Traffic Trace Info
DumpFile: 201101161400.dump
FileSize: 2508.43MB
Id: 201101161400
StartTime: Sun Jan 16 14:00:00 2011
EndTime: Sun Jan 16 14:15:00 2011
TotalTime: 899.99 seconds
TotalCapSize: 1947.68MB CapLen: 96 bytes
# of packets: 36747768 (27125.10MB)
AvgRate: 252.80Mbps stddev:39.58M
IP flow (unique src/dst pair) Information
# of flows: 752864 (avg. 48.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 4.5% 3.3% 2.8% 2.6% 1.9% 1.8% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 395198
Top 10 bandwidth usage (bytes/total in %):
21.6% 10.7% 9.5% 6.9% 6.6% 4.6% 4.6% 3.4% 2.8% 2.6%
# of IPv6 addresses: 3131
Top 10 bandwidth usage (bytes/total in %):
40.7% 38.6% 7.9% 7.9% 5.6% 5.6% 5.6% 4.4% 4.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101161400.pktlen.png)
detailed numbers
[ 32- 63]: 7603661
[ 64- 127]: 8287072
[ 128- 255]: 1131532
[ 256- 511]: 964587
[ 512- 1023]: 1282738
[ 1024- 2047]: 17478178
Protocol Breakdown
![[protocol breakdown chart]](201101161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36747768 (100.00%) 28442727165 (100.00%) 774.00
ip 36668587 ( 99.78%) 28400799118 ( 99.85%) 774.53
tcp 26125620 ( 71.09%) 19152292416 ( 67.34%) 733.08
http(s) 11389209 ( 30.99%) 15417111577 ( 54.20%) 1353.66
http(c) 5586742 ( 15.20%) 710553385 ( 2.50%) 127.19
squid 331896 ( 0.90%) 83305192 ( 0.29%) 251.00
smtp 125748 ( 0.34%) 33670872 ( 0.12%) 267.76
nntp 6 ( 0.00%) 388 ( 0.00%) 64.67
ftp 48659 ( 0.13%) 13403331 ( 0.05%) 275.45
pop3 26007 ( 0.07%) 31346807 ( 0.11%) 1205.32
imap 9741 ( 0.03%) 8549307 ( 0.03%) 877.66
telnet 1802 ( 0.00%) 129869 ( 0.00%) 72.07
ssh 28038 ( 0.08%) 4163937 ( 0.01%) 148.51
dns 5724 ( 0.02%) 460978 ( 0.00%) 80.53
bgp 617 ( 0.00%) 107467 ( 0.00%) 174.18
napster 575 ( 0.00%) 53208 ( 0.00%) 92.54
realaud 508 ( 0.00%) 34965 ( 0.00%) 68.83
rtsp 189 ( 0.00%) 47270 ( 0.00%) 250.11
icecast 1504 ( 0.00%) 140786 ( 0.00%) 93.61
hotline 37 ( 0.00%) 2384 ( 0.00%) 64.43
other 8568600 ( 23.32%) 2849209613 ( 10.02%) 332.52
udp 9627185 ( 26.20%) 8927147177 ( 31.39%) 927.29
dns 648383 ( 1.76%) 95816566 ( 0.34%) 147.78
rip 32 ( 0.00%) 48448 ( 0.00%) 1514.00
realaud 44 ( 0.00%) 50764 ( 0.00%) 1153.73
halflif 89 ( 0.00%) 11522 ( 0.00%) 129.46
starcra 169 ( 0.00%) 72177 ( 0.00%) 427.08
everque 152 ( 0.00%) 72876 ( 0.00%) 479.45
unreal 30 ( 0.00%) 4323 ( 0.00%) 144.10
quake 70 ( 0.00%) 86145 ( 0.00%) 1230.64
cuseeme 7 ( 0.00%) 885 ( 0.00%) 126.43
other 5554379 ( 15.11%) 4171674185 ( 14.67%) 751.06
icmp 386401 ( 1.05%) 91934912 ( 0.32%) 237.93
ipip 182 ( 0.00%) 18964 ( 0.00%) 104.20
ipsec 3107 ( 0.01%) 1192090 ( 0.00%) 383.68
ip6 490757 ( 1.34%) 193122025 ( 0.68%) 393.52
other 35335 ( 0.10%) 35091534 ( 0.12%) 993.11
frag 4406778 ( 11.99%) 6146133989 ( 21.61%) 1394.70
ip6 79181 ( 0.22%) 41928047 ( 0.15%) 529.52
tcp6 32550 ( 0.09%) 29564990 ( 0.10%) 908.29
http(s) 2111 ( 0.01%) 2576718 ( 0.01%) 1220.61
http(c) 5627 ( 0.02%) 644264 ( 0.00%) 114.50
smtp 209 ( 0.00%) 78586 ( 0.00%) 376.01
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
telnet 317 ( 0.00%) 437904 ( 0.00%) 1381.40
dns 622 ( 0.00%) 163346 ( 0.00%) 262.61
bgp 92 ( 0.00%) 22761 ( 0.00%) 247.40
other 23537 ( 0.06%) 25638267 ( 0.09%) 1089.28
udp6 32139 ( 0.09%) 10319103 ( 0.04%) 321.08
dns 28528 ( 0.08%) 9176435 ( 0.03%) 321.66
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3610 ( 0.01%) 1142562 ( 0.00%) 316.50
icmp6 13620 ( 0.04%) 1469105 ( 0.01%) 107.86
ip6 79 ( 0.00%) 10822 ( 0.00%) 136.99
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 762 ( 0.00%) 559811 ( 0.00%) 734.66
tcpdump file: 201101161400.dump.gz (877.81 MB)