Traffic Trace Info
DumpFile: 201002251400.dump
FileSize: 2294.24MB
Id: 201002251400
StartTime: Thu Feb 25 14:00:01 2010
EndTime: Thu Feb 25 14:15:01 2010
TotalTime: 900.14 seconds
TotalCapSize: 1778.51MB CapLen: 96 bytes
# of packets: 33798022 (19986.34MB)
AvgRate: 186.26Mbps stddev:28.42M
IP flow (unique src/dst pair) Information
# of flows: 1059866 (avg. 31.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 2.2% 1.7% 1.7% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 628245
Top 10 bandwidth usage (bytes/total in %):
22.0% 7.2% 5.5% 5.3% 4.1% 4.0% 3.3% 2.9% 2.5% 2.5%
# of IPv6 addresses: 985
Top 10 bandwidth usage (bytes/total in %):
27.9% 27.8% 15.4% 15.4% 14.7% 14.7% 11.9% 3.9% 3.1% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002251400.pktlen.png)
detailed numbers
[ 32- 63]: 6063845
[ 64- 127]: 9851622
[ 128- 255]: 2295987
[ 256- 511]: 2028520
[ 512- 1023]: 855146
[ 1024- 2047]: 12702902
Protocol Breakdown
![[protocol breakdown chart]](201002251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33798022 (100.00%) 20957201604 (100.00%) 620.07
ip 33728045 ( 99.79%) 20942061934 ( 99.93%) 620.91
tcp 19714142 ( 58.33%) 14012336641 ( 66.86%) 710.78
http(s) 8191280 ( 24.24%) 11092291124 ( 52.93%) 1354.16
http(c) 5824822 ( 17.23%) 768566843 ( 3.67%) 131.95
squid 801379 ( 2.37%) 122645779 ( 0.59%) 153.04
smtp 365178 ( 1.08%) 154857839 ( 0.74%) 424.06
ftp 26084 ( 0.08%) 2649419 ( 0.01%) 101.57
pop3 20806 ( 0.06%) 6606175 ( 0.03%) 317.51
imap 4006 ( 0.01%) 2665040 ( 0.01%) 665.26
telnet 7812 ( 0.02%) 591337 ( 0.00%) 75.70
ssh 40993 ( 0.12%) 22326968 ( 0.11%) 544.65
dns 60894 ( 0.18%) 4164670 ( 0.02%) 68.39
bgp 145 ( 0.00%) 49753 ( 0.00%) 343.12
napster 51 ( 0.00%) 8362 ( 0.00%) 163.96
realaud 13 ( 0.00%) 1553 ( 0.00%) 119.46
rtsp 143527 ( 0.42%) 57170844 ( 0.27%) 398.33
icecast 14693 ( 0.04%) 940737 ( 0.00%) 64.03
hotline 16 ( 0.00%) 1318 ( 0.00%) 82.38
other 4212436 ( 12.46%) 1776798460 ( 8.48%) 421.80
udp 11373413 ( 33.65%) 5673671281 ( 27.07%) 498.85
dns 1045304 ( 3.09%) 194555507 ( 0.93%) 186.12
realaud 1879 ( 0.01%) 114782 ( 0.00%) 61.09
halflif 206 ( 0.00%) 24406 ( 0.00%) 118.48
starcra 232 ( 0.00%) 31343 ( 0.00%) 135.10
everque 243 ( 0.00%) 50812 ( 0.00%) 209.10
unreal 103 ( 0.00%) 14657 ( 0.00%) 142.30
quake 16 ( 0.00%) 1788 ( 0.00%) 111.75
cuseeme 3 ( 0.00%) 270 ( 0.00%) 90.00
other 10325357 ( 30.55%) 5478831337 ( 26.14%) 530.62
icmp 578720 ( 1.71%) 43677970 ( 0.21%) 75.47
ipip 363 ( 0.00%) 45356 ( 0.00%) 124.95
ipsec 897 ( 0.00%) 295118 ( 0.00%) 329.01
ip6 1982663 ( 5.87%) 1203642965 ( 5.74%) 607.08
other 77847 ( 0.23%) 8392603 ( 0.04%) 107.81
frag 2374 ( 0.01%) 1953543 ( 0.01%) 822.89
ip6 69977 ( 0.21%) 15139670 ( 0.07%) 216.35
tcp6 41646 ( 0.12%) 10017243 ( 0.05%) 240.53
http(s) 3023 ( 0.01%) 4498159 ( 0.02%) 1487.98
http(c) 3512 ( 0.01%) 316737 ( 0.00%) 90.19
smtp 248 ( 0.00%) 93312 ( 0.00%) 376.26
ssh 7043 ( 0.02%) 2493482 ( 0.01%) 354.04
dns 20 ( 0.00%) 4067 ( 0.00%) 203.35
bgp 129 ( 0.00%) 19524 ( 0.00%) 151.35
other 27671 ( 0.08%) 2591962 ( 0.01%) 93.67
udp6 23326 ( 0.07%) 4451290 ( 0.02%) 190.83
dns 23232 ( 0.07%) 4433427 ( 0.02%) 190.83
other 94 ( 0.00%) 17863 ( 0.00%) 190.03
icmp6 4891 ( 0.01%) 572891 ( 0.00%) 117.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 84 ( 0.00%) 94166 ( 0.00%) 1121.02
tcpdump file: 201002251400.dump.gz (814.60 MB)