Traffic Trace Info
DumpFile: 201101061400.dump
FileSize: 2613.67MB
Id: 201101061400
StartTime: Thu Jan 6 14:00:00 2011
EndTime: Thu Jan 6 14:15:00 2011
TotalTime: 900.32 seconds
TotalCapSize: 2047.60MB CapLen: 96 bytes
# of packets: 37097053 (25167.87MB)
AvgRate: 234.51Mbps stddev:29.44M
IP flow (unique src/dst pair) Information
# of flows: 971812 (avg. 38.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.9% 1.5% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 531287
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.3% 5.5% 4.1% 2.9% 2.5% 2.5% 2.5% 2.0% 1.8%
# of IPv6 addresses: 3334
Top 10 bandwidth usage (bytes/total in %):
86.8% 74.0% 13.3% 2.6% 2.6% 2.1% 2.1% 1.3% 1.3% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101061400.pktlen.png)
detailed numbers
[ 32- 63]: 8103419
[ 64- 127]: 9238295
[ 128- 255]: 1436151
[ 256- 511]: 1005702
[ 512- 1023]: 842157
[ 1024- 2047]: 16471329
Protocol Breakdown
![[protocol breakdown chart]](201101061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37097053 (100.00%) 26390421966 (100.00%) 711.39
ip 36773651 ( 99.13%) 26051945174 ( 98.72%) 708.44
tcp 29314043 ( 79.02%) 22101452930 ( 83.75%) 753.95
http(s) 13139212 ( 35.42%) 17611124978 ( 66.73%) 1340.35
http(c) 9492020 ( 25.59%) 1375924133 ( 5.21%) 144.96
squid 148618 ( 0.40%) 85040028 ( 0.32%) 572.21
smtp 157145 ( 0.42%) 87333823 ( 0.33%) 555.75
nntp 4 ( 0.00%) 254 ( 0.00%) 63.50
ftp 63095 ( 0.17%) 7945578 ( 0.03%) 125.93
pop3 60319 ( 0.16%) 18579312 ( 0.07%) 308.02
imap 3729 ( 0.01%) 938134 ( 0.00%) 251.58
telnet 2394 ( 0.01%) 168830 ( 0.00%) 70.52
ssh 185074 ( 0.50%) 82442965 ( 0.31%) 445.46
dns 8279 ( 0.02%) 702866 ( 0.00%) 84.90
bgp 593 ( 0.00%) 112182 ( 0.00%) 189.18
napster 118 ( 0.00%) 7937 ( 0.00%) 67.26
realaud 84 ( 0.00%) 20310 ( 0.00%) 241.79
rtsp 23977 ( 0.06%) 33552992 ( 0.13%) 1399.38
icecast 18182 ( 0.05%) 11958293 ( 0.05%) 657.70
hotline 174 ( 0.00%) 30247 ( 0.00%) 173.83
other 6011021 ( 16.20%) 2785569768 ( 10.56%) 463.41
udp 6290735 ( 16.96%) 3677385064 ( 13.93%) 584.57
dns 847527 ( 2.28%) 129182391 ( 0.49%) 152.42
realaud 147 ( 0.00%) 11140 ( 0.00%) 75.78
halflif 39 ( 0.00%) 4790 ( 0.00%) 122.82
starcra 27 ( 0.00%) 2767 ( 0.00%) 102.48
everque 41525 ( 0.11%) 26471266 ( 0.10%) 637.48
unreal 31 ( 0.00%) 4373 ( 0.00%) 141.06
quake 20 ( 0.00%) 1691 ( 0.00%) 84.55
cuseeme 7 ( 0.00%) 893 ( 0.00%) 127.57
other 5391230 ( 14.53%) 3520784596 ( 13.34%) 653.06
icmp 539657 ( 1.45%) 116065667 ( 0.44%) 215.07
ipip 1211 ( 0.00%) 100742 ( 0.00%) 83.19
ipsec 3291 ( 0.01%) 454170 ( 0.00%) 138.00
ip6 606963 ( 1.64%) 153793215 ( 0.58%) 253.38
other 17751 ( 0.05%) 2693386 ( 0.01%) 151.73
frag 22437 ( 0.06%) 17239178 ( 0.07%) 768.34
ip6 323402 ( 0.87%) 338476792 ( 1.28%) 1046.61
tcp6 255317 ( 0.69%) 315908995 ( 1.20%) 1237.32
http(s) 5618 ( 0.02%) 7520806 ( 0.03%) 1338.70
http(c) 20249 ( 0.05%) 1769665 ( 0.01%) 87.40
squid 3 ( 0.00%) 246 ( 0.00%) 82.00
smtp 613 ( 0.00%) 318975 ( 0.00%) 520.35
ftp 57 ( 0.00%) 5078 ( 0.00%) 89.09
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 849 ( 0.00%) 212794 ( 0.00%) 250.64
bgp 90 ( 0.00%) 21614 ( 0.00%) 240.16
other 227835 ( 0.61%) 306059487 ( 1.16%) 1343.34
udp6 41701 ( 0.11%) 13730090 ( 0.05%) 329.25
dns 40452 ( 0.11%) 13542459 ( 0.05%) 334.78
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
starcra 3 ( 0.00%) 787 ( 0.00%) 262.33
other 1245 ( 0.00%) 186748 ( 0.00%) 150.00
icmp6 16126 ( 0.04%) 1652412 ( 0.01%) 102.47
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10147 ( 0.03%) 7170107 ( 0.03%) 706.62
tcpdump file: 201101061400.dump.gz (924.68 MB)