Traffic Trace Info
DumpFile: 201101031400.dump
FileSize: 2069.66MB
Id: 201101031400
StartTime: Mon Jan 3 14:00:01 2011
EndTime: Mon Jan 3 14:15:01 2011
TotalTime: 900.01 seconds
TotalCapSize: 1622.30MB CapLen: 96 bytes
# of packets: 29316211 (23479.64MB)
AvgRate: 218.84Mbps stddev:26.17M
IP flow (unique src/dst pair) Information
# of flows: 673420 (avg. 43.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 3.6% 2.8% 2.7% 2.1% 1.9% 1.8% 1.5% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 405268
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.7% 7.9% 7.1% 6.5% 5.9% 5.3% 3.7% 3.7% 2.9%
# of IPv6 addresses: 2647
Top 10 bandwidth usage (bytes/total in %):
30.5% 30.5% 30.2% 17.1% 13.1% 10.6% 9.6% 7.4% 5.8% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101031400.pktlen.png)
detailed numbers
[ 32- 63]: 4544932
[ 64- 127]: 6542167
[ 128- 255]: 1132657
[ 256- 511]: 634850
[ 512- 1023]: 785228
[ 1024- 2047]: 15676377
Protocol Breakdown
![[protocol breakdown chart]](201101031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29316211 (100.00%) 24620190272 (100.00%) 839.81
ip 29219732 ( 99.67%) 24567886387 ( 99.79%) 840.80
tcp 23171455 ( 79.04%) 21346678495 ( 86.70%) 921.25
http(s) 13005548 ( 44.36%) 17937464182 ( 72.86%) 1379.22
http(c) 5486895 ( 18.72%) 443569110 ( 1.80%) 80.84
squid 217920 ( 0.74%) 170644259 ( 0.69%) 783.06
smtp 183721 ( 0.63%) 32339789 ( 0.13%) 176.03
ftp 78660 ( 0.27%) 47889363 ( 0.19%) 608.81
pop3 7794 ( 0.03%) 4931592 ( 0.02%) 632.74
imap 1934 ( 0.01%) 812855 ( 0.00%) 420.30
telnet 754 ( 0.00%) 53781 ( 0.00%) 71.33
ssh 126386 ( 0.43%) 94528440 ( 0.38%) 747.93
dns 5486 ( 0.02%) 453950 ( 0.00%) 82.75
bgp 578 ( 0.00%) 111170 ( 0.00%) 192.34
napster 30 ( 0.00%) 2096 ( 0.00%) 69.87
realaud 41 ( 0.00%) 4630 ( 0.00%) 112.93
rtsp 169 ( 0.00%) 51431 ( 0.00%) 304.33
icecast 5563 ( 0.02%) 497326 ( 0.00%) 89.40
hotline 12 ( 0.00%) 780 ( 0.00%) 65.00
other 4049963 ( 13.81%) 2613323681 ( 10.61%) 645.27
udp 4885478 ( 16.66%) 2789847195 ( 11.33%) 571.05
dns 647019 ( 2.21%) 100023108 ( 0.41%) 154.59
realaud 535 ( 0.00%) 32336 ( 0.00%) 60.44
halflif 22 ( 0.00%) 1687 ( 0.00%) 76.68
starcra 72 ( 0.00%) 14377 ( 0.00%) 199.68
everque 206 ( 0.00%) 33130 ( 0.00%) 160.83
unreal 14 ( 0.00%) 2190 ( 0.00%) 156.43
quake 31 ( 0.00%) 3232 ( 0.00%) 104.26
cuseeme 2 ( 0.00%) 220 ( 0.00%) 110.00
other 4237483 ( 14.45%) 2689649070 ( 10.92%) 634.73
icmp 476674 ( 1.63%) 113969236 ( 0.46%) 239.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9476 ( 0.03%) 2411280 ( 0.01%) 254.46
ip6 666444 ( 2.27%) 309617400 ( 1.26%) 464.58
other 10020 ( 0.03%) 5343511 ( 0.02%) 533.28
frag 498 ( 0.00%) 563336 ( 0.00%) 1131.20
ip6 96479 ( 0.33%) 52303885 ( 0.21%) 542.13
tcp6 59108 ( 0.20%) 43490172 ( 0.18%) 735.77
http(s) 924 ( 0.00%) 1051356 ( 0.00%) 1137.83
http(c) 16878 ( 0.06%) 1561385 ( 0.01%) 92.51
smtp 182 ( 0.00%) 90434 ( 0.00%) 496.89
ftp 57 ( 0.00%) 5078 ( 0.00%) 89.09
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 480 ( 0.00%) 124313 ( 0.00%) 258.99
bgp 88 ( 0.00%) 17569 ( 0.00%) 199.65
other 40498 ( 0.14%) 40639951 ( 0.17%) 1003.51
udp6 23823 ( 0.08%) 7251192 ( 0.03%) 304.38
dns 22842 ( 0.08%) 7090143 ( 0.03%) 310.40
starcra 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 979 ( 0.00%) 160823 ( 0.00%) 164.27
icmp6 13305 ( 0.05%) 1424780 ( 0.01%) 107.09
ip6 79 ( 0.00%) 10872 ( 0.00%) 137.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 134 ( 0.00%) 122789 ( 0.00%) 916.34
tcpdump file: 201101031400.dump.gz (697.66 MB)