Traffic Trace Info
DumpFile: 201102121400.dump
FileSize: 2104.25MB
Id: 201102121400
StartTime: Sat Feb 12 14:00:01 2011
EndTime: Sat Feb 12 14:15:00 2011
TotalTime: 899.30 seconds
TotalCapSize: 1641.29MB CapLen: 96 bytes
# of packets: 30340316 (23433.65MB)
AvgRate: 218.57Mbps stddev:36.87M
IP flow (unique src/dst pair) Information
# of flows: 822537 (avg. 36.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.7% 1.5% 1.1% 1.1% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 450097
Top 10 bandwidth usage (bytes/total in %):
14.2% 6.7% 3.9% 3.6% 3.6% 3.3% 3.2% 2.7% 2.4% 2.3%
# of IPv6 addresses: 3654
Top 10 bandwidth usage (bytes/total in %):
22.1% 18.9% 18.9% 15.1% 13.0% 12.7% 10.6% 9.3% 7.3% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102121400.pktlen.png)
detailed numbers
[ 32- 63]: 5556802
[ 64- 127]: 6355502
[ 128- 255]: 1403394
[ 256- 511]: 879679
[ 512- 1023]: 699741
[ 1024- 2047]: 15445198
Protocol Breakdown
![[protocol breakdown chart]](201102121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30340316 (100.00%) 24571959695 (100.00%) 809.88
ip 30194566 ( 99.52%) 24492554550 ( 99.68%) 811.16
tcp 23586657 ( 77.74%) 20748397280 ( 84.44%) 879.67
http(s) 13158458 ( 43.37%) 17955050411 ( 73.07%) 1364.53
http(c) 6229628 ( 20.53%) 1092322976 ( 4.45%) 175.34
squid 223323 ( 0.74%) 68231767 ( 0.28%) 305.53
smtp 145073 ( 0.48%) 46204784 ( 0.19%) 318.49
ftp 84217 ( 0.28%) 7278502 ( 0.03%) 86.43
pop3 5015 ( 0.02%) 1756087 ( 0.01%) 350.17
imap 6449 ( 0.02%) 4098444 ( 0.02%) 635.52
telnet 154 ( 0.00%) 9953 ( 0.00%) 64.63
ssh 54641 ( 0.18%) 10729449 ( 0.04%) 196.36
dns 8645 ( 0.03%) 675989 ( 0.00%) 78.19
bgp 568 ( 0.00%) 87630 ( 0.00%) 154.28
napster 52 ( 0.00%) 7724 ( 0.00%) 148.54
realaud 39 ( 0.00%) 6098 ( 0.00%) 156.36
icecast 19340 ( 0.06%) 15685585 ( 0.06%) 811.04
hotline 29 ( 0.00%) 2315 ( 0.00%) 79.83
other 3651026 ( 12.03%) 1546249566 ( 6.29%) 423.51
udp 5573815 ( 18.37%) 3528184776 ( 14.36%) 632.99
dns 697221 ( 2.30%) 109745798 ( 0.45%) 157.40
realaud 23 ( 0.00%) 2628 ( 0.00%) 114.26
halflif 196 ( 0.00%) 15326 ( 0.00%) 78.19
starcra 45 ( 0.00%) 5942 ( 0.00%) 132.04
everque 314 ( 0.00%) 71010 ( 0.00%) 226.15
unreal 27 ( 0.00%) 2878 ( 0.00%) 106.59
quake 52 ( 0.00%) 4196 ( 0.00%) 80.69
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 4875517 ( 16.07%) 3418238773 ( 13.91%) 701.10
icmp 563091 ( 1.86%) 94484361 ( 0.38%) 167.80
ipip 176 ( 0.00%) 18388 ( 0.00%) 104.48
ipsec 1057 ( 0.00%) 424114 ( 0.00%) 401.24
ip6 447355 ( 1.47%) 113773062 ( 0.46%) 254.32
other 22415 ( 0.07%) 7272569 ( 0.03%) 324.45
frag 1696 ( 0.01%) 1535395 ( 0.01%) 905.30
ip6 145750 ( 0.48%) 79405145 ( 0.32%) 544.80
tcp6 83878 ( 0.28%) 65047845 ( 0.26%) 775.51
http(s) 7561 ( 0.02%) 2504382 ( 0.01%) 331.22
http(c) 15259 ( 0.05%) 1347745 ( 0.01%) 88.32
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 133 ( 0.00%) 22067 ( 0.00%) 165.92
ftp 37 ( 0.00%) 3292 ( 0.00%) 88.97
ssh 74 ( 0.00%) 9749 ( 0.00%) 131.74
dns 564 ( 0.00%) 150975 ( 0.00%) 267.69
bgp 88 ( 0.00%) 16165 ( 0.00%) 183.69
other 60159 ( 0.20%) 60993216 ( 0.25%) 1013.87
udp6 39448 ( 0.13%) 11668013 ( 0.05%) 295.78
dns 36714 ( 0.12%) 11155442 ( 0.05%) 303.85
unreal 1 ( 0.00%) 120 ( 0.00%) 120.00
other 2733 ( 0.01%) 512451 ( 0.00%) 187.50
icmp6 22016 ( 0.07%) 2420764 ( 0.01%) 109.95
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 280 ( 0.00%) 251731 ( 0.00%) 899.04
tcpdump file: 201102121400.dump.gz (713.05 MB)