524 ( 0.03%) 305.08
pop3 29594 ( 0.07%) 14765435 ( 0.06%) 498.93
imap 6192 ( 0.02%) 4159911 ( 0.02%) 671.82
telnet 10024 ( 0.02%) 742903 ( 0.00%) 74.11
ssh 141169 ( 0.35%) 49395452 ( 0.20%) 349.90
dns 63344 ( 0.16%) 7839397 ( 0.03%) 123.76
bgp 151 ( 0.00%) 50584 ( 0.00%) 334.99
napster 21 ( 0.00%) 3781 ( 0.00%) 180.05
realaud 49 ( 0.00%) 6039 ( 0.00%) 123.24
rtsp 8263 ( 0.02%) 627978 ( 0.00%) 76.00
icecast 35487 ( 0.09%) 16913533 ( 0.07%) 476.61
hotline 8 ( 0.00%) 488 ( 0.00%) 61.00
other 4667815 ( 11.63%) 2215000809 ( 8.91%) 474.53
udp 20836802 ( 51.93%) 12027889706 ( 48.36%) 577.24
dns 1114286 ( 2.78%) 165350635 ( 0.66%) 148.39
realaud 2785 ( 0.01%) 174482 ( 0.00%) 62.65
halflif 52 ( 0.00%) 6756 ( 0.00%) 129.92
starcra 144 ( 0.00%) 18101 ( 0.00%) 125.70
everque 209 ( 0.00%) 57486 ( 0.00%) 275.05
unreal 30 ( 0.00%) 4892 ( 0.00%) 163.07
quake 42 ( 0.00%) 5954 ( 0.00%) 141.76
cuseeme 3 ( 0.00%) 266 ( 0.00%) 88.67
other 19707482 ( 49.11%) 11860983844 ( 47.69%) 601.85
icmp 467829 ( 1.17%) 33897450 ( 0.14%) 72.46
ipip 358 ( 0.00%) 43548 ( 0.00%) 121.64
ipsec 149356 ( 0.37%) 138871788 ( 0.56%) 929.80
ip6 1891967 ( 4.72%) 1140955089 ( 4.59%) 603.05
other 8412 ( 0.02%) 1171527 ( 0.00%) 139.27
frag 6814937 ( 16.98%) 7115671400 ( 28.61%) 1044.13
ip6 39042 ( 0.10%) 10161171 ( 0.04%) 260.26
tcp6 11016 ( 0.03%) 5203213 ( 0.02%) 472.33
http(s) 1444 ( 0.00%) 1719184 ( 0.01%) 1190.57
http(c) 3777 ( 0.01%) 337883 ( 0.00%) 89.46
smtp 280 ( 0.00%) 98457 ( 0.00%) 351.63
ssh 114 ( 0.00%) 30412 ( 0.00%) 266.77
dns 29 ( 0.00%) 8624 ( 0.00%) 297.38
bgp 124 ( 0.00%) 16492 ( 0.00%) 133.00
other 5248 ( 0.01%) 2992161 ( 0.01%) 570.15
udp6 24135 ( 0.06%) 4493798 ( 0.02%) 186.19
dns 24081 ( 0.06%) 4486050 ( 0.02%) 186.29
other 54 ( 0.00%) 7748 ( 0.00%) 143.48
icmp6 3849 ( 0.01%) 450573 ( 0.00%) 117.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 9507 ( 0.00%) 792.25
tcpdump file: 201002171400.dump.gz (858.84 MB)