Traffic Trace Info
DumpFile: 201101201400.dump
FileSize: 3417.26MB
Id: 201101201400
StartTime: Thu Jan 20 14:00:00 2011
EndTime: Thu Jan 20 14:15:00 2011
TotalTime: 900.46 seconds
TotalCapSize: -1433.75MB CapLen: 96 bytes
# of packets: 49479708 (37143.23MB)
AvgRate: 346.04Mbps stddev:55.61M
IP flow (unique src/dst pair) Information
# of flows: 1015684 (avg. 48.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.8% 2.4% 2.3% 1.8% 1.5% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 516596
Top 10 bandwidth usage (bytes/total in %):
17.2% 15.1% 4.2% 3.9% 2.8% 2.8% 2.8% 2.7% 2.6% 2.5%
# of IPv6 addresses: 3569
Top 10 bandwidth usage (bytes/total in %):
39.1% 34.8% 34.8% 30.2% 8.3% 3.1% 2.1% 2.0% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101201400.pktlen.png)
detailed numbers
[ 32- 63]: 10719550
[ 64- 127]: 10519304
[ 128- 255]: 1399731
[ 256- 511]: 1114292
[ 512- 1023]: 1586722
[ 1024- 2047]: 24140109
Protocol Breakdown
![[protocol breakdown chart]](201101201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49479708 (100.00%) 38947504694 (100.00%) 787.14
ip 49323417 ( 99.68%) 38860110719 ( 99.78%) 787.86
tcp 37991980 ( 76.78%) 29523774694 ( 75.80%) 777.11
http(s) 17837550 ( 36.05%) 24032099606 ( 61.70%) 1347.28
http(c) 10564646 ( 21.35%) 1690028358 ( 4.34%) 159.97
squid 383058 ( 0.77%) 221700955 ( 0.57%) 578.77
smtp 218728 ( 0.44%) 101743368 ( 0.26%) 465.16
nntp 13 ( 0.00%) 796 ( 0.00%) 61.23
ftp 50524 ( 0.10%) 12273225 ( 0.03%) 242.92
pop3 31878 ( 0.06%) 6366946 ( 0.02%) 199.73
imap 8871 ( 0.02%) 4572747 ( 0.01%) 515.47
telnet 4910 ( 0.01%) 327729 ( 0.00%) 66.75
ssh 179909 ( 0.36%) 31596857 ( 0.08%) 175.63
dns 10166 ( 0.02%) 1011786 ( 0.00%) 99.53
bgp 554 ( 0.00%) 101383 ( 0.00%) 183.00
napster 501 ( 0.00%) 36253 ( 0.00%) 72.36
realaud 176 ( 0.00%) 12526 ( 0.00%) 71.17
rtsp 6808 ( 0.01%) 7716833 ( 0.02%) 1133.49
icecast 22572 ( 0.05%) 15770804 ( 0.04%) 698.69
hotline 119 ( 0.00%) 9068 ( 0.00%) 76.20
other 8670987 ( 17.52%) 3398404854 ( 8.73%) 391.93
udp 10052165 ( 20.32%) 8827339586 ( 22.66%) 878.15
dns 957493 ( 1.94%) 152641672 ( 0.39%) 159.42
rip 8 ( 0.00%) 12112 ( 0.00%) 1514.00
realaud 64 ( 0.00%) 52842 ( 0.00%) 825.66
halflif 40 ( 0.00%) 3754 ( 0.00%) 93.85
starcra 108 ( 0.00%) 107983 ( 0.00%) 999.84
everque 1129 ( 0.00%) 230163 ( 0.00%) 203.86
unreal 23 ( 0.00%) 4044 ( 0.00%) 175.83
quake 101 ( 0.00%) 100768 ( 0.00%) 997.70
cuseeme 12 ( 0.00%) 1692 ( 0.00%) 141.00
other 5780506 ( 11.68%) 4166268266 ( 10.70%) 720.74
icmp 620795 ( 1.25%) 108584909 ( 0.28%) 174.91
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1683 ( 0.00%) 538402 ( 0.00%) 319.91
ip6 638496 ( 1.29%) 395674474 ( 1.02%) 619.70
other 18113 ( 0.04%) 4179384 ( 0.01%) 230.74
frag 4220299 ( 8.53%) 5879845585 ( 15.10%) 1393.23
ip6 156289 ( 0.32%) 87393855 ( 0.22%) 559.18
tcp6 91322 ( 0.18%) 70119057 ( 0.18%) 767.82
http(s) 1924 ( 0.00%) 1848070 ( 0.00%) 960.54
http(c) 31125 ( 0.06%) 2710119 ( 0.01%) 87.07
smtp 307 ( 0.00%) 73248 ( 0.00%) 238.59
ftp 78 ( 0.00%) 6958 ( 0.00%) 89.21
ssh 14 ( 0.00%) 3828 ( 0.00%) 273.43
dns 930 ( 0.00%) 255356 ( 0.00%) 274.58
bgp 99 ( 0.00%) 25413 ( 0.00%) 256.70
other 56845 ( 0.11%) 65196065 ( 0.17%) 1146.91
udp6 46532 ( 0.09%) 15046058 ( 0.04%) 323.35
dns 44966 ( 0.09%) 14765487 ( 0.04%) 328.37
realaud 1 ( 0.00%) 125 ( 0.00%) 125.00
other 1565 ( 0.00%) 280446 ( 0.00%) 179.20
icmp6 17953 ( 0.04%) 1930865 ( 0.00%) 107.55
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 80 ( 0.00%) 8880 ( 0.00%) 111.00
other6 317 ( 0.00%) 277415 ( 0.00%) 875.13
tcpdump file: 201101201400.dump.gz (1162.53 MB)