Traffic Trace Info
DumpFile: 201002191400.dump
FileSize: 2055.74MB
Id: 201002191400
StartTime: Fri Feb 19 14:00:00 2010
EndTime: Fri Feb 19 14:15:01 2010
TotalTime: 900.67 seconds
TotalCapSize: 1595.26MB CapLen: 96 bytes
# of packets: 30177639 (17353.52MB)
AvgRate: 161.62Mbps stddev:15.18M
IP flow (unique src/dst pair) Information
# of flows: 862940 (avg. 34.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 2.1% 1.9% 1.2% 1.2% 1.2% 1.1% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 512496
Top 10 bandwidth usage (bytes/total in %):
23.4% 6.7% 6.0% 5.8% 5.3% 4.6% 3.8% 2.7% 2.5% 2.3%
# of IPv6 addresses: 930
Top 10 bandwidth usage (bytes/total in %):
76.7% 71.5% 6.3% 6.3% 5.1% 4.5% 1.4% 1.4% 1.0% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002191400.pktlen.png)
detailed numbers
[ 32- 63]: 4898952
[ 64- 127]: 9316021
[ 128- 255]: 1973785
[ 256- 511]: 2335368
[ 512- 1023]: 788160
[ 1024- 2047]: 10865353
Protocol Breakdown
![[protocol breakdown chart]](201002191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30177639 (100.00%) 18196482888 (100.00%) 602.98
ip 30099724 ( 99.74%) 18156196717 ( 99.78%) 603.20
tcp 16654084 ( 55.19%) 11505538109 ( 63.23%) 690.85
http(s) 6254243 ( 20.72%) 8462815079 ( 46.51%) 1353.13
http(c) 4487387 ( 14.87%) 545565270 ( 3.00%) 121.58
squid 454266 ( 1.51%) 100985014 ( 0.55%) 222.30
smtp 343835 ( 1.14%) 120356048 ( 0.66%) 350.04
ftp 25054 ( 0.08%) 3383512 ( 0.02%) 135.05
pop3 30368 ( 0.10%) 19424770 ( 0.11%) 639.65
imap 2591 ( 0.01%) 533823 ( 0.00%) 206.03
telnet 13876 ( 0.05%) 1022267 ( 0.01%) 73.67
ssh 239512 ( 0.79%) 125114683 ( 0.69%) 522.37
dns 65698 ( 0.22%) 8094982 ( 0.04%) 123.22
bgp 161 ( 0.00%) 62536 ( 0.00%) 388.42
napster 91 ( 0.00%) 11268 ( 0.00%) 123.82
realaud 115 ( 0.00%) 12457 ( 0.00%) 108.32
rtsp 47199 ( 0.16%) 2898526 ( 0.02%) 61.41
icecast 13854 ( 0.05%) 1017515 ( 0.01%) 73.45
hotline 9 ( 0.00%) 1773 ( 0.00%) 197.00
other 4675821 ( 15.49%) 2114238346 ( 11.62%) 452.16
udp 10679008 ( 35.39%) 5377482685 ( 29.55%) 503.56
dns 1024086 ( 3.39%) 150048230 ( 0.82%) 146.52
realaud 962 ( 0.00%) 60643 ( 0.00%) 63.04
halflif 89 ( 0.00%) 8081 ( 0.00%) 90.80
starcra 148 ( 0.00%) 16603 ( 0.00%) 112.18
everque 152 ( 0.00%) 39377 ( 0.00%) 259.06
unreal 46 ( 0.00%) 8542 ( 0.00%) 185.70
quake 27 ( 0.00%) 3684 ( 0.00%) 136.44
cuseeme 1 ( 0.00%) 84 ( 0.00%) 84.00
other 9653431 ( 31.99%) 5227245748 ( 28.73%) 541.49
icmp 456304 ( 1.51%) 33562844 ( 0.18%) 73.55
ipip 370 ( 0.00%) 45400 ( 0.00%) 122.70
ipsec 91571 ( 0.30%) 18361538 ( 0.10%) 200.52
ip6 2195261 ( 7.27%) 1216265930 ( 6.68%) 554.04
other 23126 ( 0.08%) 4940211 ( 0.03%) 213.62
frag 1450 ( 0.00%) 1185557 ( 0.01%) 817.63
ip6 77913 ( 0.26%) 40286051 ( 0.22%) 517.06
tcp6 50609 ( 0.17%) 35463240 ( 0.19%) 700.73
http(s) 2069 ( 0.01%) 2809287 ( 0.02%) 1357.80
http(c) 4828 ( 0.02%) 439886 ( 0.00%) 91.11
smtp 278 ( 0.00%) 80246 ( 0.00%) 288.65
ssh 2187 ( 0.01%) 570610 ( 0.00%) 260.91
dns 8 ( 0.00%) 3677 ( 0.00%) 459.62
bgp 127 ( 0.00%) 24284 ( 0.00%) 191.21
other 41112 ( 0.14%) 31535250 ( 0.17%) 767.06
udp6 22840 ( 0.08%) 4259460 ( 0.02%) 186.49
dns 22764 ( 0.08%) 4249945 ( 0.02%) 186.70
other 76 ( 0.00%) 9515 ( 0.00%) 125.20
icmp6 4407 ( 0.01%) 536172 ( 0.00%) 121.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27 ( 0.00%) 23099 ( 0.00%) 855.52
tcpdump file: 201002191400.dump.gz (758.33 MB)