Traffic Trace Info
DumpFile: 201101231400.dump
FileSize: 2667.92MB
Id: 201101231400
StartTime: Sun Jan 23 14:00:00 2011
EndTime: Sun Jan 23 14:15:00 2011
TotalTime: 899.75 seconds
TotalCapSize: -2001.39MB CapLen: 96 bytes
# of packets: 37571701 (28474.70MB)
AvgRate: 265.47Mbps stddev:46.69M
IP flow (unique src/dst pair) Information
# of flows: 935365 (avg. 40.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 3.0% 2.9% 2.5% 1.4% 1.3% 1.3% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 536622
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.8% 10.2% 8.7% 6.4% 6.3% 5.7% 3.1% 2.9% 2.9%
# of IPv6 addresses: 2974
Top 10 bandwidth usage (bytes/total in %):
58.4% 56.4% 7.2% 7.2% 5.9% 5.1% 5.0% 4.5% 3.5% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101231400.pktlen.png)
detailed numbers
[ 32- 63]: 6579124
[ 64- 127]: 9074399
[ 128- 255]: 1364265
[ 256- 511]: 935344
[ 512- 1023]: 882334
[ 1024- 2047]: 18736235
Protocol Breakdown
![[protocol breakdown chart]](201101231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37571701 (100.00%) 29857885343 (100.00%) 794.69
ip 37481300 ( 99.76%) 29803703927 ( 99.82%) 795.16
tcp 30998900 ( 82.51%) 26590364851 ( 89.06%) 857.78
http(s) 14295923 ( 38.05%) 20046737539 ( 67.14%) 1402.27
http(c) 6448081 ( 17.16%) 650541581 ( 2.18%) 100.89
squid 397193 ( 1.06%) 129393525 ( 0.43%) 325.77
smtp 120776 ( 0.32%) 37417191 ( 0.13%) 309.81
nntp 14 ( 0.00%) 858 ( 0.00%) 61.29
ftp 48330 ( 0.13%) 6677801 ( 0.02%) 138.17
pop3 11387 ( 0.03%) 7486605 ( 0.03%) 657.47
imap 2336 ( 0.01%) 1253875 ( 0.00%) 536.76
telnet 1974 ( 0.01%) 138525 ( 0.00%) 70.17
ssh 1381362 ( 3.68%) 945178010 ( 3.17%) 684.24
dns 6954 ( 0.02%) 605481 ( 0.00%) 87.07
bgp 528 ( 0.00%) 80416 ( 0.00%) 152.30
napster 414 ( 0.00%) 28288 ( 0.00%) 68.33
realaud 140 ( 0.00%) 8695 ( 0.00%) 62.11
rtsp 22015 ( 0.06%) 23577457 ( 0.08%) 1070.97
icecast 8616 ( 0.02%) 2317341 ( 0.01%) 268.96
hotline 18 ( 0.00%) 1104 ( 0.00%) 61.33
other 8252827 ( 21.97%) 4738919839 ( 15.87%) 574.22
udp 5584349 ( 14.86%) 2806760873 ( 9.40%) 502.61
dns 649600 ( 1.73%) 96527393 ( 0.32%) 148.60
realaud 25 ( 0.00%) 2937 ( 0.00%) 117.48
halflif 48 ( 0.00%) 8369 ( 0.00%) 174.35
starcra 174 ( 0.00%) 97501 ( 0.00%) 560.35
everque 2898 ( 0.01%) 2375216 ( 0.01%) 819.61
unreal 10 ( 0.00%) 1595 ( 0.00%) 159.50
quake 108 ( 0.00%) 28008 ( 0.00%) 259.33
cuseeme 18 ( 0.00%) 5598 ( 0.00%) 311.00
other 4721446 ( 12.57%) 2421906354 ( 8.11%) 512.96
icmp 427396 ( 1.14%) 142604369 ( 0.48%) 333.66
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1562 ( 0.00%) 562816 ( 0.00%) 360.32
ip6 458138 ( 1.22%) 260835502 ( 0.87%) 569.34
other 10770 ( 0.03%) 2556246 ( 0.01%) 237.35
frag 268489 ( 0.71%) 374101247 ( 1.25%) 1393.36
ip6 90401 ( 0.24%) 54181416 ( 0.18%) 599.35
tcp6 43573 ( 0.12%) 42758565 ( 0.14%) 981.31
http(s) 8718 ( 0.02%) 7903995 ( 0.03%) 906.63
http(c) 8237 ( 0.02%) 803081 ( 0.00%) 97.50
smtp 188 ( 0.00%) 69860 ( 0.00%) 371.60
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 369 ( 0.00%) 95401 ( 0.00%) 258.54
bgp 89 ( 0.00%) 18980 ( 0.00%) 213.26
other 25937 ( 0.07%) 33864104 ( 0.11%) 1305.63
udp6 32858 ( 0.09%) 9788845 ( 0.03%) 297.91
dns 29312 ( 0.08%) 8921584 ( 0.03%) 304.37
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 2 ( 0.00%) 214 ( 0.00%) 107.00
other 3543 ( 0.01%) 866946 ( 0.00%) 244.69
icmp6 13738 ( 0.04%) 1520273 ( 0.01%) 110.66
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 104 ( 0.00%) 96941 ( 0.00%) 932.12
tcpdump file: 201101231400.dump.gz (893.22 MB)