Traffic Trace Info
DumpFile: 201101081400.dump
FileSize: 2322.00MB
Id: 201101081400
StartTime: Sat Jan 8 14:00:00 2011
EndTime: Sat Jan 8 14:15:00 2011
TotalTime: 899.93 seconds
TotalCapSize: 1816.03MB CapLen: 96 bytes
# of packets: 33158126 (22757.82MB)
AvgRate: 212.15Mbps stddev:23.82M
IP flow (unique src/dst pair) Information
# of flows: 1139307 (avg. 29.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 1.9% 1.5% 1.5% 1.4% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 635839
Top 10 bandwidth usage (bytes/total in %):
10.5% 7.2% 5.2% 4.9% 4.4% 4.3% 2.7% 2.3% 2.2% 2.1%
# of IPv6 addresses: 3228
Top 10 bandwidth usage (bytes/total in %):
31.7% 30.3% 8.5% 8.3% 7.0% 5.8% 5.8% 5.1% 4.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101081400.pktlen.png)
detailed numbers
[ 32- 63]: 6719106
[ 64- 127]: 8322851
[ 128- 255]: 1489885
[ 256- 511]: 1001466
[ 512- 1023]: 757190
[ 1024- 2047]: 14867628
Protocol Breakdown
![[protocol breakdown chart]](201101081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33158126 (100.00%) 23863304642 (100.00%) 719.68
ip 33048642 ( 99.67%) 23821078505 ( 99.82%) 720.79
tcp 25150948 ( 75.85%) 19314963336 ( 80.94%) 767.96
http(s) 11915673 ( 35.94%) 15104283803 ( 63.30%) 1267.60
http(c) 7558834 ( 22.80%) 1981818870 ( 8.30%) 262.19
squid 359650 ( 1.08%) 103950675 ( 0.44%) 289.03
smtp 100552 ( 0.30%) 33769877 ( 0.14%) 335.84
nntp 22 ( 0.00%) 1486 ( 0.00%) 67.55
ftp 43497 ( 0.13%) 12180839 ( 0.05%) 280.04
pop3 38914 ( 0.12%) 39274071 ( 0.16%) 1009.25
imap 1724 ( 0.01%) 623187 ( 0.00%) 361.48
telnet 1254 ( 0.00%) 88675 ( 0.00%) 70.71
ssh 677422 ( 2.04%) 146743571 ( 0.61%) 216.62
dns 9551 ( 0.03%) 863531 ( 0.00%) 90.41
bgp 598 ( 0.00%) 115730 ( 0.00%) 193.53
napster 231 ( 0.00%) 16172 ( 0.00%) 70.01
realaud 131 ( 0.00%) 9933 ( 0.00%) 75.82
rtsp 28010 ( 0.08%) 29439333 ( 0.12%) 1051.03
icecast 6787 ( 0.02%) 787527 ( 0.00%) 116.03
hotline 22 ( 0.00%) 2385 ( 0.00%) 108.41
other 4408073 ( 13.29%) 1860993491 ( 7.80%) 422.18
udp 6580726 ( 19.85%) 3872840799 ( 16.23%) 588.51
dns 724538 ( 2.19%) 111679042 ( 0.47%) 154.14
realaud 15 ( 0.00%) 2217 ( 0.00%) 147.80
halflif 54 ( 0.00%) 6009 ( 0.00%) 111.28
starcra 57 ( 0.00%) 11117 ( 0.00%) 195.04
everque 169 ( 0.00%) 32041 ( 0.00%) 189.59
unreal 32 ( 0.00%) 5441 ( 0.00%) 170.03
quake 45 ( 0.00%) 5034 ( 0.00%) 111.87
cuseeme 8 ( 0.00%) 1612 ( 0.00%) 201.50
other 5855658 ( 17.66%) 3760977584 ( 15.76%) 642.28
icmp 540295 ( 1.63%) 86341470 ( 0.36%) 159.80
ipip 243860 ( 0.74%) 347496189 ( 1.46%) 1424.98
ipsec 2277 ( 0.01%) 840678 ( 0.00%) 369.20
ip6 516326 ( 1.56%) 194983597 ( 0.82%) 377.64
other 14210 ( 0.04%) 3612436 ( 0.02%) 254.22
frag 774 ( 0.00%) 848352 ( 0.00%) 1096.06
ip6 109484 ( 0.33%) 42226137 ( 0.18%) 385.68
tcp6 61808 ( 0.19%) 29731202 ( 0.12%) 481.03
http(s) 1487 ( 0.00%) 1710114 ( 0.01%) 1150.04
http(c) 20339 ( 0.06%) 1817229 ( 0.01%) 89.35
squid 5 ( 0.00%) 450 ( 0.00%) 90.00
smtp 309 ( 0.00%) 136810 ( 0.00%) 442.75
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 483 ( 0.00%) 133927 ( 0.00%) 277.28
bgp 105 ( 0.00%) 23309 ( 0.00%) 221.99
other 39042 ( 0.12%) 25905889 ( 0.11%) 663.54
udp6 29706 ( 0.09%) 9680269 ( 0.04%) 325.87
dns 28283 ( 0.09%) 9438863 ( 0.04%) 333.73
other 1423 ( 0.00%) 241406 ( 0.00%) 169.65
icmp6 16715 ( 0.05%) 1721814 ( 0.01%) 103.01
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1141 ( 0.00%) 1077342 ( 0.00%) 944.21
tcpdump file: 201101081400.dump.gz (813.90 MB)