Traffic Trace Info
DumpFile: 201102081400.dump
FileSize: 2564.78MB
Id: 201102081400
StartTime: Tue Feb 8 14:00:01 2011
EndTime: Tue Feb 8 14:15:00 2011
TotalTime: 899.31 seconds
TotalCapSize: 2003.15MB CapLen: 96 bytes
# of packets: 36806670 (25675.90MB)
AvgRate: 239.45Mbps stddev:51.83M
IP flow (unique src/dst pair) Information
# of flows: 944525 (avg. 38.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 1.9% 1.6% 1.3% 1.1% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 481697
Top 10 bandwidth usage (bytes/total in %):
15.5% 7.3% 5.9% 5.7% 3.8% 2.2% 2.1% 2.0% 1.9% 1.9%
# of IPv6 addresses: 3544
Top 10 bandwidth usage (bytes/total in %):
60.3% 60.3% 14.0% 7.8% 7.2% 7.2% 6.1% 5.2% 4.5% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102081400.pktlen.png)
detailed numbers
[ 32- 63]: 8301987
[ 64- 127]: 8417048
[ 128- 255]: 1506355
[ 256- 511]: 968013
[ 512- 1023]: 777730
[ 1024- 2047]: 16835537
Protocol Breakdown
![[protocol breakdown chart]](201102081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36806670 (100.00%) 26923133703 (100.00%) 731.47
ip 36550856 ( 99.30%) 26684664520 ( 99.11%) 730.07
tcp 28813104 ( 78.28%) 22509455315 ( 83.61%) 781.22
http(s) 13412903 ( 36.44%) 17868429711 ( 66.37%) 1332.18
http(c) 8943725 ( 24.30%) 2061921824 ( 7.66%) 230.54
squid 171817 ( 0.47%) 53464923 ( 0.20%) 311.17
smtp 311254 ( 0.85%) 169123873 ( 0.63%) 543.36
ftp 52390 ( 0.14%) 6520623 ( 0.02%) 124.46
pop3 38634 ( 0.10%) 29128376 ( 0.11%) 753.96
imap 10389 ( 0.03%) 4811807 ( 0.02%) 463.16
telnet 1369 ( 0.00%) 92101 ( 0.00%) 67.28
ssh 78951 ( 0.21%) 12050825 ( 0.04%) 152.64
dns 12597 ( 0.03%) 1002233 ( 0.00%) 79.56
bgp 613 ( 0.00%) 130211 ( 0.00%) 212.42
napster 220 ( 0.00%) 17134 ( 0.00%) 77.88
realaud 69 ( 0.00%) 9052 ( 0.00%) 131.19
rtsp 6594 ( 0.02%) 7691595 ( 0.03%) 1166.45
icecast 11814 ( 0.03%) 839052 ( 0.00%) 71.02
hotline 44 ( 0.00%) 4118 ( 0.00%) 93.59
other 5759719 ( 15.65%) 2294217737 ( 8.52%) 398.32
udp 6742389 ( 18.32%) 3828065882 ( 14.22%) 567.76
dns 840209 ( 2.28%) 128601232 ( 0.48%) 153.06
realaud 31 ( 0.00%) 2996 ( 0.00%) 96.65
halflif 363 ( 0.00%) 22903 ( 0.00%) 63.09
starcra 51 ( 0.00%) 5817 ( 0.00%) 114.06
everque 1521 ( 0.00%) 554598 ( 0.00%) 364.63
unreal 22 ( 0.00%) 5172 ( 0.00%) 235.09
quake 35 ( 0.00%) 2926 ( 0.00%) 83.60
cuseeme 15 ( 0.00%) 1136 ( 0.00%) 75.73
other 5900070 ( 16.03%) 3698827666 ( 13.74%) 626.91
icmp 376031 ( 1.02%) 61903070 ( 0.23%) 164.62
ipip 177 ( 0.00%) 18486 ( 0.00%) 104.44
ipsec 2174 ( 0.01%) 694212 ( 0.00%) 319.32
ip6 591915 ( 1.61%) 278483687 ( 1.03%) 470.48
other 25066 ( 0.07%) 6043868 ( 0.02%) 241.12
frag 188056 ( 0.51%) 139106928 ( 0.52%) 739.71
ip6 255814 ( 0.70%) 238469183 ( 0.89%) 932.20
tcp6 187193 ( 0.51%) 220054104 ( 0.82%) 1175.55
http(s) 8563 ( 0.02%) 5765359 ( 0.02%) 673.29
http(c) 21245 ( 0.06%) 1847316 ( 0.01%) 86.95
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 609 ( 0.00%) 162968 ( 0.00%) 267.60
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
ssh 653 ( 0.00%) 244934 ( 0.00%) 375.09
dns 1036 ( 0.00%) 270165 ( 0.00%) 260.78
bgp 89 ( 0.00%) 18851 ( 0.00%) 211.81
other 154954 ( 0.42%) 211740605 ( 0.79%) 1366.47
udp6 52967 ( 0.14%) 16228480 ( 0.06%) 306.39
dns 48209 ( 0.13%) 15635387 ( 0.06%) 324.33
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 4756 ( 0.01%) 592890 ( 0.00%) 124.66
icmp6 15086 ( 0.04%) 1773198 ( 0.01%) 117.54
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 440 ( 0.00%) 396559 ( 0.00%) 901.27
tcpdump file: 201102081400.dump.gz (881.54 MB)