Traffic Trace Info
DumpFile: 201002201400.dump
FileSize: 1888.84MB
Id: 201002201400
StartTime: Sat Feb 20 14:00:01 2010
EndTime: Sat Feb 20 14:15:01 2010
TotalTime: 899.93 seconds
TotalCapSize: 1461.17MB CapLen: 96 bytes
# of packets: 28027088 (16775.62MB)
AvgRate: 156.39Mbps stddev:22.96M
IP flow (unique src/dst pair) Information
# of flows: 827195 (avg. 33.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.3% 1.4% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 505324
Top 10 bandwidth usage (bytes/total in %):
25.2% 8.0% 5.9% 3.7% 3.3% 3.2% 3.1% 2.9% 2.7% 2.6%
# of IPv6 addresses: 823
Top 10 bandwidth usage (bytes/total in %):
62.7% 62.7% 13.0% 2.3% 2.0% 1.8% 1.5% 1.5% 1.5% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002201400.pktlen.png)
detailed numbers
[ 32- 63]: 4003317
[ 64- 127]: 8696374
[ 128- 255]: 1674283
[ 256- 511]: 2132281
[ 512- 1023]: 782355
[ 1024- 2047]: 10738478
Protocol Breakdown
![[protocol breakdown chart]](201002201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28027088 (100.00%) 17590507531 (100.00%) 627.63
ip 27894602 ( 99.53%) 17576578508 ( 99.92%) 630.11
tcp 14098166 ( 50.30%) 10520936290 ( 59.81%) 746.26
http(s) 5966577 ( 21.29%) 8252042461 ( 46.91%) 1383.04
http(c) 3546664 ( 12.65%) 386589824 ( 2.20%) 109.00
squid 503061 ( 1.79%) 111515651 ( 0.63%) 221.67
smtp 190263 ( 0.68%) 53126752 ( 0.30%) 279.23
ftp 28394 ( 0.10%) 5944546 ( 0.03%) 209.36
pop3 17789 ( 0.06%) 14202454 ( 0.08%) 798.38
imap 2034 ( 0.01%) 1294248 ( 0.01%) 636.31
telnet 12325 ( 0.04%) 905585 ( 0.01%) 73.48
ssh 94574 ( 0.34%) 31566411 ( 0.18%) 333.77
dns 62068 ( 0.22%) 7947343 ( 0.05%) 128.04
bgp 131 ( 0.00%) 35462 ( 0.00%) 270.70
napster 28 ( 0.00%) 3869 ( 0.00%) 138.18
realaud 14 ( 0.00%) 2573 ( 0.00%) 183.79
rtsp 96243 ( 0.34%) 13457197 ( 0.08%) 139.83
icecast 28454 ( 0.10%) 16279469 ( 0.09%) 572.13
other 3549539 ( 12.66%) 1626021965 ( 9.24%) 458.09
udp 11391506 ( 40.64%) 5975638731 ( 33.97%) 524.57
dns 901759 ( 3.22%) 131787240 ( 0.75%) 146.14
realaud 1861 ( 0.01%) 116425 ( 0.00%) 62.56
halflif 117 ( 0.00%) 9704 ( 0.00%) 82.94
starcra 188 ( 0.00%) 23395 ( 0.00%) 124.44
everque 151 ( 0.00%) 38739 ( 0.00%) 256.55
unreal 50 ( 0.00%) 7150 ( 0.00%) 143.00
quake 26 ( 0.00%) 3381 ( 0.00%) 130.04
cuseeme 5 ( 0.00%) 744 ( 0.00%) 148.80
other 10487185 ( 37.42%) 5843542718 ( 33.22%) 557.21
icmp 506900 ( 1.81%) 37499356 ( 0.21%) 73.98
ipip 366 ( 0.00%) 43534 ( 0.00%) 118.95
ipsec 440 ( 0.00%) 82336 ( 0.00%) 187.13
ip6 1893654 ( 6.76%) 1041856447 ( 5.92%) 550.18
other 3570 ( 0.01%) 521814 ( 0.00%) 146.17
frag 2477 ( 0.01%) 2095100 ( 0.01%) 845.82
ip6 132484 ( 0.47%) 13928903 ( 0.08%) 105.14
tcp6 109221 ( 0.39%) 9868487 ( 0.06%) 90.35
http(s) 6 ( 0.00%) 3578 ( 0.00%) 596.33
http(c) 4983 ( 0.02%) 455613 ( 0.00%) 91.43
smtp 292 ( 0.00%) 140161 ( 0.00%) 480.00
ssh 446 ( 0.00%) 169764 ( 0.00%) 380.64
dns 50 ( 0.00%) 20123 ( 0.00%) 402.46
bgp 122 ( 0.00%) 15862 ( 0.00%) 130.02
other 103322 ( 0.37%) 9063386 ( 0.05%) 87.72
udp6 19118 ( 0.07%) 3509170 ( 0.02%) 183.55
dns 19087 ( 0.07%) 3502788 ( 0.02%) 183.52
other 31 ( 0.00%) 6382 ( 0.00%) 205.87
icmp6 4043 ( 0.01%) 476718 ( 0.00%) 117.91
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 71 ( 0.00%) 70312 ( 0.00%) 990.31
tcpdump file: 201002201400.dump.gz (673.11 MB)