Traffic Trace Info
DumpFile: 201101291400.dump
FileSize: 3366.22MB
Id: 201101291400
StartTime: Sat Jan 29 14:00:00 2011
EndTime: Sat Jan 29 14:15:00 2011
TotalTime: 899.90 seconds
TotalCapSize: -1453.46MB CapLen: 96 bytes
# of packets: 47426737 (36120.73MB)
AvgRate: 336.78Mbps stddev:45.26M
IP flow (unique src/dst pair) Information
# of flows: 1016919 (avg. 46.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.8% 4.1% 3.7% 3.7% 2.0% 1.2% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 550040
Top 10 bandwidth usage (bytes/total in %):
14.1% 14.1% 10.9% 6.3% 4.5% 4.4% 4.3% 3.9% 3.8% 3.7%
# of IPv6 addresses: 3342
Top 10 bandwidth usage (bytes/total in %):
26.6% 26.5% 25.7% 24.9% 24.9% 14.5% 10.1% 7.0% 7.0% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201101291400.pktlen.png)
detailed numbers
[ 32- 63]: 10120527
[ 64- 127]: 9917887
[ 128- 255]: 1361673
[ 256- 511]: 1282832
[ 512- 1023]: 841124
[ 1024- 2047]: 23902694
Protocol Breakdown
![[protocol breakdown chart]](201101291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47426737 (100.00%) 37875330915 (100.00%) 798.61
ip 47243984 ( 99.61%) 37727522575 ( 99.61%) 798.57
tcp 40301941 ( 84.98%) 34031024588 ( 89.85%) 844.40
http(s) 19036486 ( 40.14%) 24693999162 ( 65.20%) 1297.19
http(c) 12321613 ( 25.98%) 6774279617 ( 17.89%) 549.79
squid 345246 ( 0.73%) 128227391 ( 0.34%) 371.41
smtp 183696 ( 0.39%) 85510720 ( 0.23%) 465.50
nntp 6 ( 0.00%) 414 ( 0.00%) 69.00
ftp 101333 ( 0.21%) 17488574 ( 0.05%) 172.59
pop3 11754 ( 0.02%) 5809084 ( 0.02%) 494.22
imap 3143 ( 0.01%) 1383127 ( 0.00%) 440.07
telnet 1342 ( 0.00%) 119218 ( 0.00%) 88.84
ssh 72483 ( 0.15%) 9070059 ( 0.02%) 125.13
dns 7536 ( 0.02%) 669215 ( 0.00%) 88.80
bgp 568 ( 0.00%) 99804 ( 0.00%) 175.71
napster 109 ( 0.00%) 10729 ( 0.00%) 98.43
realaud 1014 ( 0.00%) 70461 ( 0.00%) 69.49
rtsp 9721 ( 0.02%) 10636952 ( 0.03%) 1094.22
icecast 2062 ( 0.00%) 142071 ( 0.00%) 68.90
hotline 37 ( 0.00%) 4870 ( 0.00%) 131.62
other 8203791 ( 17.30%) 2303503060 ( 6.08%) 280.79
udp 5892045 ( 12.42%) 3427873715 ( 9.05%) 581.78
dns 702509 ( 1.48%) 108668543 ( 0.29%) 154.69
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 11 ( 0.00%) 1245 ( 0.00%) 113.18
halflif 141 ( 0.00%) 11870 ( 0.00%) 84.18
starcra 8426 ( 0.02%) 575159 ( 0.00%) 68.26
everque 639 ( 0.00%) 93846 ( 0.00%) 146.86
unreal 37 ( 0.00%) 3794 ( 0.00%) 102.54
quake 17 ( 0.00%) 1851 ( 0.00%) 108.88
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 5178759 ( 10.92%) 3318321471 ( 8.76%) 640.76
icmp 521686 ( 1.10%) 114068502 ( 0.30%) 218.65
ipip 177 ( 0.00%) 18486 ( 0.00%) 104.44
ipsec 2554 ( 0.01%) 812460 ( 0.00%) 318.11
ip6 512106 ( 1.08%) 151476652 ( 0.40%) 295.79
other 13475 ( 0.03%) 2248172 ( 0.01%) 166.84
frag 8292 ( 0.02%) 6576730 ( 0.02%) 793.14
ip6 182753 ( 0.39%) 147808340 ( 0.39%) 808.79
tcp6 130757 ( 0.28%) 135060114 ( 0.36%) 1032.91
http(s) 43199 ( 0.09%) 62620546 ( 0.17%) 1449.58
http(c) 27208 ( 0.06%) 2514389 ( 0.01%) 92.41
smtp 154 ( 0.00%) 72772 ( 0.00%) 472.55
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 669 ( 0.00%) 169066 ( 0.00%) 252.71
bgp 95 ( 0.00%) 25268 ( 0.00%) 265.98
other 59397 ( 0.13%) 69654929 ( 0.18%) 1172.70
udp6 34746 ( 0.07%) 10833998 ( 0.03%) 311.81
dns 33564 ( 0.07%) 10622213 ( 0.03%) 316.48
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1181 ( 0.00%) 211674 ( 0.00%) 179.23
icmp6 16974 ( 0.04%) 1762066 ( 0.00%) 103.81
ip6 78 ( 0.00%) 10754 ( 0.00%) 137.87
pim6 47 ( 0.00%) 5712 ( 0.00%) 121.53
other6 151 ( 0.00%) 135696 ( 0.00%) 898.65
tcpdump file: 201101291400.dump.gz (1124.87 MB)