Traffic Trace Info
DumpFile: 201101051400.dump
FileSize: 2061.19MB
Id: 201101051400
StartTime: Wed Jan 5 14:00:00 2011
EndTime: Wed Jan 5 14:15:01 2011
TotalTime: 900.50 seconds
TotalCapSize: 1618.94MB CapLen: 96 bytes
# of packets: 28982302 (20898.06MB)
AvgRate: 194.68Mbps stddev:29.96M
IP flow (unique src/dst pair) Information
# of flows: 803841 (avg. 36.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.5% 1.2% 1.1% 1.1% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 451025
Top 10 bandwidth usage (bytes/total in %):
12.2% 7.0% 6.0% 5.4% 2.9% 2.7% 2.6% 2.2% 2.2% 2.0%
# of IPv6 addresses: 3386
Top 10 bandwidth usage (bytes/total in %):
46.1% 25.7% 23.4% 21.0% 20.5% 5.5% 5.5% 3.9% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101051400.pktlen.png)
detailed numbers
[ 32- 63]: 5338253
[ 64- 127]: 7142927
[ 128- 255]: 1418541
[ 256- 511]: 773597
[ 512- 1023]: 642551
[ 1024- 2047]: 13666433
Protocol Breakdown
![[protocol breakdown chart]](201101051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28982302 (100.00%) 21913203288 (100.00%) 756.09
ip 28735355 ( 99.15%) 21797558929 ( 99.47%) 758.56
tcp 23403390 ( 80.75%) 19225690250 ( 87.74%) 821.49
http(s) 11565790 ( 39.91%) 15546276420 ( 70.94%) 1344.16
http(c) 6740822 ( 23.26%) 829962554 ( 3.79%) 123.12
squid 157796 ( 0.54%) 94061454 ( 0.43%) 596.10
smtp 242188 ( 0.84%) 141720272 ( 0.65%) 585.17
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 89993 ( 0.31%) 47798555 ( 0.22%) 531.14
pop3 13598 ( 0.05%) 3698895 ( 0.02%) 272.02
imap 4927 ( 0.02%) 2650336 ( 0.01%) 537.92
telnet 999 ( 0.00%) 78217 ( 0.00%) 78.30
ssh 199382 ( 0.69%) 170380656 ( 0.78%) 854.54
dns 5824 ( 0.02%) 490858 ( 0.00%) 84.28
bgp 576 ( 0.00%) 117114 ( 0.00%) 203.32
napster 176 ( 0.00%) 13926 ( 0.00%) 79.12
realaud 58 ( 0.00%) 3805 ( 0.00%) 65.60
rtsp 69 ( 0.00%) 27584 ( 0.00%) 399.77
icecast 13230 ( 0.05%) 996224 ( 0.00%) 75.30
hotline 7 ( 0.00%) 833 ( 0.00%) 119.00
other 4367947 ( 15.07%) 2387412053 ( 10.89%) 546.58
udp 4266407 ( 14.72%) 2248193820 ( 10.26%) 526.95
dns 765713 ( 2.64%) 119982707 ( 0.55%) 156.69
rip 2 ( 0.00%) 455 ( 0.00%) 227.50
realaud 10 ( 0.00%) 1517 ( 0.00%) 151.70
halflif 22 ( 0.00%) 2292 ( 0.00%) 104.18
starcra 35 ( 0.00%) 6377 ( 0.00%) 182.20
everque 217 ( 0.00%) 36485 ( 0.00%) 168.13
unreal 17 ( 0.00%) 3319 ( 0.00%) 195.24
quake 61 ( 0.00%) 10519 ( 0.00%) 172.44
cuseeme 2 ( 0.00%) 161 ( 0.00%) 80.50
other 3500209 ( 12.08%) 2128067053 ( 9.71%) 607.98
icmp 496709 ( 1.71%) 115702347 ( 0.53%) 232.94
ipip 3229 ( 0.01%) 246958 ( 0.00%) 76.48
ipsec 3084 ( 0.01%) 419496 ( 0.00%) 136.02
ip6 548710 ( 1.89%) 201266254 ( 0.92%) 366.80
other 13826 ( 0.05%) 6039804 ( 0.03%) 436.84
frag 750 ( 0.00%) 809688 ( 0.00%) 1079.58
ip6 246947 ( 0.85%) 115644359 ( 0.53%) 468.30
tcp6 186762 ( 0.64%) 98024606 ( 0.45%) 524.86
http(s) 2711 ( 0.01%) 3260706 ( 0.01%) 1202.77
http(c) 84572 ( 0.29%) 7447964 ( 0.03%) 88.07
squid 27 ( 0.00%) 2286 ( 0.00%) 84.67
smtp 950 ( 0.00%) 117660 ( 0.00%) 123.85
ftp 92 ( 0.00%) 8714 ( 0.00%) 94.72
dns 744 ( 0.00%) 194430 ( 0.00%) 261.33
bgp 105 ( 0.00%) 37475 ( 0.00%) 356.90
other 97561 ( 0.34%) 86955371 ( 0.40%) 891.29
udp6 40960 ( 0.14%) 13155431 ( 0.06%) 321.18
dns 38347 ( 0.13%) 12771187 ( 0.06%) 333.04
other 2613 ( 0.01%) 384244 ( 0.00%) 147.05
icmp6 15169 ( 0.05%) 1617572 ( 0.01%) 106.64
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3944 ( 0.01%) 2831494 ( 0.01%) 717.92
tcpdump file: 201101051400.dump.gz (720.57 MB)