Traffic Trace Info
DumpFile: 201102131400.dump
FileSize: 1836.68MB
Id: 201102131400
StartTime: Sun Feb 13 14:00:00 2011
EndTime: Sun Feb 13 14:15:00 2011
TotalTime: 900.50 seconds
TotalCapSize: 1440.40MB CapLen: 96 bytes
# of packets: 25970238 (19442.86MB)
AvgRate: 181.05Mbps stddev:38.65M
IP flow (unique src/dst pair) Information
# of flows: 1245720 (avg. 20.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.3% 1.3% 1.0% 1.0% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 591589
Top 10 bandwidth usage (bytes/total in %):
22.9% 6.0% 4.1% 3.4% 3.0% 2.9% 2.1% 1.9% 1.9% 1.8%
# of IPv6 addresses: 3370
Top 10 bandwidth usage (bytes/total in %):
31.8% 31.8% 24.1% 20.0% 10.5% 10.5% 6.1% 3.3% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102131400.pktlen.png)
detailed numbers
[ 32- 63]: 5383548
[ 64- 127]: 5633911
[ 128- 255]: 991262
[ 256- 511]: 681802
[ 512- 1023]: 531300
[ 1024- 2047]: 12748415
Protocol Breakdown
![[protocol breakdown chart]](201102131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25970238 (100.00%) 20387320378 (100.00%) 785.03
ip 25823250 ( 99.43%) 20315724399 ( 99.65%) 786.72
tcp 21374526 ( 82.30%) 18392596190 ( 90.22%) 860.49
http(s) 11306572 ( 43.54%) 15309434502 ( 75.09%) 1354.03
http(c) 5430059 ( 20.91%) 1314547825 ( 6.45%) 242.09
squid 148837 ( 0.57%) 65166454 ( 0.32%) 437.84
smtp 126105 ( 0.49%) 31374519 ( 0.15%) 248.80
ftp 44735 ( 0.17%) 3996126 ( 0.02%) 89.33
pop3 6526 ( 0.03%) 4153422 ( 0.02%) 636.44
imap 3462 ( 0.01%) 1761919 ( 0.01%) 508.93
telnet 746 ( 0.00%) 49974 ( 0.00%) 66.99
ssh 104594 ( 0.40%) 10673212 ( 0.05%) 102.04
dns 8489 ( 0.03%) 668343 ( 0.00%) 78.73
bgp 571 ( 0.00%) 93221 ( 0.00%) 163.26
napster 188 ( 0.00%) 16566 ( 0.00%) 88.12
realaud 70 ( 0.00%) 4766 ( 0.00%) 68.09
rtsp 18765 ( 0.07%) 18856796 ( 0.09%) 1004.89
icecast 20478 ( 0.08%) 15762843 ( 0.08%) 769.75
hotline 152 ( 0.00%) 9466 ( 0.00%) 62.28
other 4154177 ( 16.00%) 1616026236 ( 7.93%) 389.01
udp 3383238 ( 13.03%) 1560800633 ( 7.66%) 461.33
dns 660530 ( 2.54%) 98899774 ( 0.49%) 149.73
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 36 ( 0.00%) 6760 ( 0.00%) 187.78
halflif 17 ( 0.00%) 1339 ( 0.00%) 78.76
starcra 186 ( 0.00%) 19369 ( 0.00%) 104.13
everque 210 ( 0.00%) 43476 ( 0.00%) 207.03
unreal 118 ( 0.00%) 14080 ( 0.00%) 119.32
quake 43 ( 0.00%) 4159 ( 0.00%) 96.72
cuseeme 7 ( 0.00%) 1002 ( 0.00%) 143.14
other 2722004 ( 10.48%) 1461755188 ( 7.17%) 537.01
icmp 447779 ( 1.72%) 68462817 ( 0.34%) 152.89
ipip 179 ( 0.00%) 18682 ( 0.00%) 104.37
ipsec 8986 ( 0.03%) 2271928 ( 0.01%) 252.83
ip6 590208 ( 2.27%) 286664460 ( 1.41%) 485.70
other 18334 ( 0.07%) 4909689 ( 0.02%) 267.79
frag 514 ( 0.00%) 573093 ( 0.00%) 1114.97
ip6 146988 ( 0.57%) 71595979 ( 0.35%) 487.09
tcp6 57002 ( 0.22%) 35917945 ( 0.18%) 630.12
http(s) 5459 ( 0.02%) 3091881 ( 0.02%) 566.38
http(c) 16410 ( 0.06%) 1574601 ( 0.01%) 95.95
smtp 309 ( 0.00%) 45913 ( 0.00%) 148.59
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
dns 469 ( 0.00%) 124838 ( 0.00%) 266.18
bgp 91 ( 0.00%) 19295 ( 0.00%) 212.03
other 34229 ( 0.13%) 31058273 ( 0.15%) 907.37
udp6 39186 ( 0.15%) 10819224 ( 0.05%) 276.10
dns 33653 ( 0.13%) 10164832 ( 0.05%) 302.05
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 5531 ( 0.02%) 654176 ( 0.00%) 118.27
icmp6 18321 ( 0.07%) 2097571 ( 0.01%) 114.49
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 47 ( 0.00%) 5712 ( 0.00%) 121.53
other6 32348 ( 0.12%) 22744065 ( 0.11%) 703.11
tcpdump file: 201102131400.dump.gz (618.04 MB)