Traffic Trace Info
DumpFile: 201102071400.dump
FileSize: 3338.93MB
Id: 201102071400
StartTime: Mon Feb 7 14:00:01 2011
EndTime: Mon Feb 7 14:15:01 2011
TotalTime: 900.00 seconds
TotalCapSize: -1462.35MB CapLen: 96 bytes
# of packets: 46220577 (34467.57MB)
AvgRate: 321.23Mbps stddev:43.26M
IP flow (unique src/dst pair) Information
# of flows: 1027564 (avg. 44.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.5% 1.2% 1.2% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 527853
Top 10 bandwidth usage (bytes/total in %):
18.7% 18.0% 8.5% 8.4% 8.2% 4.3% 2.1% 1.6% 1.5% 1.4%
# of IPv6 addresses: 3569
Top 10 bandwidth usage (bytes/total in %):
34.0% 34.0% 17.8% 15.8% 15.4% 13.0% 11.4% 11.4% 5.8% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102071400.pktlen.png)
detailed numbers
[ 32- 63]: 7354398
[ 64- 127]: 12955328
[ 128- 255]: 1528224
[ 256- 511]: 794428
[ 512- 1023]: 773837
[ 1024- 2047]: 22814362
Protocol Breakdown
![[protocol breakdown chart]](201102071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46220577 (100.00%) 36141861834 (100.00%) 781.94
ip 45996659 ( 99.52%) 35942838025 ( 99.45%) 781.42
tcp 38062007 ( 82.35%) 31843882807 ( 88.11%) 836.63
http(s) 20162140 ( 43.62%) 28333570018 ( 78.40%) 1405.29
http(c) 11556467 ( 25.00%) 1305540159 ( 3.61%) 112.97
squid 127695 ( 0.28%) 94190212 ( 0.26%) 737.62
smtp 308518 ( 0.67%) 190735941 ( 0.53%) 618.23
nntp 8 ( 0.00%) 486 ( 0.00%) 60.75
ftp 39879 ( 0.09%) 3742312 ( 0.01%) 93.84
pop3 20030 ( 0.04%) 6260013 ( 0.02%) 312.53
imap 17427 ( 0.04%) 12761073 ( 0.04%) 732.26
telnet 2224 ( 0.00%) 173272 ( 0.00%) 77.91
ssh 518278 ( 1.12%) 89026887 ( 0.25%) 171.77
dns 11470 ( 0.02%) 979568 ( 0.00%) 85.40
bgp 559 ( 0.00%) 87805 ( 0.00%) 157.08
napster 111 ( 0.00%) 7741 ( 0.00%) 69.74
realaud 51 ( 0.00%) 3744 ( 0.00%) 73.41
rtsp 13108 ( 0.03%) 12853025 ( 0.04%) 980.55
icecast 7909 ( 0.02%) 613661 ( 0.00%) 77.59
hotline 22 ( 0.00%) 2962 ( 0.00%) 134.64
other 5276111 ( 11.42%) 1793333928 ( 4.96%) 339.90
udp 6795244 ( 14.70%) 3765238250 ( 10.42%) 554.10
dns 859602 ( 1.86%) 131696961 ( 0.36%) 153.21
realaud 12 ( 0.00%) 1637 ( 0.00%) 136.42
halflif 46 ( 0.00%) 3517 ( 0.00%) 76.46
starcra 231 ( 0.00%) 18933 ( 0.00%) 81.96
everque 683 ( 0.00%) 81698 ( 0.00%) 119.62
unreal 11 ( 0.00%) 882 ( 0.00%) 80.18
quake 41 ( 0.00%) 3891 ( 0.00%) 94.90
cuseeme 4 ( 0.00%) 681 ( 0.00%) 170.25
other 5934532 ( 12.84%) 3633377038 ( 10.05%) 612.24
icmp 489981 ( 1.06%) 86510586 ( 0.24%) 176.56
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 4407 ( 0.01%) 1168234 ( 0.00%) 265.09
ip6 619254 ( 1.34%) 240807578 ( 0.67%) 388.87
other 25582 ( 0.06%) 5211398 ( 0.01%) 203.71
frag 2413 ( 0.01%) 1387639 ( 0.00%) 575.07
ip6 223918 ( 0.48%) 199023809 ( 0.55%) 888.82
tcp6 149481 ( 0.32%) 174261067 ( 0.48%) 1165.77
http(s) 29743 ( 0.06%) 35071714 ( 0.10%) 1179.16
http(c) 12220 ( 0.03%) 1211878 ( 0.00%) 99.17
squid 474 ( 0.00%) 337239 ( 0.00%) 711.47
smtp 356 ( 0.00%) 57080 ( 0.00%) 160.34
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
ssh 45966 ( 0.10%) 67889256 ( 0.19%) 1476.95
dns 1074 ( 0.00%) 271523 ( 0.00%) 252.81
bgp 89 ( 0.00%) 16916 ( 0.00%) 190.07
icecast 7 ( 0.00%) 1192 ( 0.00%) 170.29
other 59517 ( 0.13%) 69401125 ( 0.19%) 1166.07
udp6 56520 ( 0.12%) 19223262 ( 0.05%) 340.11
dns 48265 ( 0.10%) 15973847 ( 0.04%) 330.96
other 8255 ( 0.02%) 3249415 ( 0.01%) 393.63
icmp6 11960 ( 0.03%) 1438132 ( 0.00%) 120.25
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 48 ( 0.00%) 5848 ( 0.00%) 121.83
other6 5824 ( 0.01%) 4083970 ( 0.01%) 701.23
tcpdump file: 201102071400.dump.gz (1086.59 MB)