Traffic Trace Info
DumpFile: 201102101400.dump
FileSize: 3175.00MB
Id: 201102101400
StartTime: Thu Feb 10 14:00:00 2011
EndTime: Thu Feb 10 14:15:01 2011
TotalTime: 900.21 seconds
TotalCapSize: -1639.42MB CapLen: 96 bytes
# of packets: 47081240 (32042.45MB)
AvgRate: 298.58Mbps stddev:47.83M
IP flow (unique src/dst pair) Information
# of flows: 990073 (avg. 47.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.6% 3.2% 2.2% 1.5% 1.5% 1.2% 1.2% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 514935
Top 10 bandwidth usage (bytes/total in %):
12.2% 11.4% 11.0% 9.8% 5.1% 4.0% 3.3% 3.1% 2.5% 2.2%
# of IPv6 addresses: 4268
Top 10 bandwidth usage (bytes/total in %):
27.2% 26.2% 13.1% 9.9% 9.9% 9.5% 8.4% 6.6% 6.5% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102101400.pktlen.png)
detailed numbers
[ 32- 63]: 8658547
[ 64- 127]: 7908260
[ 128- 255]: 1633485
[ 256- 511]: 8199936
[ 512- 1023]: 1964510
[ 1024- 2047]: 18716502
Protocol Breakdown
![[protocol breakdown chart]](201102101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47081240 (100.00%) 33598949225 (100.00%) 713.64
ip 46913327 ( 99.64%) 33490156376 ( 99.68%) 713.87
tcp 32123740 ( 68.23%) 26588146389 ( 79.13%) 827.68
http(s) 15890751 ( 33.75%) 21494811475 ( 63.97%) 1352.66
http(c) 10115074 ( 21.48%) 2492200495 ( 7.42%) 246.38
squid 173276 ( 0.37%) 60770615 ( 0.18%) 350.72
smtp 390977 ( 0.83%) 270868943 ( 0.81%) 692.80
ftp 102523 ( 0.22%) 10507220 ( 0.03%) 102.49
pop3 42770 ( 0.09%) 33727884 ( 0.10%) 788.59
imap 6625 ( 0.01%) 1485777 ( 0.00%) 224.27
telnet 587 ( 0.00%) 43690 ( 0.00%) 74.43
ssh 103600 ( 0.22%) 35852124 ( 0.11%) 346.06
dns 9696 ( 0.02%) 826675 ( 0.00%) 85.26
bgp 566 ( 0.00%) 104864 ( 0.00%) 185.27
napster 67 ( 0.00%) 14218 ( 0.00%) 212.21
realaud 799 ( 0.00%) 49600 ( 0.00%) 62.08
rtsp 8976 ( 0.02%) 7853940 ( 0.02%) 874.99
icecast 18909 ( 0.04%) 15664042 ( 0.05%) 828.39
hotline 18 ( 0.00%) 3840 ( 0.00%) 213.33
other 5258525 ( 11.17%) 2163360927 ( 6.44%) 411.40
udp 13760024 ( 29.23%) 6692592337 ( 19.92%) 486.38
dns 829747 ( 1.76%) 131778514 ( 0.39%) 158.82
realaud 26 ( 0.00%) 2765 ( 0.00%) 106.35
halflif 74 ( 0.00%) 6819 ( 0.00%) 92.15
starcra 30 ( 0.00%) 3251 ( 0.00%) 108.37
everque 300 ( 0.00%) 58577 ( 0.00%) 195.26
unreal 23 ( 0.00%) 3439 ( 0.00%) 149.52
quake 343 ( 0.00%) 25296 ( 0.00%) 73.75
cuseeme 6 ( 0.00%) 504 ( 0.00%) 84.00
other 12929378 ( 27.46%) 6560647743 ( 19.53%) 507.42
icmp 465641 ( 0.99%) 99744034 ( 0.30%) 214.21
ipip 183 ( 0.00%) 19074 ( 0.00%) 104.23
ipsec 1283 ( 0.00%) 422050 ( 0.00%) 328.96
ip6 536001 ( 1.14%) 104613777 ( 0.31%) 195.17
other 26455 ( 0.06%) 4618715 ( 0.01%) 174.59
frag 402 ( 0.00%) 437901 ( 0.00%) 1089.31
ip6 167913 ( 0.36%) 108792849 ( 0.32%) 647.91
tcp6 97991 ( 0.21%) 89465633 ( 0.27%) 913.00
http(s) 13647 ( 0.03%) 11297307 ( 0.03%) 827.82
http(c) 12692 ( 0.03%) 1359979 ( 0.00%) 107.15
smtp 359 ( 0.00%) 43896 ( 0.00%) 122.27
ftp 215 ( 0.00%) 20611 ( 0.00%) 95.87
ssh 15 ( 0.00%) 1290 ( 0.00%) 86.00
dns 1016 ( 0.00%) 256558 ( 0.00%) 252.52
bgp 98 ( 0.00%) 19380 ( 0.00%) 197.76
other 69949 ( 0.15%) 76466612 ( 0.23%) 1093.18
udp6 52273 ( 0.11%) 17093456 ( 0.05%) 327.00
dns 47961 ( 0.10%) 15463098 ( 0.05%) 322.41
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 4309 ( 0.01%) 1630029 ( 0.00%) 378.28
icmp6 17282 ( 0.04%) 1986905 ( 0.01%) 114.97
ip6 79 ( 0.00%) 10872 ( 0.00%) 137.62
pim6 47 ( 0.00%) 5712 ( 0.00%) 121.53
other6 241 ( 0.00%) 230271 ( 0.00%) 955.48
tcpdump file: 201102101400.dump.gz (1068.70 MB)