Traffic Trace Info
DumpFile: 201102031400.dump
FileSize: 2369.95MB
Id: 201102031400
StartTime: Thu Feb 3 14:00:00 2011
EndTime: Thu Feb 3 14:15:00 2011
TotalTime: 900.09 seconds
TotalCapSize: 1856.93MB CapLen: 96 bytes
# of packets: 33619724 (23560.96MB)
AvgRate: 219.57Mbps stddev:37.30M
IP flow (unique src/dst pair) Information
# of flows: 830293 (avg. 40.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 434447
Top 10 bandwidth usage (bytes/total in %):
15.9% 4.3% 4.2% 3.6% 2.8% 2.5% 2.5% 2.1% 2.1% 2.0%
# of IPv6 addresses: 3564
Top 10 bandwidth usage (bytes/total in %):
47.1% 44.5% 22.3% 21.4% 3.6% 2.4% 2.0% 1.9% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102031400.pktlen.png)
detailed numbers
[ 32- 63]: 7466861
[ 64- 127]: 7695003
[ 128- 255]: 1257948
[ 256- 511]: 849907
[ 512- 1023]: 1229606
[ 1024- 2047]: 15120399
Protocol Breakdown
![[protocol breakdown chart]](201102031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33619724 (100.00%) 24705456024 (100.00%) 734.85
ip 33476629 ( 99.57%) 24625935750 ( 99.68%) 735.62
tcp 28326322 ( 84.26%) 22459960736 ( 90.91%) 792.90
http(s) 13538884 ( 40.27%) 18146043417 ( 73.45%) 1340.29
http(c) 8067683 ( 24.00%) 1571639850 ( 6.36%) 194.81
squid 207876 ( 0.62%) 89617691 ( 0.36%) 431.11
smtp 298635 ( 0.89%) 181016950 ( 0.73%) 606.15
ftp 188007 ( 0.56%) 16623643 ( 0.07%) 88.42
pop3 46904 ( 0.14%) 35782254 ( 0.14%) 762.88
imap 31647 ( 0.09%) 25742918 ( 0.10%) 813.44
telnet 900 ( 0.00%) 78719 ( 0.00%) 87.47
ssh 24262 ( 0.07%) 4726974 ( 0.02%) 194.83
dns 10859 ( 0.03%) 870651 ( 0.00%) 80.18
bgp 600 ( 0.00%) 125939 ( 0.00%) 209.90
napster 73 ( 0.00%) 11761 ( 0.00%) 161.11
realaud 54 ( 0.00%) 6220 ( 0.00%) 115.19
rtsp 6666 ( 0.02%) 7706356 ( 0.03%) 1156.07
icecast 34698 ( 0.10%) 23915084 ( 0.10%) 689.24
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 5868572 ( 17.46%) 2356052185 ( 9.54%) 401.47
udp 4299912 ( 12.79%) 1987536507 ( 8.04%) 462.23
dns 862200 ( 2.56%) 130973688 ( 0.53%) 151.91
realaud 8 ( 0.00%) 839 ( 0.00%) 104.88
halflif 27 ( 0.00%) 2613 ( 0.00%) 96.78
starcra 81 ( 0.00%) 16320 ( 0.00%) 201.48
everque 1692 ( 0.01%) 255985 ( 0.00%) 151.29
unreal 48 ( 0.00%) 5767 ( 0.00%) 120.15
quake 39 ( 0.00%) 2945 ( 0.00%) 75.51
cuseeme 8 ( 0.00%) 1031 ( 0.00%) 128.88
other 3435728 ( 10.22%) 1856219841 ( 7.51%) 540.27
icmp 507495 ( 1.51%) 100220100 ( 0.41%) 197.48
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3837 ( 0.01%) 1707870 ( 0.01%) 445.11
ip6 321939 ( 0.96%) 72917128 ( 0.30%) 226.49
other 16939 ( 0.05%) 3574139 ( 0.01%) 211.00
frag 372 ( 0.00%) 394961 ( 0.00%) 1061.72
ip6 143095 ( 0.43%) 79520274 ( 0.32%) 555.72
tcp6 81752 ( 0.24%) 63360819 ( 0.26%) 775.04
http(s) 8741 ( 0.03%) 6744713 ( 0.03%) 771.62
http(c) 17438 ( 0.05%) 1688744 ( 0.01%) 96.84
squid 33 ( 0.00%) 2794 ( 0.00%) 84.67
smtp 392 ( 0.00%) 152091 ( 0.00%) 387.99
ftp 2255 ( 0.01%) 233597 ( 0.00%) 103.59
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 646 ( 0.00%) 163124 ( 0.00%) 252.51
bgp 90 ( 0.00%) 16154 ( 0.00%) 179.49
other 52155 ( 0.16%) 54359430 ( 0.22%) 1042.27
udp6 44353 ( 0.13%) 14014205 ( 0.06%) 315.97
dns 43399 ( 0.13%) 13831941 ( 0.06%) 318.72
cuseeme 1 ( 0.00%) 102 ( 0.00%) 102.00
other 953 ( 0.00%) 182162 ( 0.00%) 191.15
icmp6 16585 ( 0.05%) 1879441 ( 0.01%) 113.32
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 278 ( 0.00%) 249085 ( 0.00%) 895.99
tcpdump file: 201102031400.dump.gz (806.38 MB)