Traffic Trace Info
DumpFile: 201002281400.dump
FileSize: 1863.31MB
Id: 201002281400
StartTime: Sun Feb 28 14:00:00 2010
EndTime: Sun Feb 28 14:15:00 2010
TotalTime: 900.19 seconds
TotalCapSize: 1440.36MB CapLen: 96 bytes
# of packets: 27718038 (15432.00MB)
AvgRate: 143.77Mbps stddev:14.94M
IP flow (unique src/dst pair) Information
# of flows: 763956 (avg. 36.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 6.9% 4.5% 2.5% 1.8% 1.8% 1.3% 1.2% 1.2% 0.8%
IP address Information
# of IPv4 addresses: 464392
Top 10 bandwidth usage (bytes/total in %):
29.3% 13.3% 10.2% 7.3% 7.1% 6.4% 4.6% 4.4% 2.6% 1.8%
# of IPv6 addresses: 764
Top 10 bandwidth usage (bytes/total in %):
34.4% 11.3% 9.1% 8.9% 7.8% 4.1% 3.5% 3.3% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002281400.pktlen.png)
detailed numbers
[ 32- 63]: 3612129
[ 64- 127]: 9144779
[ 128- 255]: 2394969
[ 256- 511]: 2009576
[ 512- 1023]: 707368
[ 1024- 2047]: 9849217
Protocol Breakdown
![[protocol breakdown chart]](201002281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27718038 (100.00%) 16181620608 (100.00%) 583.79
ip 27680248 ( 99.86%) 16176366066 ( 99.97%) 584.40
tcp 12905652 ( 46.56%) 8799493839 ( 54.38%) 681.83
http(s) 4234005 ( 15.28%) 5729690874 ( 35.41%) 1353.26
http(c) 2958395 ( 10.67%) 354626997 ( 2.19%) 119.87
squid 765732 ( 2.76%) 117165773 ( 0.72%) 153.01
smtp 180560 ( 0.65%) 37450665 ( 0.23%) 207.41
ftp 39316 ( 0.14%) 10226855 ( 0.06%) 260.12
pop3 24653 ( 0.09%) 21971711 ( 0.14%) 891.24
imap 10138 ( 0.04%) 12886156 ( 0.08%) 1271.07
telnet 4326 ( 0.02%) 319832 ( 0.00%) 73.93
ssh 20974 ( 0.08%) 3224013 ( 0.02%) 153.71
dns 58143 ( 0.21%) 3978362 ( 0.02%) 68.42
bgp 155 ( 0.00%) 58797 ( 0.00%) 379.34
napster 71 ( 0.00%) 8076 ( 0.00%) 113.75
realaud 10 ( 0.00%) 1087 ( 0.00%) 108.70
rtsp 48 ( 0.00%) 3552 ( 0.00%) 74.00
icecast 694 ( 0.00%) 49664 ( 0.00%) 71.56
other 4608429 ( 16.63%) 2507831245 ( 15.50%) 544.18
udp 12309419 ( 44.41%) 6291779711 ( 38.88%) 511.14
dns 722760 ( 2.61%) 111185874 ( 0.69%) 153.84
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 26 ( 0.00%) 3389 ( 0.00%) 130.35
halflif 196 ( 0.00%) 29539 ( 0.00%) 150.71
starcra 263 ( 0.00%) 39805 ( 0.00%) 151.35
everque 845 ( 0.00%) 90854 ( 0.00%) 107.52
unreal 105 ( 0.00%) 16148 ( 0.00%) 153.79
quake 44 ( 0.00%) 4202 ( 0.00%) 95.50
cuseeme 5 ( 0.00%) 482 ( 0.00%) 96.40
other 11582317 ( 41.79%) 6180173837 ( 38.19%) 533.59
icmp 501051 ( 1.81%) 37906925 ( 0.23%) 75.65
ipip 365 ( 0.00%) 46354 ( 0.00%) 127.00
ipsec 666 ( 0.00%) 170684 ( 0.00%) 256.28
ip6 1961764 ( 7.08%) 1046767218 ( 6.47%) 533.58
other 1331 ( 0.00%) 201335 ( 0.00%) 151.27
frag 24973 ( 0.09%) 19737594 ( 0.12%) 790.36
ip6 37790 ( 0.14%) 5254542 ( 0.03%) 139.05
tcp6 16227 ( 0.06%) 1542143 ( 0.01%) 95.04
http(c) 3619 ( 0.01%) 342068 ( 0.00%) 94.52
smtp 17 ( 0.00%) 2049 ( 0.00%) 120.53
ftp 2691 ( 0.01%) 278485 ( 0.00%) 103.49
ssh 3220 ( 0.01%) 266612 ( 0.00%) 82.80
dns 15 ( 0.00%) 5224 ( 0.00%) 348.27
bgp 126 ( 0.00%) 16650 ( 0.00%) 132.14
other 6539 ( 0.02%) 631055 ( 0.00%) 96.51
udp6 18149 ( 0.07%) 3299170 ( 0.02%) 181.78
dns 18122 ( 0.07%) 3294136 ( 0.02%) 181.78
other 27 ( 0.00%) 5034 ( 0.00%) 186.44
icmp6 3367 ( 0.01%) 393165 ( 0.00%) 116.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 15984 ( 0.00%) 940.24
tcpdump file: 201002281400.dump.gz (677.03 MB)