Traffic Trace Info
DumpFile: 201102141400.dump
FileSize: 2734.35MB
Id: 201102141400
StartTime: Mon Feb 14 14:00:00 2011
EndTime: Mon Feb 14 14:15:01 2011
TotalTime: 900.60 seconds
TotalCapSize: -1953.55MB CapLen: 96 bytes
# of packets: 38790413 (29367.77MB)
AvgRate: 273.52Mbps stddev:44.74M
IP flow (unique src/dst pair) Information
# of flows: 896948 (avg. 43.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.2% 2.2% 2.1% 1.9% 1.4% 1.2% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 456749
Top 10 bandwidth usage (bytes/total in %):
17.9% 9.4% 4.5% 4.4% 4.3% 4.1% 2.7% 2.6% 2.6% 2.5%
# of IPv6 addresses: 4497
Top 10 bandwidth usage (bytes/total in %):
48.2% 28.1% 23.7% 23.0% 19.8% 5.8% 5.8% 3.4% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102141400.pktlen.png)
detailed numbers
[ 32- 63]: 6976692
[ 64- 127]: 9266180
[ 128- 255]: 1353464
[ 256- 511]: 907459
[ 512- 1023]: 857792
[ 1024- 2047]: 19428826
Protocol Breakdown
![[protocol breakdown chart]](201102141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38790413 (100.00%) 30794337291 (100.00%) 793.86
ip 38569971 ( 99.43%) 30627003602 ( 99.46%) 794.06
tcp 31914694 ( 82.27%) 27329057233 ( 88.75%) 856.32
http(s) 13999848 ( 36.09%) 18915543376 ( 61.43%) 1351.12
http(c) 8536681 ( 22.01%) 1815901054 ( 5.90%) 212.72
squid 127717 ( 0.33%) 61614340 ( 0.20%) 482.43
smtp 267652 ( 0.69%) 179631784 ( 0.58%) 671.14
ftp 24434 ( 0.06%) 2179362 ( 0.01%) 89.19
pop3 19044 ( 0.05%) 6551952 ( 0.02%) 344.04
imap 10248 ( 0.03%) 5764950 ( 0.02%) 562.54
telnet 486 ( 0.00%) 58538 ( 0.00%) 120.45
ssh 85265 ( 0.22%) 25384328 ( 0.08%) 297.71
dns 10024 ( 0.03%) 866442 ( 0.00%) 86.44
bgp 549 ( 0.00%) 88907 ( 0.00%) 161.94
napster 128 ( 0.00%) 9017 ( 0.00%) 70.45
realaud 755 ( 0.00%) 683700 ( 0.00%) 905.56
rtsp 8083 ( 0.02%) 8881592 ( 0.03%) 1098.80
icecast 24184 ( 0.06%) 21857929 ( 0.07%) 903.82
hotline 8 ( 0.00%) 534 ( 0.00%) 66.75
other 8799587 ( 22.68%) 6284039368 ( 20.41%) 714.13
udp 5699489 ( 14.69%) 3030460591 ( 9.84%) 531.71
dns 865101 ( 2.23%) 140583495 ( 0.46%) 162.51
realaud 10 ( 0.00%) 1249 ( 0.00%) 124.90
halflif 40 ( 0.00%) 3981 ( 0.00%) 99.53
starcra 65 ( 0.00%) 6615 ( 0.00%) 101.77
everque 837 ( 0.00%) 141731 ( 0.00%) 169.33
unreal 18 ( 0.00%) 3080 ( 0.00%) 171.11
quake 27 ( 0.00%) 5268 ( 0.00%) 195.11
cuseeme 4 ( 0.00%) 410 ( 0.00%) 102.50
other 4833188 ( 12.46%) 2889601919 ( 9.38%) 597.87
icmp 418220 ( 1.08%) 79234144 ( 0.26%) 189.46
ipip 182 ( 0.00%) 18964 ( 0.00%) 104.20
ipsec 4513 ( 0.01%) 1108102 ( 0.00%) 245.54
ip6 501793 ( 1.29%) 177408055 ( 0.58%) 353.55
other 31080 ( 0.08%) 9716513 ( 0.03%) 312.63
frag 1184 ( 0.00%) 1146713 ( 0.00%) 968.51
ip6 220442 ( 0.57%) 167333689 ( 0.54%) 759.08
tcp6 147976 ( 0.38%) 149121483 ( 0.48%) 1007.74
http(s) 59136 ( 0.15%) 83335975 ( 0.27%) 1409.23
http(c) 22401 ( 0.06%) 1945536 ( 0.01%) 86.85
squid 8 ( 0.00%) 1236 ( 0.00%) 154.50
smtp 507 ( 0.00%) 79430 ( 0.00%) 156.67
ftp 35 ( 0.00%) 3144 ( 0.00%) 89.83
ssh 981 ( 0.00%) 184082 ( 0.00%) 187.65
dns 923 ( 0.00%) 224180 ( 0.00%) 242.88
bgp 92 ( 0.00%) 20413 ( 0.00%) 221.88
other 63893 ( 0.16%) 63327487 ( 0.21%) 991.15
udp6 48033 ( 0.12%) 15487811 ( 0.05%) 322.44
dns 45224 ( 0.12%) 14944776 ( 0.05%) 330.46
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
unreal 1 ( 0.00%) 120 ( 0.00%) 120.00
other 2807 ( 0.01%) 542798 ( 0.00%) 193.37
icmp6 23990 ( 0.06%) 2446349 ( 0.01%) 101.97
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 315 ( 0.00%) 261254 ( 0.00%) 829.38
tcpdump file: 201102141400.dump.gz (926.53 MB)