Traffic Trace Info
DumpFile: 201002211400.dump
FileSize: 2175.23MB
Id: 201002211400
StartTime: Sun Feb 21 14:00:01 2010
EndTime: Sun Feb 21 14:15:01 2010
TotalTime: 900.21 seconds
TotalCapSize: 1690.43MB CapLen: 96 bytes
# of packets: 31771348 (19374.47MB)
AvgRate: 180.56Mbps stddev:21.41M
IP flow (unique src/dst pair) Information
# of flows: 889878 (avg. 35.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.0% 1.7% 1.4% 1.4% 1.4% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 541461
Top 10 bandwidth usage (bytes/total in %):
23.9% 20.5% 4.8% 4.2% 2.8% 2.8% 2.8% 2.6% 2.5% 2.2%
# of IPv6 addresses: 809
Top 10 bandwidth usage (bytes/total in %):
39.3% 5.6% 5.2% 4.0% 4.0% 3.6% 3.6% 3.6% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002211400.pktlen.png)
detailed numbers
[ 32- 63]: 4366638
[ 64- 127]: 10517719
[ 128- 255]: 1606381
[ 256- 511]: 2263537
[ 512- 1023]: 727210
[ 1024- 2047]: 12289863
Protocol Breakdown
![[protocol breakdown chart]](201002211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31771348 (100.00%) 20315605418 (100.00%) 639.43
ip 31743218 ( 99.91%) 20311022977 ( 99.98%) 639.85
tcp 18332369 ( 57.70%) 13559217746 ( 66.74%) 739.63
http(s) 8154657 ( 25.67%) 11495202163 ( 56.58%) 1409.65
http(c) 5709826 ( 17.97%) 525788928 ( 2.59%) 92.08
squid 627472 ( 1.97%) 95709309 ( 0.47%) 152.53
smtp 201696 ( 0.63%) 39110801 ( 0.19%) 193.91
nntp 9 ( 0.00%) 558 ( 0.00%) 62.00
ftp 26618 ( 0.08%) 8346676 ( 0.04%) 313.57
pop3 18225 ( 0.06%) 15645667 ( 0.08%) 858.47
imap 2654 ( 0.01%) 2366002 ( 0.01%) 891.49
telnet 9768 ( 0.03%) 724205 ( 0.00%) 74.14
ssh 22947 ( 0.07%) 10305903 ( 0.05%) 449.12
dns 62658 ( 0.20%) 4258918 ( 0.02%) 67.97
bgp 137 ( 0.00%) 39397 ( 0.00%) 287.57
napster 234 ( 0.00%) 67323 ( 0.00%) 287.71
realaud 969 ( 0.00%) 512336 ( 0.00%) 528.73
rtsp 291 ( 0.00%) 68845 ( 0.00%) 236.58
icecast 675 ( 0.00%) 42240 ( 0.00%) 62.58
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 3493526 ( 11.00%) 1361027035 ( 6.70%) 389.59
udp 10980240 ( 34.56%) 5712833132 ( 28.12%) 520.28
dns 772597 ( 2.43%) 114274466 ( 0.56%) 147.91
realaud 1558 ( 0.00%) 98024 ( 0.00%) 62.92
halflif 55 ( 0.00%) 7378 ( 0.00%) 134.15
starcra 160 ( 0.00%) 19252 ( 0.00%) 120.33
everque 247 ( 0.00%) 50925 ( 0.00%) 206.17
unreal 95 ( 0.00%) 6236 ( 0.00%) 65.64
quake 23 ( 0.00%) 2145 ( 0.00%) 93.26
cuseeme 5 ( 0.00%) 389 ( 0.00%) 77.80
other 10205366 ( 32.12%) 5598338239 ( 27.56%) 548.57
icmp 614960 ( 1.94%) 58630564 ( 0.29%) 95.34
ipip 344 ( 0.00%) 41472 ( 0.00%) 120.56
ipsec 443 ( 0.00%) 83122 ( 0.00%) 187.63
ip6 1797366 ( 5.66%) 973322555 ( 4.79%) 541.53
other 17496 ( 0.06%) 6894386 ( 0.03%) 394.05
frag 947 ( 0.00%) 805287 ( 0.00%) 850.36
ip6 28128 ( 0.09%) 4582321 ( 0.02%) 162.91
tcp6 6544 ( 0.02%) 822583 ( 0.00%) 125.70
http(s) 22 ( 0.00%) 18530 ( 0.00%) 842.27
http(c) 3677 ( 0.01%) 363384 ( 0.00%) 98.83
smtp 93 ( 0.00%) 30647 ( 0.00%) 329.54
ssh 445 ( 0.00%) 166430 ( 0.00%) 374.00
dns 24 ( 0.00%) 6286 ( 0.00%) 261.92
bgp 120 ( 0.00%) 15306 ( 0.00%) 127.55
other 2163 ( 0.01%) 222000 ( 0.00%) 102.64
udp6 18600 ( 0.06%) 3365143 ( 0.02%) 180.92
dns 18574 ( 0.06%) 3358183 ( 0.02%) 180.80
other 26 ( 0.00%) 6960 ( 0.00%) 267.69
icmp6 2922 ( 0.01%) 357712 ( 0.00%) 122.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 32 ( 0.00%) 32803 ( 0.00%) 1025.09
tcpdump file: 201002211400.dump.gz (773.12 MB)