Traffic Trace Info
DumpFile: 201102011400.dump
FileSize: 2594.50MB
Id: 201102011400
StartTime: Tue Feb 1 14:00:00 2011
EndTime: Tue Feb 1 14:15:00 2011
TotalTime: 900.39 seconds
TotalCapSize: 2017.19MB CapLen: 96 bytes
# of packets: 37834400 (28488.57MB)
AvgRate: 265.34Mbps stddev:36.24M
IP flow (unique src/dst pair) Information
# of flows: 847258 (avg. 44.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 3.5% 1.6% 1.6% 1.2% 1.2% 1.0% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 447443
Top 10 bandwidth usage (bytes/total in %):
14.1% 10.7% 6.9% 5.7% 5.5% 3.5% 3.1% 2.4% 2.2% 2.1%
# of IPv6 addresses: 3478
Top 10 bandwidth usage (bytes/total in %):
31.7% 28.9% 24.0% 24.0% 18.1% 18.1% 4.4% 4.4% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102011400.pktlen.png)
detailed numbers
[ 32- 63]: 7720360
[ 64- 127]: 8079508
[ 128- 255]: 1208961
[ 256- 511]: 1190185
[ 512- 1023]: 1158086
[ 1024- 2047]: 18477300
Protocol Breakdown
![[protocol breakdown chart]](201102011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37834400 (100.00%) 29872428525 (100.00%) 789.56
ip 37648026 ( 99.51%) 29744607348 ( 99.57%) 790.07
tcp 28658650 ( 75.75%) 22301402830 ( 74.66%) 778.17
http(s) 12591793 ( 33.28%) 16845327814 ( 56.39%) 1337.80
http(c) 9271558 ( 24.51%) 2092037880 ( 7.00%) 225.64
squid 287154 ( 0.76%) 109358861 ( 0.37%) 380.84
smtp 347568 ( 0.92%) 227306657 ( 0.76%) 653.99
ftp 55757 ( 0.15%) 8036703 ( 0.03%) 144.14
pop3 29458 ( 0.08%) 7467237 ( 0.02%) 253.49
imap 7556 ( 0.02%) 2506252 ( 0.01%) 331.69
telnet 1163 ( 0.00%) 82996 ( 0.00%) 71.36
ssh 24232 ( 0.06%) 6414803 ( 0.02%) 264.72
dns 8696 ( 0.02%) 760334 ( 0.00%) 87.43
bgp 571 ( 0.00%) 103175 ( 0.00%) 180.69
napster 56 ( 0.00%) 6973 ( 0.00%) 124.52
realaud 66 ( 0.00%) 11032 ( 0.00%) 167.15
rtsp 15817 ( 0.04%) 16122544 ( 0.05%) 1019.32
icecast 32072 ( 0.08%) 23775215 ( 0.08%) 741.31
hotline 86 ( 0.00%) 6171 ( 0.00%) 71.76
other 5985047 ( 15.82%) 2962078183 ( 9.92%) 494.91
udp 8153982 ( 21.55%) 7228862566 ( 24.20%) 886.54
dns 831536 ( 2.20%) 129248945 ( 0.43%) 155.43
rip 48 ( 0.00%) 72672 ( 0.00%) 1514.00
realaud 74 ( 0.00%) 54209 ( 0.00%) 732.55
halflif 33 ( 0.00%) 3323 ( 0.00%) 100.70
starcra 39 ( 0.00%) 38196 ( 0.00%) 979.38
everque 909 ( 0.00%) 141518 ( 0.00%) 155.69
unreal 28 ( 0.00%) 5497 ( 0.00%) 196.32
quake 69 ( 0.00%) 77761 ( 0.00%) 1126.97
cuseeme 2 ( 0.00%) 180 ( 0.00%) 90.00
other 4987139 ( 13.18%) 3925302310 ( 13.14%) 787.09
icmp 413517 ( 1.09%) 92278063 ( 0.31%) 223.15
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6270 ( 0.02%) 4053140 ( 0.01%) 646.43
ip6 393870 ( 1.04%) 114375355 ( 0.38%) 290.39
other 21552 ( 0.06%) 3616124 ( 0.01%) 167.79
frag 3058960 ( 8.09%) 4250128421 ( 14.23%) 1389.40
ip6 186374 ( 0.49%) 127821177 ( 0.43%) 685.83
tcp6 114825 ( 0.30%) 108117032 ( 0.36%) 941.58
http(s) 25844 ( 0.07%) 30354130 ( 0.10%) 1174.51
http(c) 26408 ( 0.07%) 2458058 ( 0.01%) 93.08
smtp 1525 ( 0.00%) 563739 ( 0.00%) 369.66
ftp 102 ( 0.00%) 9081 ( 0.00%) 89.03
ssh 119 ( 0.00%) 21226 ( 0.00%) 178.37
dns 685 ( 0.00%) 186716 ( 0.00%) 272.58
bgp 88 ( 0.00%) 14718 ( 0.00%) 167.25
other 60054 ( 0.16%) 74509364 ( 0.25%) 1240.71
udp6 55465 ( 0.15%) 17204318 ( 0.06%) 310.18
dns 46956 ( 0.12%) 15832362 ( 0.05%) 337.17
starcra 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 2 ( 0.00%) 196 ( 0.00%) 98.00
other 8505 ( 0.02%) 1371543 ( 0.00%) 161.26
icmp6 14832 ( 0.04%) 1641215 ( 0.01%) 110.65
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 47 ( 0.00%) 5712 ( 0.00%) 121.53
other6 1119 ( 0.00%) 841202 ( 0.00%) 751.74
tcpdump file: 201102011400.dump.gz (883.24 MB)