Traffic Trace Info
DumpFile: 201101121400.dump
FileSize: 2517.83MB
Id: 201101121400
StartTime: Wed Jan 12 14:00:00 2011
EndTime: Wed Jan 12 14:15:00 2011
TotalTime: 899.93 seconds
TotalCapSize: 1979.91MB CapLen: 96 bytes
# of packets: 35251427 (22528.97MB)
AvgRate: 210.01Mbps stddev:21.69M
IP flow (unique src/dst pair) Information
# of flows: 1050382 (avg. 33.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.0% 1.2% 1.2% 1.1% 1.0% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 507272
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.4% 5.7% 5.6% 5.1% 3.3% 2.2% 2.0% 1.9% 1.8%
# of IPv6 addresses: 3603
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.7% 16.7% 10.7% 7.3% 7.3% 6.9% 5.7% 5.7% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101121400.pktlen.png)
detailed numbers
[ 32- 63]: 8329417
[ 64- 127]: 9194990
[ 128- 255]: 1369085
[ 256- 511]: 979594
[ 512- 1023]: 866132
[ 1024- 2047]: 14512209
Protocol Breakdown
![[protocol breakdown chart]](201101121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35251427 (100.00%) 23623340444 (100.00%) 670.14
ip 35149506 ( 99.71%) 23581639673 ( 99.82%) 670.90
tcp 29680643 ( 84.20%) 21368706798 ( 90.46%) 719.95
http(s) 13679850 ( 38.81%) 17858760832 ( 75.60%) 1305.48
http(c) 8856119 ( 25.12%) 1297365560 ( 5.49%) 146.49
squid 335742 ( 0.95%) 147543138 ( 0.62%) 439.45
smtp 281350 ( 0.80%) 135810404 ( 0.57%) 482.71
ftp 40275 ( 0.11%) 11907964 ( 0.05%) 295.67
pop3 19666 ( 0.06%) 3807599 ( 0.02%) 193.61
imap 6870 ( 0.02%) 3463923 ( 0.01%) 504.21
telnet 3765 ( 0.01%) 274437 ( 0.00%) 72.89
ssh 112135 ( 0.32%) 85188056 ( 0.36%) 759.69
dns 11224 ( 0.03%) 985743 ( 0.00%) 87.82
bgp 618 ( 0.00%) 131211 ( 0.00%) 212.32
napster 904 ( 0.00%) 59412 ( 0.00%) 65.72
realaud 1489 ( 0.00%) 99724 ( 0.00%) 66.97
rtsp 14399 ( 0.04%) 19597567 ( 0.08%) 1361.04
icecast 11350 ( 0.03%) 1252488 ( 0.01%) 110.35
hotline 26 ( 0.00%) 1626 ( 0.00%) 62.54
other 6304861 ( 17.89%) 1802457114 ( 7.63%) 285.88
udp 4575220 ( 12.98%) 1941565137 ( 8.22%) 424.37
dns 984092 ( 2.79%) 152218628 ( 0.64%) 154.68
realaud 1827 ( 0.01%) 113143 ( 0.00%) 61.93
halflif 61 ( 0.00%) 6202 ( 0.00%) 101.67
starcra 54 ( 0.00%) 4841 ( 0.00%) 89.65
everque 376 ( 0.00%) 68131 ( 0.00%) 181.20
unreal 32 ( 0.00%) 5892 ( 0.00%) 184.12
quake 30 ( 0.00%) 3421 ( 0.00%) 114.03
cuseeme 7 ( 0.00%) 661 ( 0.00%) 94.43
other 3588528 ( 10.18%) 1788948819 ( 7.57%) 498.52
icmp 349959 ( 0.99%) 42540663 ( 0.18%) 121.56
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2921 ( 0.01%) 1517442 ( 0.01%) 519.49
ip6 529130 ( 1.50%) 223987665 ( 0.95%) 423.31
other 11448 ( 0.03%) 3302698 ( 0.01%) 288.50
frag 1023 ( 0.00%) 1198027 ( 0.01%) 1171.09
ip6 101921 ( 0.29%) 41700771 ( 0.18%) 409.15
tcp6 36974 ( 0.10%) 24588432 ( 0.10%) 665.02
http(s) 7617 ( 0.02%) 10102603 ( 0.04%) 1326.32
http(c) 10744 ( 0.03%) 1019118 ( 0.00%) 94.85
smtp 652 ( 0.00%) 139942 ( 0.00%) 214.63
ftp 60 ( 0.00%) 5440 ( 0.00%) 90.67
dns 1199 ( 0.00%) 315955 ( 0.00%) 263.52
bgp 96 ( 0.00%) 27030 ( 0.00%) 281.56
other 16606 ( 0.05%) 12978344 ( 0.05%) 781.55
udp6 48679 ( 0.14%) 15076038 ( 0.06%) 309.70
dns 44532 ( 0.13%) 14624271 ( 0.06%) 328.40
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
other 4145 ( 0.01%) 451554 ( 0.00%) 108.94
icmp6 15803 ( 0.04%) 1692563 ( 0.01%) 107.10
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 355 ( 0.00%) 328718 ( 0.00%) 925.97
tcpdump file: 201101121400.dump.gz (898.91 MB)