Traffic Trace Info
DumpFile: 201101241400.dump
FileSize: 2834.01MB
Id: 201101241400
StartTime: Mon Jan 24 14:00:00 2011
EndTime: Mon Jan 24 14:15:00 2011
TotalTime: 900.04 seconds
TotalCapSize: -1873.79MB CapLen: 96 bytes
# of packets: 40094145 (28367.92MB)
AvgRate: 264.39Mbps stddev:42.96M
IP flow (unique src/dst pair) Information
# of flows: 1066377 (avg. 37.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 1.5% 1.3% 1.3% 1.2% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 572203
Top 10 bandwidth usage (bytes/total in %):
15.9% 3.9% 3.4% 3.4% 3.4% 3.4% 2.7% 2.4% 2.2% 1.6%
# of IPv6 addresses: 3497
Top 10 bandwidth usage (bytes/total in %):
47.9% 37.8% 11.4% 7.7% 7.6% 6.0% 4.7% 4.5% 4.5% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101241400.pktlen.png)
detailed numbers
[ 32- 63]: 8806877
[ 64- 127]: 9246356
[ 128- 255]: 1434622
[ 256- 511]: 1135373
[ 512- 1023]: 968781
[ 1024- 2047]: 18502136
Protocol Breakdown
![[protocol breakdown chart]](201101241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40094145 (100.00%) 29745923034 (100.00%) 741.90
ip 39933470 ( 99.60%) 29652033002 ( 99.68%) 742.54
tcp 33651119 ( 83.93%) 26871763134 ( 90.34%) 798.54
http(s) 16083590 ( 40.11%) 21637216575 ( 72.74%) 1345.30
http(c) 10580087 ( 26.39%) 2417208718 ( 8.13%) 228.47
squid 415411 ( 1.04%) 172006340 ( 0.58%) 414.06
smtp 344010 ( 0.86%) 238281859 ( 0.80%) 692.66
nntp 31 ( 0.00%) 2032 ( 0.00%) 65.55
ftp 51261 ( 0.13%) 11298591 ( 0.04%) 220.41
pop3 29748 ( 0.07%) 18908889 ( 0.06%) 635.64
imap 320586 ( 0.80%) 460733989 ( 1.55%) 1437.16
telnet 1491 ( 0.00%) 142714 ( 0.00%) 95.72
ssh 76483 ( 0.19%) 29536631 ( 0.10%) 386.19
dns 9506 ( 0.02%) 884946 ( 0.00%) 93.09
bgp 582 ( 0.00%) 118309 ( 0.00%) 203.28
napster 458 ( 0.00%) 37157 ( 0.00%) 81.13
realaud 332 ( 0.00%) 82547 ( 0.00%) 248.64
rtsp 6710 ( 0.02%) 7731632 ( 0.03%) 1152.26
icecast 11803 ( 0.03%) 934280 ( 0.00%) 79.16
hotline 9 ( 0.00%) 562 ( 0.00%) 62.44
other 5719016 ( 14.26%) 1876637063 ( 6.31%) 328.14
udp 5246710 ( 13.09%) 2473829499 ( 8.32%) 471.50
dns 926441 ( 2.31%) 146424835 ( 0.49%) 158.05
realaud 17 ( 0.00%) 2190 ( 0.00%) 128.82
halflif 55 ( 0.00%) 5200 ( 0.00%) 94.55
starcra 56 ( 0.00%) 5441 ( 0.00%) 97.16
everque 1327 ( 0.00%) 190809 ( 0.00%) 143.79
unreal 17 ( 0.00%) 2585 ( 0.00%) 152.06
quake 34 ( 0.00%) 3933 ( 0.00%) 115.68
cuseeme 8 ( 0.00%) 3320 ( 0.00%) 415.00
other 4317429 ( 10.77%) 2327050617 ( 7.82%) 538.99
icmp 480564 ( 1.20%) 83608486 ( 0.28%) 173.98
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1129 ( 0.00%) 402870 ( 0.00%) 356.84
ip6 542069 ( 1.35%) 219140376 ( 0.74%) 404.27
other 11694 ( 0.03%) 3269367 ( 0.01%) 279.58
frag 3163 ( 0.01%) 2379531 ( 0.01%) 752.30
ip6 160675 ( 0.40%) 93890032 ( 0.32%) 584.35
tcp6 93499 ( 0.23%) 75156893 ( 0.25%) 803.83
http(s) 15954 ( 0.04%) 13615092 ( 0.05%) 853.40
http(c) 16394 ( 0.04%) 1591966 ( 0.01%) 97.11
smtp 1074 ( 0.00%) 157755 ( 0.00%) 146.89
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 1152 ( 0.00%) 291709 ( 0.00%) 253.22
bgp 89 ( 0.00%) 17993 ( 0.00%) 202.17
other 58801 ( 0.15%) 59479234 ( 0.20%) 1011.53
udp6 51794 ( 0.13%) 16804710 ( 0.06%) 324.45
dns 50602 ( 0.13%) 16591394 ( 0.06%) 327.88
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 93 ( 0.00%) 93.00
other 1190 ( 0.00%) 213117 ( 0.00%) 179.09
icmp6 14972 ( 0.04%) 1641058 ( 0.01%) 109.61
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 279 ( 0.00%) 270175 ( 0.00%) 968.37
tcpdump file: 201101241400.dump.gz (982.79 MB)