Traffic Trace Info
DumpFile: 201002181400.dump
FileSize: 1985.57MB
Id: 201002181400
StartTime: Thu Feb 18 14:00:00 2010
EndTime: Thu Feb 18 14:15:00 2010
TotalTime: 899.91 seconds
TotalCapSize: 1542.78MB CapLen: 96 bytes
# of packets: 29018072 (16750.55MB)
AvgRate: 156.14Mbps stddev:15.40M
IP flow (unique src/dst pair) Information
# of flows: 859596 (avg. 33.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.3% 1.5% 1.3% 1.2% 1.2% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 517386
Top 10 bandwidth usage (bytes/total in %):
21.6% 8.0% 6.9% 5.7% 4.0% 3.9% 3.9% 3.2% 3.1% 2.7%
# of IPv6 addresses: 1021
Top 10 bandwidth usage (bytes/total in %):
12.7% 10.7% 10.5% 8.9% 8.9% 7.3% 5.6% 5.5% 5.2% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002181400.pktlen.png)
detailed numbers
[ 32- 63]: 4732939
[ 64- 127]: 9104024
[ 128- 255]: 1866809
[ 256- 511]: 2064232
[ 512- 1023]: 737099
[ 1024- 2047]: 10512969
Protocol Breakdown
![[protocol breakdown chart]](201002181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29018072 (100.00%) 17564226896 (100.00%) 605.29
ip 28979837 ( 99.87%) 17557116449 ( 99.96%) 605.84
tcp 16470773 ( 56.76%) 11367878113 ( 64.72%) 690.18
http(s) 5953423 ( 20.52%) 7749815079 ( 44.12%) 1301.74
http(c) 3949122 ( 13.61%) 564034710 ( 3.21%) 142.83
squid 451415 ( 1.56%) 88305442 ( 0.50%) 195.62
smtp 259235 ( 0.89%) 92957989 ( 0.53%) 358.59
ftp 29438 ( 0.10%) 2686855 ( 0.02%) 91.27
pop3 30472 ( 0.11%) 22282150 ( 0.13%) 731.23
imap 2850 ( 0.01%) 1446643 ( 0.01%) 507.59
telnet 8709 ( 0.03%) 643981 ( 0.00%) 73.94
ssh 558495 ( 1.92%) 63002614 ( 0.36%) 112.81
dns 60941 ( 0.21%) 7783717 ( 0.04%) 127.73
bgp 249 ( 0.00%) 125943 ( 0.00%) 505.80
napster 390 ( 0.00%) 207888 ( 0.00%) 533.05
realaud 38 ( 0.00%) 3825 ( 0.00%) 100.66
rtsp 46734 ( 0.16%) 3036480 ( 0.02%) 64.97
icecast 5268 ( 0.02%) 359800 ( 0.00%) 68.30
other 5113988 ( 17.62%) 2771184637 ( 15.78%) 541.88
udp 9876760 ( 34.04%) 4905420416 ( 27.93%) 496.66
dns 1015269 ( 3.50%) 150089953 ( 0.85%) 147.83
realaud 1173 ( 0.00%) 75412 ( 0.00%) 64.29
halflif 959 ( 0.00%) 62157 ( 0.00%) 64.81
starcra 178 ( 0.00%) 19456 ( 0.00%) 109.30
everque 155 ( 0.00%) 47843 ( 0.00%) 308.66
unreal 30 ( 0.00%) 3893 ( 0.00%) 129.77
quake 22 ( 0.00%) 3311 ( 0.00%) 150.50
cuseeme 2 ( 0.00%) 158 ( 0.00%) 79.00
other 8858789 ( 30.53%) 4754982306 ( 27.07%) 536.75
icmp 510397 ( 1.76%) 44289453 ( 0.25%) 86.77
ipip 363 ( 0.00%) 44090 ( 0.00%) 121.46
ip6 2073855 ( 7.15%) 1223162341 ( 6.96%) 589.80
other 47689 ( 0.16%) 16322036 ( 0.09%) 342.26
frag 1590 ( 0.01%) 1442931 ( 0.01%) 907.50
ip6 38235 ( 0.13%) 7110447 ( 0.04%) 185.97
tcp6 8437 ( 0.03%) 2614747 ( 0.01%) 309.91
http(s) 1045 ( 0.00%) 1123297 ( 0.01%) 1074.93
http(c) 3660 ( 0.01%) 329089 ( 0.00%) 89.92
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 178 ( 0.00%) 31073 ( 0.00%) 174.57
ssh 92 ( 0.00%) 11736 ( 0.00%) 127.57
dns 4 ( 0.00%) 568 ( 0.00%) 142.00
bgp 127 ( 0.00%) 23052 ( 0.00%) 181.51
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 3325 ( 0.01%) 1095488 ( 0.01%) 329.47
udp6 25164 ( 0.09%) 3899006 ( 0.02%) 154.94
dns 25126 ( 0.09%) 3892146 ( 0.02%) 154.91
other 38 ( 0.00%) 6860 ( 0.00%) 180.53
icmp6 4566 ( 0.02%) 558559 ( 0.00%) 122.33
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 37 ( 0.00%) 33919 ( 0.00%) 916.73
tcpdump file: 201002181400.dump.gz (738.59 MB)