Traffic Trace Info
DumpFile: 201101091400.dump
FileSize: 2030.17MB
Id: 201101091400
StartTime: Sun Jan 9 14:00:01 2011
EndTime: Sun Jan 9 14:15:00 2011
TotalTime: 899.20 seconds
TotalCapSize: 1588.48MB CapLen: 96 bytes
# of packets: 28944127 (20809.67MB)
AvgRate: 194.17Mbps stddev:27.21M
IP flow (unique src/dst pair) Information
# of flows: 731362 (avg. 39.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.5% 2.1% 1.6% 1.4% 1.2% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 420401
Top 10 bandwidth usage (bytes/total in %):
13.9% 10.0% 7.6% 5.3% 3.8% 3.6% 3.6% 3.0% 2.4% 2.3%
# of IPv6 addresses: 2893
Top 10 bandwidth usage (bytes/total in %):
45.1% 27.0% 16.6% 11.6% 11.6% 9.8% 9.8% 6.0% 6.0% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101091400.pktlen.png)
detailed numbers
[ 32- 63]: 5224343
[ 64- 127]: 6514139
[ 128- 255]: 1193397
[ 256- 511]: 930213
[ 512- 1023]: 1871905
[ 1024- 2047]: 13210130
Protocol Breakdown
![[protocol breakdown chart]](201101091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28944127 (100.00%) 21820517640 (100.00%) 753.88
ip 28852248 ( 99.68%) 21763855753 ( 99.74%) 754.32
tcp 22778793 ( 78.70%) 18310329629 ( 83.91%) 803.83
http(s) 11178777 ( 38.62%) 14539529683 ( 66.63%) 1300.64
http(c) 6611077 ( 22.84%) 1374076587 ( 6.30%) 207.84
squid 233089 ( 0.81%) 151137936 ( 0.69%) 648.41
smtp 81582 ( 0.28%) 20429172 ( 0.09%) 250.41
nntp 17 ( 0.00%) 1052 ( 0.00%) 61.88
ftp 41766 ( 0.14%) 9923826 ( 0.05%) 237.61
pop3 6654 ( 0.02%) 2705792 ( 0.01%) 406.64
imap 1936 ( 0.01%) 429052 ( 0.00%) 221.62
telnet 474 ( 0.00%) 34489 ( 0.00%) 72.76
ssh 303755 ( 1.05%) 50565798 ( 0.23%) 166.47
dns 7252 ( 0.03%) 575091 ( 0.00%) 79.30
bgp 574 ( 0.00%) 105112 ( 0.00%) 183.12
napster 187 ( 0.00%) 14136 ( 0.00%) 75.59
realaud 96 ( 0.00%) 6094 ( 0.00%) 63.48
rtsp 50290 ( 0.17%) 62638394 ( 0.29%) 1245.54
icecast 962 ( 0.00%) 577967 ( 0.00%) 600.80
hotline 18 ( 0.00%) 2778 ( 0.00%) 154.33
other 4260285 ( 14.72%) 2097576550 ( 9.61%) 492.36
udp 5103814 ( 17.63%) 3229143092 ( 14.80%) 632.69
dns 700621 ( 2.42%) 100774646 ( 0.46%) 143.84
realaud 1811 ( 0.01%) 109071 ( 0.00%) 60.23
halflif 44 ( 0.00%) 3483 ( 0.00%) 79.16
starcra 35 ( 0.00%) 6209 ( 0.00%) 177.40
everque 161 ( 0.00%) 27738 ( 0.00%) 172.29
unreal 27 ( 0.00%) 5037 ( 0.00%) 186.56
quake 26 ( 0.00%) 4690 ( 0.00%) 180.38
cuseeme 2 ( 0.00%) 183 ( 0.00%) 91.50
other 4400948 ( 15.20%) 3128089280 ( 14.34%) 710.78
icmp 311134 ( 1.07%) 41025964 ( 0.19%) 131.86
ipip 36659 ( 0.13%) 24833895 ( 0.11%) 677.43
ipsec 1683 ( 0.01%) 541858 ( 0.00%) 321.96
ip6 607187 ( 2.10%) 154432317 ( 0.71%) 254.34
other 12978 ( 0.04%) 3548998 ( 0.02%) 273.46
frag 643 ( 0.00%) 704295 ( 0.00%) 1095.33
ip6 91879 ( 0.32%) 56661887 ( 0.26%) 616.70
tcp6 46130 ( 0.16%) 43809021 ( 0.20%) 949.69
http(s) 7422 ( 0.03%) 10521806 ( 0.05%) 1417.65
http(c) 8168 ( 0.03%) 803898 ( 0.00%) 98.42
smtp 202 ( 0.00%) 86608 ( 0.00%) 428.75
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
ssh 5 ( 0.00%) 502 ( 0.00%) 100.40
dns 425 ( 0.00%) 115573 ( 0.00%) 271.94
bgp 89 ( 0.00%) 18812 ( 0.00%) 211.37
other 29784 ( 0.10%) 32258678 ( 0.15%) 1083.09
udp6 27960 ( 0.10%) 8549770 ( 0.04%) 305.79
dns 26618 ( 0.09%) 8318450 ( 0.04%) 312.51
unreal 6 ( 0.00%) 552 ( 0.00%) 92.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1335 ( 0.00%) 230661 ( 0.00%) 172.78
icmp6 13840 ( 0.05%) 1544920 ( 0.01%) 111.63
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3838 ( 0.01%) 2743020 ( 0.01%) 714.70
tcpdump file: 201101091400.dump.gz (712.66 MB)