Traffic Trace Info
DumpFile: 201101041400.dump
FileSize: 2278.77MB
Id: 201101041400
StartTime: Tue Jan 4 14:00:01 2011
EndTime: Tue Jan 4 14:15:00 2011
TotalTime: 899.40 seconds
TotalCapSize: 1791.74MB CapLen: 96 bytes
# of packets: 31917051 (23359.24MB)
AvgRate: 217.92Mbps stddev:25.17M
IP flow (unique src/dst pair) Information
# of flows: 756416 (avg. 42.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.7% 2.4% 1.8% 1.8% 1.6% 1.5% 1.3% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 442485
Top 10 bandwidth usage (bytes/total in %):
10.6% 9.7% 7.0% 5.3% 3.3% 2.7% 2.7% 2.5% 2.5% 2.4%
# of IPv6 addresses: 2929
Top 10 bandwidth usage (bytes/total in %):
44.3% 34.6% 21.6% 21.6% 5.2% 5.0% 2.3% 2.2% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101041400.pktlen.png)
detailed numbers
[ 32- 63]: 5015198
[ 64- 127]: 8362757
[ 128- 255]: 1443963
[ 256- 511]: 849179
[ 512- 1023]: 903520
[ 1024- 2047]: 15342434
Protocol Breakdown
![[protocol breakdown chart]](201101041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31917051 (100.00%) 24493939263 (100.00%) 767.42
ip 31782342 ( 99.58%) 24440125581 ( 99.78%) 768.98
tcp 25122385 ( 78.71%) 21159850781 ( 86.39%) 842.27
http(s) 12033725 ( 37.70%) 16280356508 ( 66.47%) 1352.89
http(c) 7025728 ( 22.01%) 908254955 ( 3.71%) 129.28
squid 247886 ( 0.78%) 117575857 ( 0.48%) 474.31
smtp 153876 ( 0.48%) 74041233 ( 0.30%) 481.17
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 58033 ( 0.18%) 25228023 ( 0.10%) 434.72
pop3 10824 ( 0.03%) 3141897 ( 0.01%) 290.27
imap 2815 ( 0.01%) 914777 ( 0.00%) 324.97
telnet 1157 ( 0.00%) 84095 ( 0.00%) 72.68
ssh 103718 ( 0.32%) 60567311 ( 0.25%) 583.96
dns 5551 ( 0.02%) 474487 ( 0.00%) 85.48
bgp 573 ( 0.00%) 109843 ( 0.00%) 191.70
napster 149 ( 0.00%) 11329 ( 0.00%) 76.03
realaud 404 ( 0.00%) 38450 ( 0.00%) 95.17
rtsp 87165 ( 0.27%) 107675863 ( 0.44%) 1235.31
icecast 7600 ( 0.02%) 894283 ( 0.00%) 117.67
hotline 39 ( 0.00%) 3363 ( 0.00%) 86.23
other 5383132 ( 16.87%) 3580477893 ( 14.62%) 665.13
udp 5146876 ( 16.13%) 2687063370 ( 10.97%) 522.08
dns 728270 ( 2.28%) 111418136 ( 0.45%) 152.99
realaud 961 ( 0.00%) 58481 ( 0.00%) 60.85
halflif 29 ( 0.00%) 3041 ( 0.00%) 104.86
starcra 30 ( 0.00%) 4290 ( 0.00%) 143.00
everque 796 ( 0.00%) 552451 ( 0.00%) 694.03
unreal 8 ( 0.00%) 1310 ( 0.00%) 163.75
quake 18 ( 0.00%) 2210 ( 0.00%) 122.78
cuseeme 2 ( 0.00%) 159 ( 0.00%) 79.50
other 4416661 ( 13.84%) 2574936411 ( 10.51%) 583.01
icmp 511714 ( 1.60%) 115676247 ( 0.47%) 226.06
ipip 224 ( 0.00%) 22280 ( 0.00%) 99.46
ipsec 9162 ( 0.03%) 2368588 ( 0.01%) 258.52
ip6 980616 ( 3.07%) 469587489 ( 1.92%) 478.87
other 11365 ( 0.04%) 5556826 ( 0.02%) 488.94
frag 620 ( 0.00%) 701403 ( 0.00%) 1131.30
ip6 134709 ( 0.42%) 53813682 ( 0.22%) 399.48
tcp6 67972 ( 0.21%) 28086109 ( 0.11%) 413.20
http(s) 2442 ( 0.01%) 2939700 ( 0.01%) 1203.81
http(c) 12637 ( 0.04%) 1217558 ( 0.00%) 96.35
smtp 311 ( 0.00%) 43684 ( 0.00%) 140.46
ftp 57 ( 0.00%) 5078 ( 0.00%) 89.09
ssh 15 ( 0.00%) 5130 ( 0.00%) 342.00
dns 780 ( 0.00%) 204109 ( 0.00%) 261.68
bgp 97 ( 0.00%) 22339 ( 0.00%) 230.30
other 51633 ( 0.16%) 23648511 ( 0.10%) 458.01
udp6 35868 ( 0.11%) 11912326 ( 0.05%) 332.12
dns 34787 ( 0.11%) 11754641 ( 0.05%) 337.90
halflif 1 ( 0.00%) 97 ( 0.00%) 97.00
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1079 ( 0.00%) 157478 ( 0.00%) 145.95
icmp6 13514 ( 0.04%) 1424249 ( 0.01%) 105.39
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 17242 ( 0.05%) 12375606 ( 0.05%) 717.76
tcpdump file: 201101041400.dump.gz (781.14 MB)