Traffic Trace Info
DumpFile: 201101151400.dump
FileSize: 2356.32MB
Id: 201101151400
StartTime: Sat Jan 15 14:00:00 2011
EndTime: Sat Jan 15 14:15:00 2011
TotalTime: 899.77 seconds
TotalCapSize: 1857.66MB CapLen: 96 bytes
# of packets: 32678457 (20664.26MB)
AvgRate: 192.65Mbps stddev:20.02M
IP flow (unique src/dst pair) Information
# of flows: 970002 (avg. 33.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.5% 2.2% 1.8% 1.8% 1.5% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 523795
Top 10 bandwidth usage (bytes/total in %):
15.2% 7.6% 7.4% 4.1% 3.2% 2.9% 2.6% 2.4% 2.3% 1.9%
# of IPv6 addresses: 3597
Top 10 bandwidth usage (bytes/total in %):
96.8% 96.7% 0.6% 0.4% 0.4% 0.3% 0.3% 0.3% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101151400.pktlen.png)
detailed numbers
[ 32- 63]: 8387379
[ 64- 127]: 8534219
[ 128- 255]: 928875
[ 256- 511]: 834158
[ 512- 1023]: 681358
[ 1024- 2047]: 13312468
Protocol Breakdown
![[protocol breakdown chart]](201101151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32678457 (100.00%) 21668050511 (100.00%) 663.07
ip 32083646 ( 98.18%) 20897314457 ( 96.44%) 651.34
tcp 26635266 ( 81.51%) 18298502044 ( 84.45%) 687.00
http(s) 10681765 ( 32.69%) 13928179889 ( 64.28%) 1303.92
http(c) 6688357 ( 20.47%) 1637836103 ( 7.56%) 244.88
squid 332513 ( 1.02%) 97212426 ( 0.45%) 292.36
smtp 152485 ( 0.47%) 59553529 ( 0.27%) 390.55
nntp 16 ( 0.00%) 1070 ( 0.00%) 66.88
ftp 73558 ( 0.23%) 13852931 ( 0.06%) 188.33
pop3 6762 ( 0.02%) 2647085 ( 0.01%) 391.46
imap 3789 ( 0.01%) 1336189 ( 0.01%) 352.65
telnet 1364 ( 0.00%) 97557 ( 0.00%) 71.52
ssh 36209 ( 0.11%) 5837070 ( 0.03%) 161.20
dns 7292 ( 0.02%) 589355 ( 0.00%) 80.82
bgp 645 ( 0.00%) 169746 ( 0.00%) 263.17
napster 473 ( 0.00%) 31723 ( 0.00%) 67.07
realaud 203 ( 0.00%) 17150 ( 0.00%) 84.48
rtsp 220 ( 0.00%) 61396 ( 0.00%) 279.07
icecast 2429 ( 0.01%) 173975 ( 0.00%) 71.62
hotline 103 ( 0.00%) 6965 ( 0.00%) 67.62
other 8647070 ( 26.46%) 2550897105 ( 11.77%) 295.00
udp 4303591 ( 13.17%) 2233095850 ( 10.31%) 518.89
dns 707749 ( 2.17%) 106857227 ( 0.49%) 150.98
realaud 1801 ( 0.01%) 108314 ( 0.00%) 60.14
halflif 45 ( 0.00%) 7490 ( 0.00%) 166.44
starcra 28 ( 0.00%) 2449 ( 0.00%) 87.46
everque 155 ( 0.00%) 28391 ( 0.00%) 183.17
unreal 16 ( 0.00%) 2344 ( 0.00%) 146.50
quake 37 ( 0.00%) 3812 ( 0.00%) 103.03
cuseeme 3 ( 0.00%) 558 ( 0.00%) 186.00
other 3593616 ( 11.00%) 2125961249 ( 9.81%) 591.59
icmp 388122 ( 1.19%) 65201875 ( 0.30%) 167.99
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1646 ( 0.01%) 693364 ( 0.00%) 421.24
ip6 716935 ( 2.19%) 260613988 ( 1.20%) 363.51
other 37902 ( 0.12%) 39188176 ( 0.18%) 1033.93
frag 665 ( 0.00%) 725801 ( 0.00%) 1091.43
ip6 594811 ( 1.82%) 770736054 ( 3.56%) 1295.77
tcp6 546597 ( 1.67%) 759024324 ( 3.50%) 1388.64
http(s) 825 ( 0.00%) 931371 ( 0.00%) 1128.93
http(c) 22916 ( 0.07%) 2046089 ( 0.01%) 89.29
smtp 450 ( 0.00%) 328778 ( 0.00%) 730.62
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 656 ( 0.00%) 166274 ( 0.00%) 253.47
bgp 97 ( 0.00%) 19187 ( 0.00%) 197.80
other 521618 ( 1.60%) 755529481 ( 3.49%) 1448.43
udp6 31465 ( 0.10%) 9879579 ( 0.05%) 313.99
dns 29863 ( 0.09%) 9565538 ( 0.04%) 320.31
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1599 ( 0.00%) 313720 ( 0.00%) 196.20
icmp6 16492 ( 0.05%) 1684620 ( 0.01%) 102.15
ip6 80 ( 0.00%) 10990 ( 0.00%) 137.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 147 ( 0.00%) 132461 ( 0.00%) 901.10
tcpdump file: 201101151400.dump.gz (843.99 MB)