Traffic Trace Info
DumpFile: 201101101400.dump
FileSize: 2306.66MB
Id: 201101101400
StartTime: Mon Jan 10 14:00:00 2011
EndTime: Mon Jan 10 14:15:00 2011
TotalTime: 899.64 seconds
TotalCapSize: 1805.32MB CapLen: 96 bytes
# of packets: 32853704 (23763.10MB)
AvgRate: 221.56Mbps stddev:22.89M
IP flow (unique src/dst pair) Information
# of flows: 753273 (avg. 43.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.0% 2.0% 1.6% 1.6% 1.6% 1.6% 1.6% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 398505
Top 10 bandwidth usage (bytes/total in %):
11.9% 10.1% 9.6% 6.5% 5.6% 4.1% 2.2% 2.2% 2.0% 2.0%
# of IPv6 addresses: 2970
Top 10 bandwidth usage (bytes/total in %):
58.6% 47.7% 5.6% 5.2% 5.2% 2.8% 2.5% 2.5% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101101400.pktlen.png)
detailed numbers
[ 32- 63]: 5837930
[ 64- 127]: 8530782
[ 128- 255]: 1287719
[ 256- 511]: 773464
[ 512- 1023]: 655391
[ 1024- 2047]: 15768418
Protocol Breakdown
![[protocol breakdown chart]](201101101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32853704 (100.00%) 24917412243 (100.00%) 758.44
ip 32741227 ( 99.66%) 24873660723 ( 99.82%) 759.70
tcp 25708450 ( 78.25%) 20646784139 ( 82.86%) 803.11
http(s) 11731542 ( 35.71%) 15756763599 ( 63.24%) 1343.11
http(c) 7522471 ( 22.90%) 1283429473 ( 5.15%) 170.61
squid 380020 ( 1.16%) 233705171 ( 0.94%) 614.98
smtp 284026 ( 0.86%) 70308465 ( 0.28%) 247.54
ftp 91192 ( 0.28%) 14850559 ( 0.06%) 162.85
pop3 9926 ( 0.03%) 2769320 ( 0.01%) 279.00
imap 3839 ( 0.01%) 1943200 ( 0.01%) 506.17
telnet 1702 ( 0.01%) 359037 ( 0.00%) 210.95
ssh 69690 ( 0.21%) 9571629 ( 0.04%) 137.35
dns 7774 ( 0.02%) 622043 ( 0.00%) 80.02
bgp 578 ( 0.00%) 96698 ( 0.00%) 167.30
napster 43 ( 0.00%) 8653 ( 0.00%) 201.23
realaud 21 ( 0.00%) 2969 ( 0.00%) 141.38
rtsp 14893 ( 0.05%) 15526884 ( 0.06%) 1042.56
icecast 8534 ( 0.03%) 8062064 ( 0.03%) 944.70
hotline 26 ( 0.00%) 2751 ( 0.00%) 105.81
other 5582173 ( 16.99%) 3248761624 ( 13.04%) 581.99
udp 6022443 ( 18.33%) 4004263009 ( 16.07%) 664.89
dns 757415 ( 2.31%) 115613454 ( 0.46%) 152.64
realaud 9 ( 0.00%) 857 ( 0.00%) 95.22
halflif 54 ( 0.00%) 4451 ( 0.00%) 82.43
starcra 26 ( 0.00%) 2508 ( 0.00%) 96.46
everque 16902 ( 0.05%) 2183423 ( 0.01%) 129.18
unreal 28 ( 0.00%) 4466 ( 0.00%) 159.50
quake 13 ( 0.00%) 1248 ( 0.00%) 96.00
cuseeme 14 ( 0.00%) 1698 ( 0.00%) 121.29
other 5247858 ( 15.97%) 3886359678 ( 15.60%) 740.56
icmp 451772 ( 1.38%) 63592964 ( 0.26%) 140.76
ipip 625 ( 0.00%) 72066 ( 0.00%) 115.31
ipsec 990 ( 0.00%) 295460 ( 0.00%) 298.44
ip6 544186 ( 1.66%) 155043204 ( 0.62%) 284.91
other 12761 ( 0.04%) 3609881 ( 0.01%) 282.88
frag 7225 ( 0.02%) 5634297 ( 0.02%) 779.83
ip6 112477 ( 0.34%) 43751520 ( 0.18%) 388.98
tcp6 64134 ( 0.20%) 30828822 ( 0.12%) 480.69
http(s) 2433 ( 0.01%) 3166625 ( 0.01%) 1301.53
http(c) 39645 ( 0.12%) 3459986 ( 0.01%) 87.27
smtp 179 ( 0.00%) 83418 ( 0.00%) 466.02
ftp 57 ( 0.00%) 5198 ( 0.00%) 91.19
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 1114 ( 0.00%) 283691 ( 0.00%) 254.66
bgp 92 ( 0.00%) 18290 ( 0.00%) 198.80
other 20611 ( 0.06%) 23811284 ( 0.10%) 1155.27
udp6 34359 ( 0.10%) 10744977 ( 0.04%) 312.73
dns 30915 ( 0.09%) 10058662 ( 0.04%) 325.37
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 2 ( 0.00%) 207 ( 0.00%) 103.50
other 3440 ( 0.01%) 685887 ( 0.00%) 199.39
icmp6 13035 ( 0.04%) 1555927 ( 0.01%) 119.37
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 836 ( 0.00%) 606402 ( 0.00%) 725.36
tcpdump file: 201101101400.dump.gz (798.70 MB)