Traffic Trace Info
DumpFile: 201002231400.dump
FileSize: 2377.62MB
Id: 201002231400
StartTime: Tue Feb 23 14:00:01 2010
EndTime: Tue Feb 23 14:15:01 2010
TotalTime: 900.16 seconds
TotalCapSize: 1844.14MB CapLen: 96 bytes
# of packets: 34961484 (21045.99MB)
AvgRate: 196.12Mbps stddev:17.87M
IP flow (unique src/dst pair) Information
# of flows: 845383 (avg. 41.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.6% 1.5% 1.5% 1.5% 1.4% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 495133
Top 10 bandwidth usage (bytes/total in %):
21.9% 19.4% 3.8% 3.6% 2.6% 2.6% 2.6% 1.8% 1.7% 1.6%
# of IPv6 addresses: 963
Top 10 bandwidth usage (bytes/total in %):
37.4% 18.1% 17.9% 16.6% 15.5% 11.5% 6.5% 6.4% 5.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002231400.pktlen.png)
detailed numbers
[ 32- 63]: 4920790
[ 64- 127]: 11679266
[ 128- 255]: 1963140
[ 256- 511]: 2230934
[ 512- 1023]: 795979
[ 1024- 2047]: 13371375
Protocol Breakdown
![[protocol breakdown chart]](201002231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34961484 (100.00%) 22068324644 (100.00%) 631.22
ip 34909653 ( 99.85%) 22052660845 ( 99.93%) 631.71
tcp 20160918 ( 57.67%) 14639927380 ( 66.34%) 726.15
http(s) 7974263 ( 22.81%) 10915550603 ( 49.46%) 1368.85
http(c) 5765333 ( 16.49%) 729542915 ( 3.31%) 126.54
squid 725984 ( 2.08%) 138192751 ( 0.63%) 190.35
smtp 224533 ( 0.64%) 82713640 ( 0.37%) 368.38
ftp 27174 ( 0.08%) 8034253 ( 0.04%) 295.66
pop3 27605 ( 0.08%) 16964995 ( 0.08%) 614.56
imap 2453 ( 0.01%) 584687 ( 0.00%) 238.36
telnet 30491 ( 0.09%) 2186368 ( 0.01%) 71.71
ssh 13673 ( 0.04%) 2922105 ( 0.01%) 213.71
dns 65476 ( 0.19%) 4452002 ( 0.02%) 67.99
bgp 155 ( 0.00%) 54005 ( 0.00%) 348.42
napster 320 ( 0.00%) 33959 ( 0.00%) 106.12
rtsp 150097 ( 0.43%) 9367494 ( 0.04%) 62.41
icecast 86801 ( 0.25%) 54341767 ( 0.25%) 626.05
hotline 35 ( 0.00%) 4044 ( 0.00%) 115.54
other 5066524 ( 14.49%) 2674981732 ( 12.12%) 527.97
udp 11845452 ( 33.88%) 5931382683 ( 26.88%) 500.73
dns 1070177 ( 3.06%) 159605392 ( 0.72%) 149.14
rip 2 ( 0.00%) 421 ( 0.00%) 210.50
realaud 26 ( 0.00%) 2032 ( 0.00%) 78.15
halflif 99 ( 0.00%) 12037 ( 0.00%) 121.59
starcra 207 ( 0.00%) 23473 ( 0.00%) 113.40
everque 474 ( 0.00%) 69264 ( 0.00%) 146.13
unreal 108 ( 0.00%) 17115 ( 0.00%) 158.47
quake 30 ( 0.00%) 2864 ( 0.00%) 95.47
cuseeme 6 ( 0.00%) 503 ( 0.00%) 83.83
other 10771764 ( 30.81%) 5771464786 ( 26.15%) 535.80
icmp 515416 ( 1.47%) 39475515 ( 0.18%) 76.59
ipip 344 ( 0.00%) 43852 ( 0.00%) 127.48
ipsec 608105 ( 1.74%) 564377862 ( 2.56%) 928.09
ip6 1672040 ( 4.78%) 842600759 ( 3.82%) 503.94
other 107378 ( 0.31%) 34852794 ( 0.16%) 324.58
frag 32298 ( 0.09%) 23159355 ( 0.10%) 717.05
ip6 51831 ( 0.15%) 15663799 ( 0.07%) 302.21
tcp6 12521 ( 0.04%) 1994927 ( 0.01%) 159.33
http(s) 396 ( 0.00%) 245211 ( 0.00%) 619.22
http(c) 3836 ( 0.01%) 406247 ( 0.00%) 105.90
smtp 218 ( 0.00%) 121330 ( 0.00%) 556.56
dns 45 ( 0.00%) 13358 ( 0.00%) 296.84
bgp 137 ( 0.00%) 26365 ( 0.00%) 192.45
other 7889 ( 0.02%) 1182416 ( 0.01%) 149.88
udp6 36253 ( 0.10%) 13204596 ( 0.06%) 364.23
dns 36205 ( 0.10%) 13198351 ( 0.06%) 364.54
other 48 ( 0.00%) 6245 ( 0.00%) 130.10
icmp6 2928 ( 0.01%) 363607 ( 0.00%) 124.18
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 98 ( 0.00%) 96453 ( 0.00%) 984.21
tcpdump file: 201002231400.dump.gz (856.97 MB)