Traffic Trace Info
DumpFile: 201101071400.dump
FileSize: 2598.52MB
Id: 201101071400
StartTime: Fri Jan 7 14:00:01 2011
EndTime: Fri Jan 7 14:15:01 2011
TotalTime: 900.16 seconds
TotalCapSize: 2036.38MB CapLen: 96 bytes
# of packets: 36839741 (26736.15MB)
AvgRate: 249.17Mbps stddev:29.11M
IP flow (unique src/dst pair) Information
# of flows: 1129296 (avg. 32.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.9% 1.5% 1.5% 1.2% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 623933
Top 10 bandwidth usage (bytes/total in %):
9.4% 6.4% 6.1% 4.3% 3.6% 3.4% 3.3% 2.9% 2.8% 2.1%
# of IPv6 addresses: 3375
Top 10 bandwidth usage (bytes/total in %):
27.6% 22.2% 5.9% 5.8% 5.4% 5.4% 5.4% 5.4% 5.2% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101071400.pktlen.png)
detailed numbers
[ 32- 63]: 7252327
[ 64- 127]: 8927352
[ 128- 255]: 1314422
[ 256- 511]: 954405
[ 512- 1023]: 846644
[ 1024- 2047]: 17544591
Protocol Breakdown
![[protocol breakdown chart]](201101071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36839741 (100.00%) 28034881099 (100.00%) 761.00
ip 36721693 ( 99.68%) 27993569118 ( 99.85%) 762.32
tcp 29592834 ( 80.33%) 24337220839 ( 86.81%) 822.40
http(s) 15416197 ( 41.85%) 20718396894 ( 73.90%) 1343.94
http(c) 9504320 ( 25.80%) 1402766979 ( 5.00%) 147.59
squid 200889 ( 0.55%) 135065685 ( 0.48%) 672.34
smtp 271789 ( 0.74%) 222746479 ( 0.79%) 819.56
nntp 16 ( 0.00%) 1024 ( 0.00%) 64.00
ftp 47083 ( 0.13%) 12988480 ( 0.05%) 275.86
pop3 22528 ( 0.06%) 3532692 ( 0.01%) 156.81
imap 5639 ( 0.02%) 1688425 ( 0.01%) 299.42
telnet 1241 ( 0.00%) 162222 ( 0.00%) 130.72
ssh 50239 ( 0.14%) 7056597 ( 0.03%) 140.46
dns 10040 ( 0.03%) 936148 ( 0.00%) 93.24
bgp 584 ( 0.00%) 91846 ( 0.00%) 157.27
napster 192 ( 0.00%) 15510 ( 0.00%) 80.78
realaud 203 ( 0.00%) 24190 ( 0.00%) 119.16
rtsp 21288 ( 0.06%) 20496086 ( 0.07%) 962.80
icecast 8311 ( 0.02%) 617100 ( 0.00%) 74.25
hotline 418 ( 0.00%) 26562 ( 0.00%) 63.55
other 4031856 ( 10.94%) 1810607860 ( 6.46%) 449.08
udp 5754109 ( 15.62%) 3231765718 ( 11.53%) 561.64
dns 892697 ( 2.42%) 139001538 ( 0.50%) 155.71
realaud 11 ( 0.00%) 1697 ( 0.00%) 154.27
halflif 53 ( 0.00%) 5510 ( 0.00%) 103.96
starcra 37 ( 0.00%) 6590 ( 0.00%) 178.11
everque 997 ( 0.00%) 165560 ( 0.00%) 166.06
unreal 18 ( 0.00%) 2657 ( 0.00%) 147.61
quake 15 ( 0.00%) 1572 ( 0.00%) 104.80
cuseeme 6 ( 0.00%) 866 ( 0.00%) 144.33
other 4837590 ( 13.13%) 3091055711 ( 11.03%) 638.97
icmp 789062 ( 2.14%) 137260037 ( 0.49%) 173.95
ipip 1217 ( 0.00%) 101134 ( 0.00%) 83.10
ipsec 5400 ( 0.01%) 926384 ( 0.00%) 171.55
ip6 564532 ( 1.53%) 281152365 ( 1.00%) 498.03
other 14539 ( 0.04%) 5142641 ( 0.02%) 353.71
frag 62327 ( 0.17%) 47278974 ( 0.17%) 758.56
ip6 118048 ( 0.32%) 41311981 ( 0.15%) 349.96
tcp6 58408 ( 0.16%) 25120348 ( 0.09%) 430.08
http(s) 2981 ( 0.01%) 3684814 ( 0.01%) 1236.10
http(c) 26964 ( 0.07%) 2345113 ( 0.01%) 86.97
smtp 218 ( 0.00%) 40860 ( 0.00%) 187.43
ftp 57 ( 0.00%) 5078 ( 0.00%) 89.09
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 608 ( 0.00%) 159122 ( 0.00%) 261.71
bgp 87 ( 0.00%) 17410 ( 0.00%) 200.11
other 27490 ( 0.07%) 18867621 ( 0.07%) 686.34
udp6 40861 ( 0.11%) 13303908 ( 0.05%) 325.59
dns 39203 ( 0.11%) 13059876 ( 0.05%) 333.13
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 1657 ( 0.00%) 243919 ( 0.00%) 147.21
icmp6 17063 ( 0.05%) 1640450 ( 0.01%) 96.14
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1606 ( 0.00%) 1232255 ( 0.00%) 767.28
tcpdump file: 201101071400.dump.gz (895.24 MB)