Traffic Trace Info
DumpFile: 201102021400.dump
FileSize: 2735.21MB
Id: 201102021400
StartTime: Wed Feb 2 14:00:00 2011
EndTime: Wed Feb 2 14:15:01 2011
TotalTime: 900.72 seconds
TotalCapSize: -1960.35MB CapLen: 96 bytes
# of packets: 39292065 (29174.81MB)
AvgRate: 271.73Mbps stddev:41.57M
IP flow (unique src/dst pair) Information
# of flows: 900107 (avg. 43.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.8% 1.4% 1.4% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 458287
Top 10 bandwidth usage (bytes/total in %):
14.0% 5.5% 4.8% 4.3% 3.6% 3.5% 3.4% 2.7% 2.5% 2.4%
# of IPv6 addresses: 3723
Top 10 bandwidth usage (bytes/total in %):
64.3% 61.5% 10.8% 10.8% 6.3% 6.2% 4.7% 4.6% 2.2% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102021400.pktlen.png)
detailed numbers
[ 32- 63]: 7967390
[ 64- 127]: 8703335
[ 128- 255]: 1297943
[ 256- 511]: 1208412
[ 512- 1023]: 1030130
[ 1024- 2047]: 19084855
Protocol Breakdown
![[protocol breakdown chart]](201102021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39292065 (100.00%) 30592009335 (100.00%) 778.58
ip 38987706 ( 99.23%) 30371464532 ( 99.28%) 779.00
tcp 30569179 ( 77.80%) 25201013253 ( 82.38%) 824.39
http(s) 14360819 ( 36.55%) 18949156221 ( 61.94%) 1319.50
http(c) 9156691 ( 23.30%) 2626668877 ( 8.59%) 286.86
squid 211828 ( 0.54%) 96209392 ( 0.31%) 454.19
smtp 430604 ( 1.10%) 142774712 ( 0.47%) 331.57
ftp 148897 ( 0.38%) 12604940 ( 0.04%) 84.66
pop3 14990 ( 0.04%) 5613647 ( 0.02%) 374.49
imap 5489 ( 0.01%) 2290131 ( 0.01%) 417.22
telnet 187 ( 0.00%) 38157 ( 0.00%) 204.05
ssh 142785 ( 0.36%) 24627703 ( 0.08%) 172.48
dns 11301 ( 0.03%) 939562 ( 0.00%) 83.14
bgp 568 ( 0.00%) 103818 ( 0.00%) 182.78
napster 145 ( 0.00%) 10276 ( 0.00%) 70.87
realaud 39 ( 0.00%) 9402 ( 0.00%) 241.08
rtsp 11219 ( 0.03%) 11138825 ( 0.04%) 992.85
icecast 9435 ( 0.02%) 726326 ( 0.00%) 76.98
hotline 44 ( 0.00%) 20145 ( 0.00%) 457.84
other 6064106 ( 15.43%) 3328079199 ( 10.88%) 548.82
udp 7330089 ( 18.66%) 4762072663 ( 15.57%) 649.66
dns 869184 ( 2.21%) 133384877 ( 0.44%) 153.46
realaud 9 ( 0.00%) 1276 ( 0.00%) 141.78
halflif 50 ( 0.00%) 5299 ( 0.00%) 105.98
starcra 49 ( 0.00%) 7214 ( 0.00%) 147.22
everque 1470 ( 0.00%) 241855 ( 0.00%) 164.53
unreal 78 ( 0.00%) 6871 ( 0.00%) 88.09
quake 29 ( 0.00%) 3109 ( 0.00%) 107.21
cuseeme 7 ( 0.00%) 541 ( 0.00%) 77.29
other 6457877 ( 16.44%) 4628298491 ( 15.13%) 716.69
icmp 394087 ( 1.00%) 77912733 ( 0.25%) 197.70
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1914 ( 0.00%) 624928 ( 0.00%) 326.50
ip6 676895 ( 1.72%) 326025460 ( 1.07%) 481.65
other 15357 ( 0.04%) 3796225 ( 0.01%) 247.20
frag 14197 ( 0.04%) 10851064 ( 0.04%) 764.32
ip6 304359 ( 0.77%) 220544803 ( 0.72%) 724.62
tcp6 235868 ( 0.60%) 202018434 ( 0.66%) 856.49
http(s) 16597 ( 0.04%) 18684609 ( 0.06%) 1125.78
http(c) 89491 ( 0.23%) 7899036 ( 0.03%) 88.27
squid 12 ( 0.00%) 1016 ( 0.00%) 84.67
smtp 1314 ( 0.00%) 1337225 ( 0.00%) 1017.68
ftp 100 ( 0.00%) 8939 ( 0.00%) 89.39
ssh 18 ( 0.00%) 8936 ( 0.00%) 496.44
dns 863 ( 0.00%) 218940 ( 0.00%) 253.70
bgp 89 ( 0.00%) 15575 ( 0.00%) 175.00
other 127384 ( 0.32%) 173844158 ( 0.57%) 1364.73
udp6 50726 ( 0.13%) 16283679 ( 0.05%) 321.01
dns 49314 ( 0.13%) 16041636 ( 0.05%) 325.30
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1411 ( 0.00%) 241935 ( 0.00%) 171.46
icmp6 17157 ( 0.04%) 1794071 ( 0.01%) 104.57
ip6 79 ( 0.00%) 10822 ( 0.00%) 136.99
pim6 47 ( 0.00%) 5752 ( 0.00%) 122.38
other6 482 ( 0.00%) 432045 ( 0.00%) 896.36
tcpdump file: 201102021400.dump.gz (950.52 MB)