Traffic Trace Info
DumpFile: 201102091400.dump
FileSize: 2683.41MB
Id: 201102091400
StartTime: Wed Feb 9 14:00:01 2011
EndTime: Wed Feb 9 14:15:01 2011
TotalTime: 900.00 seconds
TotalCapSize: -1997.17MB CapLen: 96 bytes
# of packets: 38310312 (26811.05MB)
AvgRate: 249.88Mbps stddev:46.74M
IP flow (unique src/dst pair) Information
# of flows: 926821 (avg. 41.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.5% 1.4% 1.2% 1.2% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 490798
Top 10 bandwidth usage (bytes/total in %):
17.9% 4.9% 4.5% 4.2% 3.1% 2.4% 2.4% 2.0% 2.0% 1.8%
# of IPv6 addresses: 3804
Top 10 bandwidth usage (bytes/total in %):
32.5% 27.1% 14.2% 14.2% 6.2% 6.2% 4.7% 4.7% 3.8% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102091400.pktlen.png)
detailed numbers
[ 32- 63]: 9813855
[ 64- 127]: 7687937
[ 128- 255]: 1453424
[ 256- 511]: 1000086
[ 512- 1023]: 986875
[ 1024- 2047]: 17368135
Protocol Breakdown
![[protocol breakdown chart]](201102091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38310312 (100.00%) 28113419771 (100.00%) 733.83
ip 38133380 ( 99.54%) 28042032139 ( 99.75%) 735.37
tcp 32408130 ( 84.59%) 25149425744 ( 89.46%) 776.02
http(s) 14610651 ( 38.14%) 19844136113 ( 70.59%) 1358.20
http(c) 10689574 ( 27.90%) 2379680706 ( 8.46%) 222.62
squid 247854 ( 0.65%) 98163375 ( 0.35%) 396.05
smtp 302639 ( 0.79%) 163051332 ( 0.58%) 538.77
ftp 80922 ( 0.21%) 7443161 ( 0.03%) 91.98
pop3 31931 ( 0.08%) 9138292 ( 0.03%) 286.19
imap 5176 ( 0.01%) 1480138 ( 0.01%) 285.96
telnet 849 ( 0.00%) 59967 ( 0.00%) 70.63
ssh 95676 ( 0.25%) 14992177 ( 0.05%) 156.70
dns 9803 ( 0.03%) 794973 ( 0.00%) 81.09
bgp 551 ( 0.00%) 91505 ( 0.00%) 166.07
napster 139 ( 0.00%) 9917 ( 0.00%) 71.35
realaud 37 ( 0.00%) 2654 ( 0.00%) 71.73
rtsp 7559 ( 0.02%) 8488810 ( 0.03%) 1123.01
icecast 1268 ( 0.00%) 161977 ( 0.00%) 127.74
hotline 78 ( 0.00%) 5459 ( 0.00%) 69.99
other 6323423 ( 16.51%) 2621725188 ( 9.33%) 414.61
udp 4894761 ( 12.78%) 2644820808 ( 9.41%) 540.34
dns 814025 ( 2.12%) 125851734 ( 0.45%) 154.60
realaud 28 ( 0.00%) 3170 ( 0.00%) 113.21
halflif 54 ( 0.00%) 7759 ( 0.00%) 143.69
starcra 41 ( 0.00%) 6104 ( 0.00%) 148.88
everque 236773 ( 0.62%) 274302806 ( 0.98%) 1158.51
unreal 74 ( 0.00%) 8360 ( 0.00%) 112.97
quake 39 ( 0.00%) 3423 ( 0.00%) 87.77
cuseeme 2 ( 0.00%) 171 ( 0.00%) 85.50
other 3843329 ( 10.03%) 2244579921 ( 7.98%) 584.02
icmp 392543 ( 1.02%) 93457370 ( 0.33%) 238.08
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9090 ( 0.02%) 4962676 ( 0.02%) 545.95
ip6 407786 ( 1.06%) 143321370 ( 0.51%) 351.46
other 20885 ( 0.05%) 6024901 ( 0.02%) 288.48
frag 3136 ( 0.01%) 2425987 ( 0.01%) 773.59
ip6 176932 ( 0.46%) 71387632 ( 0.25%) 403.47
tcp6 105493 ( 0.28%) 52323339 ( 0.19%) 495.99
http(s) 12389 ( 0.03%) 6031871 ( 0.02%) 486.87
http(c) 45933 ( 0.12%) 4016189 ( 0.01%) 87.44
squid 753 ( 0.00%) 202807 ( 0.00%) 269.33
smtp 200 ( 0.00%) 31109 ( 0.00%) 155.54
ftp 154 ( 0.00%) 62361 ( 0.00%) 404.94
ssh 746 ( 0.00%) 595736 ( 0.00%) 798.57
dns 924 ( 0.00%) 240945 ( 0.00%) 260.76
bgp 89 ( 0.00%) 16725 ( 0.00%) 187.92
other 44305 ( 0.12%) 41125596 ( 0.15%) 928.24
udp6 53748 ( 0.14%) 16541206 ( 0.06%) 307.75
dns 49387 ( 0.13%) 15579588 ( 0.06%) 315.46
halflif 1 ( 0.00%) 98 ( 0.00%) 98.00
starcra 1 ( 0.00%) 159 ( 0.00%) 159.00
everque 1 ( 0.00%) 123 ( 0.00%) 123.00
unreal 2 ( 0.00%) 208 ( 0.00%) 104.00
quake 6 ( 0.00%) 634 ( 0.00%) 105.67
other 4350 ( 0.01%) 960396 ( 0.00%) 220.78
icmp6 16774 ( 0.04%) 1872696 ( 0.01%) 111.64
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 47 ( 0.00%) 5752 ( 0.00%) 122.38
other6 787 ( 0.00%) 633345 ( 0.00%) 804.76
tcpdump file: 201102091400.dump.gz (911.25 MB)