Traffic Trace Info
DumpFile: 201102111400.dump
FileSize: 1938.48MB
Id: 201102111400
StartTime: Fri Feb 11 14:00:01 2011
EndTime: Fri Feb 11 14:15:00 2011
TotalTime: 899.43 seconds
TotalCapSize: 1520.62MB CapLen: 96 bytes
# of packets: 27383779 (21150.06MB)
AvgRate: 197.20Mbps stddev:45.11M
IP flow (unique src/dst pair) Information
# of flows: 844145 (avg. 32.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 1.9% 1.7% 1.4% 1.4% 1.4% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 481760
Top 10 bandwidth usage (bytes/total in %):
15.6% 10.6% 6.1% 5.3% 4.0% 4.0% 2.8% 2.6% 2.3% 2.1%
# of IPv6 addresses: 3566
Top 10 bandwidth usage (bytes/total in %):
90.7% 90.7% 2.2% 2.0% 2.0% 1.6% 0.6% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102111400.pktlen.png)
detailed numbers
[ 32- 63]: 5368906
[ 64- 127]: 5671390
[ 128- 255]: 1092862
[ 256- 511]: 758697
[ 512- 1023]: 535027
[ 1024- 2047]: 13956897
Protocol Breakdown
![[protocol breakdown chart]](201102111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27383779 (100.00%) 22177441142 (100.00%) 809.88
ip 27017821 ( 98.66%) 21757542709 ( 98.11%) 805.30
tcp 22543368 ( 82.32%) 19613395675 ( 88.44%) 870.03
http(s) 11968881 ( 43.71%) 16443343142 ( 74.14%) 1373.84
http(c) 5649500 ( 20.63%) 825767849 ( 3.72%) 146.17
squid 206168 ( 0.75%) 71410954 ( 0.32%) 346.37
smtp 206923 ( 0.76%) 128986686 ( 0.58%) 623.36
ftp 85772 ( 0.31%) 7632162 ( 0.03%) 88.98
pop3 12455 ( 0.05%) 4174770 ( 0.02%) 335.19
imap 3909 ( 0.01%) 1761134 ( 0.01%) 450.53
telnet 746 ( 0.00%) 49799 ( 0.00%) 66.75
ssh 63298 ( 0.23%) 16045075 ( 0.07%) 253.48
dns 7343 ( 0.03%) 571004 ( 0.00%) 77.76
bgp 561 ( 0.00%) 90137 ( 0.00%) 160.67
napster 14 ( 0.00%) 930 ( 0.00%) 66.43
realaud 42 ( 0.00%) 5859 ( 0.00%) 139.50
rtsp 8920 ( 0.03%) 7866611 ( 0.04%) 881.91
icecast 18695 ( 0.07%) 15623879 ( 0.07%) 835.73
hotline 5 ( 0.00%) 785 ( 0.00%) 157.00
other 4310136 ( 15.74%) 2090064899 ( 9.42%) 484.92
udp 3468268 ( 12.67%) 1747770534 ( 7.88%) 503.93
dns 687980 ( 2.51%) 108206509 ( 0.49%) 157.28
realaud 12 ( 0.00%) 1511 ( 0.00%) 125.92
halflif 16 ( 0.00%) 1993 ( 0.00%) 124.56
starcra 19 ( 0.00%) 2854 ( 0.00%) 150.21
everque 153 ( 0.00%) 56859 ( 0.00%) 371.63
unreal 51 ( 0.00%) 4921 ( 0.00%) 96.49
quake 42 ( 0.00%) 3276 ( 0.00%) 78.00
cuseeme 3 ( 0.00%) 286 ( 0.00%) 95.33
other 2779923 ( 10.15%) 1639430039 ( 7.39%) 589.74
icmp 510772 ( 1.87%) 106037541 ( 0.48%) 207.60
ipip 175 ( 0.00%) 18290 ( 0.00%) 104.51
ipsec 6370 ( 0.02%) 2532864 ( 0.01%) 397.62
ip6 340934 ( 1.25%) 104980395 ( 0.47%) 307.92
other 147934 ( 0.54%) 182807410 ( 0.82%) 1235.74
frag 411 ( 0.00%) 466321 ( 0.00%) 1134.60
ip6 365958 ( 1.34%) 419898433 ( 1.89%) 1147.40
tcp6 299090 ( 1.09%) 397954548 ( 1.79%) 1330.55
http(s) 11685 ( 0.04%) 5702716 ( 0.03%) 488.04
http(c) 18463 ( 0.07%) 1610576 ( 0.01%) 87.23
squid 30 ( 0.00%) 2664 ( 0.00%) 88.80
smtp 187 ( 0.00%) 60584 ( 0.00%) 323.98
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 650 ( 0.00%) 168121 ( 0.00%) 258.65
bgp 89 ( 0.00%) 17296 ( 0.00%) 194.34
other 267951 ( 0.98%) 390389447 ( 1.76%) 1456.94
udp6 36967 ( 0.13%) 11147759 ( 0.05%) 301.56
dns 34796 ( 0.13%) 10695347 ( 0.05%) 307.37
other 2171 ( 0.01%) 452412 ( 0.00%) 208.39
icmp6 17525 ( 0.06%) 2096125 ( 0.01%) 119.61
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 47 ( 0.00%) 5752 ( 0.00%) 122.38
other6 12248 ( 0.04%) 8683191 ( 0.04%) 708.95
tcpdump file: 201102111400.dump.gz (642.54 MB)