Traffic Trace Info
DumpFile: 201101221400.dump
FileSize: 2515.31MB
Id: 201101221400
StartTime: Sat Jan 22 14:00:00 2011
EndTime: Sat Jan 22 14:15:00 2011
TotalTime: 900.12 seconds
TotalCapSize: 1961.27MB CapLen: 96 bytes
# of packets: 36309075 (26908.28MB)
AvgRate: 250.76Mbps stddev:48.59M
IP flow (unique src/dst pair) Information
# of flows: 839630 (avg. 43.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.0% 1.8% 1.8% 1.7% 1.4% 1.4% 1.3% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 457503
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.5% 5.9% 5.6% 4.9% 4.2% 3.2% 2.2% 2.0% 1.8%
# of IPv6 addresses: 3338
Top 10 bandwidth usage (bytes/total in %):
54.9% 41.1% 31.4% 31.4% 14.1% 6.1% 6.0% 1.3% 1.3% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101221400.pktlen.png)
detailed numbers
[ 32- 63]: 7035105
[ 64- 127]: 8273171
[ 128- 255]: 1320209
[ 256- 511]: 1060967
[ 512- 1023]: 1074009
[ 1024- 2047]: 17545614
Protocol Breakdown
![[protocol breakdown chart]](201101221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36309075 (100.00%) 28215378863 (100.00%) 777.09
ip 35957684 ( 99.03%) 27928426305 ( 98.98%) 776.70
tcp 27473635 ( 75.67%) 22241248715 ( 78.83%) 809.55
http(s) 13185405 ( 36.31%) 17886318693 ( 63.39%) 1356.52
http(c) 7111649 ( 19.59%) 1106177532 ( 3.92%) 155.54
squid 383098 ( 1.06%) 165588723 ( 0.59%) 432.24
smtp 162825 ( 0.45%) 41603077 ( 0.15%) 255.51
nntp 10 ( 0.00%) 610 ( 0.00%) 61.00
ftp 53900 ( 0.15%) 11208601 ( 0.04%) 207.95
pop3 14067 ( 0.04%) 4619337 ( 0.02%) 328.38
imap 5584 ( 0.02%) 2729420 ( 0.01%) 488.79
telnet 13010 ( 0.04%) 9732035 ( 0.03%) 748.04
ssh 45734 ( 0.13%) 7094673 ( 0.03%) 155.13
dns 9969 ( 0.03%) 923850 ( 0.00%) 92.67
bgp 530 ( 0.00%) 79664 ( 0.00%) 150.31
napster 432 ( 0.00%) 45739 ( 0.00%) 105.88
realaud 137 ( 0.00%) 10450 ( 0.00%) 76.28
rtsp 6738 ( 0.02%) 7756015 ( 0.03%) 1151.09
icecast 2243 ( 0.01%) 238576 ( 0.00%) 106.36
hotline 17 ( 0.00%) 1169 ( 0.00%) 68.76
other 6478272 ( 17.84%) 2997119651 ( 10.62%) 462.64
udp 7509399 ( 20.68%) 5425701619 ( 19.23%) 722.52
dns 688834 ( 1.90%) 109241969 ( 0.39%) 158.59
rip 17 ( 0.00%) 24298 ( 0.00%) 1429.29
realaud 61 ( 0.00%) 18080 ( 0.00%) 296.39
halflif 14 ( 0.00%) 1408 ( 0.00%) 100.57
starcra 41 ( 0.00%) 27981 ( 0.00%) 682.46
everque 473 ( 0.00%) 78814 ( 0.00%) 166.63
unreal 29 ( 0.00%) 2814 ( 0.00%) 97.03
quake 91 ( 0.00%) 42622 ( 0.00%) 468.37
cuseeme 4 ( 0.00%) 286 ( 0.00%) 71.50
other 5318536 ( 14.65%) 3272269115 ( 11.60%) 615.26
icmp 404498 ( 1.11%) 98258506 ( 0.35%) 242.91
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 545 ( 0.00%) 128278 ( 0.00%) 235.37
ip6 555312 ( 1.53%) 159412500 ( 0.56%) 287.07
other 14110 ( 0.04%) 3657417 ( 0.01%) 259.21
frag 1911117 ( 5.26%) 2662572154 ( 9.44%) 1393.20
ip6 351391 ( 0.97%) 286952558 ( 1.02%) 816.62
tcp6 172676 ( 0.48%) 185192546 ( 0.66%) 1072.49
http(s) 19438 ( 0.05%) 21767194 ( 0.08%) 1119.83
http(c) 20110 ( 0.06%) 1749642 ( 0.01%) 87.00
smtp 232 ( 0.00%) 114158 ( 0.00%) 492.06
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 631 ( 0.00%) 157492 ( 0.00%) 249.59
bgp 92 ( 0.00%) 18476 ( 0.00%) 200.83
other 132138 ( 0.36%) 161382440 ( 0.57%) 1221.32
udp6 31574 ( 0.09%) 9699163 ( 0.03%) 307.19
dns 30431 ( 0.08%) 9496264 ( 0.03%) 312.06
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1142 ( 0.00%) 202793 ( 0.00%) 177.58
icmp6 18518 ( 0.05%) 1806618 ( 0.01%) 97.56
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 82 ( 0.00%) 9112 ( 0.00%) 111.12
other6 128460 ( 0.35%) 90234061 ( 0.32%) 702.43
tcpdump file: 201101221400.dump.gz (858.88 MB)