Traffic Trace Info
DumpFile: 201101021400.dump
FileSize: 1554.46MB
Id: 201101021400
StartTime: Sun Jan 2 14:00:00 2011
EndTime: Sun Jan 2 14:15:00 2011
TotalTime: 900.03 seconds
TotalCapSize: 1224.63MB CapLen: 96 bytes
# of packets: 21614992 (16400.16MB)
AvgRate: 152.87Mbps stddev:21.82M
IP flow (unique src/dst pair) Information
# of flows: 573878 (avg. 37.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 2.7% 2.6% 2.6% 2.2% 1.9% 1.6% 1.5% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 341134
Top 10 bandwidth usage (bytes/total in %):
15.8% 9.9% 8.6% 8.1% 5.2% 3.4% 3.3% 3.2% 2.9% 2.8%
# of IPv6 addresses: 2727
Top 10 bandwidth usage (bytes/total in %):
32.2% 31.3% 21.9% 20.7% 15.8% 15.8% 11.4% 11.4% 6.5% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101021400.pktlen.png)
detailed numbers
[ 32- 63]: 2918422
[ 64- 127]: 5417221
[ 128- 255]: 1108278
[ 256- 511]: 678678
[ 512- 1023]: 579029
[ 1024- 2047]: 10913364
Protocol Breakdown
![[protocol breakdown chart]](201101021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21614992 (100.00%) 17196812994 (100.00%) 795.60
ip 21424570 ( 99.12%) 17071392406 ( 99.27%) 796.81
tcp 14868584 ( 68.79%) 13005011629 ( 75.62%) 874.66
http(s) 7514512 ( 34.77%) 9916633047 ( 57.67%) 1319.66
http(c) 3902325 ( 18.05%) 843117355 ( 4.90%) 216.06
squid 93419 ( 0.43%) 53934215 ( 0.31%) 577.34
smtp 97514 ( 0.45%) 29404505 ( 0.17%) 301.54
ftp 82440 ( 0.38%) 47125422 ( 0.27%) 571.63
pop3 4625 ( 0.02%) 2029013 ( 0.01%) 438.71
imap 2325 ( 0.01%) 1507167 ( 0.01%) 648.24
telnet 681 ( 0.00%) 45654 ( 0.00%) 67.04
ssh 34097 ( 0.16%) 4996522 ( 0.03%) 146.54
dns 5061 ( 0.02%) 390058 ( 0.00%) 77.07
bgp 557 ( 0.00%) 87395 ( 0.00%) 156.90
napster 7732 ( 0.04%) 11679989 ( 0.07%) 1510.60
realaud 34 ( 0.00%) 4611 ( 0.00%) 135.62
rtsp 194 ( 0.00%) 59361 ( 0.00%) 305.98
icecast 1327 ( 0.01%) 533446 ( 0.00%) 401.99
hotline 11 ( 0.00%) 1312 ( 0.00%) 119.27
other 3121729 ( 14.44%) 2093462497 ( 12.17%) 670.61
udp 4315375 ( 19.96%) 2300092391 ( 13.38%) 533.00
dns 600676 ( 2.78%) 84370789 ( 0.49%) 140.46
realaud 86 ( 0.00%) 5290 ( 0.00%) 61.51
halflif 44 ( 0.00%) 3634 ( 0.00%) 82.59
starcra 16 ( 0.00%) 2911 ( 0.00%) 181.94
everque 138 ( 0.00%) 31038 ( 0.00%) 224.91
unreal 41 ( 0.00%) 4705 ( 0.00%) 114.76
quake 12 ( 0.00%) 1607 ( 0.00%) 133.92
cuseeme 3 ( 0.00%) 561 ( 0.00%) 187.00
other 3714262 ( 17.18%) 2215612229 ( 12.88%) 596.51
icmp 459066 ( 2.12%) 111821292 ( 0.65%) 243.58
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9399 ( 0.04%) 2402730 ( 0.01%) 255.64
ip6 1760133 ( 8.14%) 1646281888 ( 9.57%) 935.32
other 11829 ( 0.05%) 5763316 ( 0.03%) 487.22
frag 566 ( 0.00%) 610651 ( 0.00%) 1078.89
ip6 190422 ( 0.88%) 125420588 ( 0.73%) 658.65
tcp6 73551 ( 0.34%) 62382429 ( 0.36%) 848.15
http(s) 1020 ( 0.00%) 1264081 ( 0.01%) 1239.30
http(c) 9739 ( 0.05%) 926307 ( 0.01%) 95.11
squid 10 ( 0.00%) 900 ( 0.00%) 90.00
smtp 91 ( 0.00%) 10563 ( 0.00%) 116.08
ftp 160 ( 0.00%) 16535 ( 0.00%) 103.34
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 284 ( 0.00%) 81393 ( 0.00%) 286.60
bgp 92 ( 0.00%) 19494 ( 0.00%) 211.89
other 62154 ( 0.29%) 60063070 ( 0.35%) 966.36
udp6 27950 ( 0.13%) 8050731 ( 0.05%) 288.04
dns 20774 ( 0.10%) 6388806 ( 0.04%) 307.54
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
other 7174 ( 0.03%) 1661702 ( 0.01%) 231.63
icmp6 11612 ( 0.05%) 1287582 ( 0.01%) 110.88
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 77196 ( 0.36%) 53684472 ( 0.31%) 695.43
tcpdump file: 201101021400.dump.gz (513.58 MB)