Traffic Trace Info
DumpFile: 201101011400.dump
FileSize: 1609.76MB
Id: 201101011400
StartTime: Sat Jan 1 14:00:00 2011
EndTime: Sat Jan 1 14:15:01 2011
TotalTime: 900.87 seconds
TotalCapSize: 1260.89MB CapLen: 96 bytes
# of packets: 22863072 (16415.34MB)
AvgRate: 152.86Mbps stddev:21.59M
IP flow (unique src/dst pair) Information
# of flows: 933248 (avg. 24.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 3.7% 3.1% 2.7% 2.4% 2.2% 2.2% 1.8% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 580097
Top 10 bandwidth usage (bytes/total in %):
16.3% 8.3% 8.1% 7.2% 7.2% 5.1% 4.5% 3.8% 3.6% 2.9%
# of IPv6 addresses: 2767
Top 10 bandwidth usage (bytes/total in %):
94.5% 94.1% 3.0% 3.0% 0.4% 0.2% 0.2% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101011400.pktlen.png)
detailed numbers
[ 32- 63]: 4788124
[ 64- 127]: 5159865
[ 128- 255]: 947385
[ 256- 511]: 569487
[ 512- 1023]: 611831
[ 1024- 2047]: 10786380
Protocol Breakdown
![[protocol breakdown chart]](201101011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22863072 (100.00%) 17212735133 (100.00%) 752.86
ip 22421839 ( 98.07%) 16640787591 ( 96.68%) 742.17
tcp 17061889 ( 74.63%) 14026002012 ( 81.49%) 822.07
http(s) 7928140 ( 34.68%) 10029008709 ( 58.27%) 1264.99
http(c) 4855711 ( 21.24%) 1580946354 ( 9.18%) 325.58
squid 103169 ( 0.45%) 50178891 ( 0.29%) 486.38
smtp 106331 ( 0.47%) 29041039 ( 0.17%) 273.12
ftp 69220 ( 0.30%) 34389581 ( 0.20%) 496.82
pop3 24825 ( 0.11%) 5090650 ( 0.03%) 205.06
imap 2563 ( 0.01%) 1619400 ( 0.01%) 631.84
telnet 667 ( 0.00%) 45081 ( 0.00%) 67.59
ssh 98819 ( 0.43%) 11867616 ( 0.07%) 120.09
dns 4836 ( 0.02%) 370342 ( 0.00%) 76.58
bgp 558 ( 0.00%) 93416 ( 0.00%) 167.41
napster 12 ( 0.00%) 1527 ( 0.00%) 127.25
realaud 13 ( 0.00%) 1274 ( 0.00%) 98.00
rtsp 31212 ( 0.14%) 33254691 ( 0.19%) 1065.45
icecast 2134 ( 0.01%) 413482 ( 0.00%) 193.76
hotline 15 ( 0.00%) 1171 ( 0.00%) 78.07
other 3833664 ( 16.77%) 2249678788 ( 13.07%) 586.82
udp 3954990 ( 17.30%) 2172122492 ( 12.62%) 549.21
dns 607096 ( 2.66%) 89496424 ( 0.52%) 147.42
realaud 1820 ( 0.01%) 109889 ( 0.00%) 60.38
halflif 40 ( 0.00%) 3382 ( 0.00%) 84.55
starcra 31 ( 0.00%) 4864 ( 0.00%) 156.90
everque 2046 ( 0.01%) 1461759 ( 0.01%) 714.45
unreal 38 ( 0.00%) 3473 ( 0.00%) 91.39
quake 10 ( 0.00%) 927 ( 0.00%) 92.70
cuseeme 7 ( 0.00%) 1378 ( 0.00%) 196.86
other 3343803 ( 14.63%) 2080965557 ( 12.09%) 622.33
icmp 509227 ( 2.23%) 123986120 ( 0.72%) 243.48
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9401 ( 0.04%) 2418534 ( 0.01%) 257.26
ip6 873233 ( 3.82%) 310458584 ( 1.80%) 355.53
other 12914 ( 0.06%) 5780579 ( 0.03%) 447.62
frag 549 ( 0.00%) 574326 ( 0.00%) 1046.13
ip6 441233 ( 1.93%) 571947542 ( 3.32%) 1296.25
tcp6 400934 ( 1.75%) 562724555 ( 3.27%) 1403.53
http(s) 1821 ( 0.01%) 2128115 ( 0.01%) 1168.65
http(c) 13705 ( 0.06%) 1272298 ( 0.01%) 92.83
smtp 324 ( 0.00%) 91358 ( 0.00%) 281.97
ftp 114 ( 0.00%) 10208 ( 0.00%) 89.54
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 291 ( 0.00%) 74724 ( 0.00%) 256.78
bgp 95 ( 0.00%) 20501 ( 0.00%) 215.80
other 384583 ( 1.68%) 559127265 ( 3.25%) 1453.85
udp6 25307 ( 0.11%) 7435399 ( 0.04%) 293.81
dns 23858 ( 0.10%) 7214513 ( 0.04%) 302.39
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1448 ( 0.01%) 220782 ( 0.00%) 152.47
icmp6 14641 ( 0.06%) 1521628 ( 0.01%) 103.93
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 239 ( 0.00%) 250686 ( 0.00%) 1048.90
tcpdump file: 201101011400.dump.gz (538.20 MB)