Traffic Trace Info
DumpFile: 201002271400.dump
FileSize: 2012.20MB
Id: 201002271400
StartTime: Sat Feb 27 14:00:01 2010
EndTime: Sat Feb 27 14:15:00 2010
TotalTime: 899.05 seconds
TotalCapSize: 1556.55MB CapLen: 96 bytes
# of packets: 29860516 (15839.21MB)
AvgRate: 147.79Mbps stddev:16.53M
IP flow (unique src/dst pair) Information
# of flows: 853582 (avg. 34.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.5% 1.8% 1.7% 1.6% 1.4% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 499069
Top 10 bandwidth usage (bytes/total in %):
30.0% 6.0% 4.7% 4.2% 4.0% 2.7% 2.5% 2.3% 2.2% 2.1%
# of IPv6 addresses: 860
Top 10 bandwidth usage (bytes/total in %):
37.1% 32.3% 18.2% 14.3% 6.0% 4.8% 4.8% 4.8% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002271400.pktlen.png)
detailed numbers
[ 32- 63]: 5400125
[ 64- 127]: 9547182
[ 128- 255]: 2204774
[ 256- 511]: 2244549
[ 512- 1023]: 630115
[ 1024- 2047]: 9833771
Protocol Breakdown
![[protocol breakdown chart]](201002271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29860516 (100.00%) 16608610913 (100.00%) 556.21
ip 29778184 ( 99.72%) 16598703876 ( 99.94%) 557.41
tcp 15682708 ( 52.52%) 9776330059 ( 58.86%) 623.38
http(s) 5200883 ( 17.42%) 7116100383 ( 42.85%) 1368.25
http(c) 4042418 ( 13.54%) 664102636 ( 4.00%) 164.28
squid 848162 ( 2.84%) 157182776 ( 0.95%) 185.32
smtp 191516 ( 0.64%) 44723302 ( 0.27%) 233.52
ftp 46240 ( 0.15%) 9394941 ( 0.06%) 203.18
pop3 16610 ( 0.06%) 12443023 ( 0.07%) 749.13
imap 1438 ( 0.00%) 606222 ( 0.00%) 421.57
telnet 7070 ( 0.02%) 517935 ( 0.00%) 73.26
ssh 132863 ( 0.44%) 20680470 ( 0.12%) 155.65
dns 62837 ( 0.21%) 4293187 ( 0.03%) 68.32
bgp 133 ( 0.00%) 41634 ( 0.00%) 313.04
napster 4 ( 0.00%) 264 ( 0.00%) 66.00
realaud 6935 ( 0.02%) 457704 ( 0.00%) 66.00
rtsp 668488 ( 2.24%) 41840736 ( 0.25%) 62.59
icecast 5038 ( 0.02%) 331831 ( 0.00%) 65.87
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 4452065 ( 14.91%) 1703612531 ( 10.26%) 382.66
udp 11525786 ( 38.60%) 5775925031 ( 34.78%) 501.13
dns 892063 ( 2.99%) 134475712 ( 0.81%) 150.75
realaud 3626 ( 0.01%) 218784 ( 0.00%) 60.34
halflif 89 ( 0.00%) 12566 ( 0.00%) 141.19
starcra 276 ( 0.00%) 31342 ( 0.00%) 113.56
everque 206 ( 0.00%) 51646 ( 0.00%) 250.71
unreal 53 ( 0.00%) 8054 ( 0.00%) 151.96
quake 17 ( 0.00%) 1817 ( 0.00%) 106.88
cuseeme 1 ( 0.00%) 70 ( 0.00%) 70.00
other 10623264 ( 35.58%) 5640655306 ( 33.96%) 530.97
icmp 516025 ( 1.73%) 38310968 ( 0.23%) 74.24
ipip 360 ( 0.00%) 45628 ( 0.00%) 126.74
ipsec 447 ( 0.00%) 83530 ( 0.00%) 186.87
ip6 2032204 ( 6.81%) 1003988851 ( 6.04%) 494.04
other 20654 ( 0.07%) 4019809 ( 0.02%) 194.63
frag 18467 ( 0.06%) 12397965 ( 0.07%) 671.36
ip6 82332 ( 0.28%) 9907037 ( 0.06%) 120.33
tcp6 59297 ( 0.20%) 5822733 ( 0.04%) 98.20
http(c) 3529 ( 0.01%) 318292 ( 0.00%) 90.19
smtp 227 ( 0.00%) 91442 ( 0.00%) 402.83
ftp 8090 ( 0.03%) 796495 ( 0.00%) 98.45
ssh 3203 ( 0.01%) 265198 ( 0.00%) 82.80
dns 15 ( 0.00%) 2047 ( 0.00%) 136.47
bgp 123 ( 0.00%) 17997 ( 0.00%) 146.32
realaud 5 ( 0.00%) 442 ( 0.00%) 88.40
other 44105 ( 0.15%) 4330820 ( 0.03%) 98.19
udp6 19414 ( 0.07%) 3632034 ( 0.02%) 187.08
dns 19365 ( 0.06%) 3620146 ( 0.02%) 186.94
other 49 ( 0.00%) 11888 ( 0.00%) 242.61
icmp6 3565 ( 0.01%) 420243 ( 0.00%) 117.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 27947 ( 0.00%) 1074.88
tcpdump file: 201002271400.dump.gz (725.99 MB)