Traffic Trace Info
DumpFile: 201102151400.dump
FileSize: 2806.29MB
Id: 201102151400
StartTime: Tue Feb 15 14:00:00 2011
EndTime: Tue Feb 15 14:15:00 2011
TotalTime: 899.94 seconds
TotalCapSize: -1890.38MB CapLen: 96 bytes
# of packets: 39364809 (27787.56MB)
AvgRate: 258.98Mbps stddev:42.86M
IP flow (unique src/dst pair) Information
# of flows: 987047 (avg. 39.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.3% 0.8% 0.8% 0.8% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 472429
Top 10 bandwidth usage (bytes/total in %):
19.3% 4.9% 4.3% 3.9% 3.9% 3.6% 3.6% 2.6% 2.6% 2.6%
# of IPv6 addresses: 4316
Top 10 bandwidth usage (bytes/total in %):
54.9% 54.9% 13.2% 9.3% 6.1% 6.1% 4.6% 4.5% 4.0% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102151400.pktlen.png)
detailed numbers
[ 32- 63]: 7655976
[ 64- 127]: 10145597
[ 128- 255]: 1485665
[ 256- 511]: 1021459
[ 512- 1023]: 962527
[ 1024- 2047]: 18093585
Protocol Breakdown
![[protocol breakdown chart]](201102151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39364809 (100.00%) 29137369471 (100.00%) 740.19
ip 39034152 ( 99.16%) 28906530079 ( 99.21%) 740.54
tcp 33584737 ( 85.32%) 26502647566 ( 90.96%) 789.13
http(s) 13410491 ( 34.07%) 18194060933 ( 62.44%) 1356.70
http(c) 9955243 ( 25.29%) 1821055193 ( 6.25%) 182.92
squid 215007 ( 0.55%) 79439369 ( 0.27%) 369.47
smtp 216982 ( 0.55%) 110398620 ( 0.38%) 508.79
ftp 17898 ( 0.05%) 1631655 ( 0.01%) 91.16
pop3 23548 ( 0.06%) 11176115 ( 0.04%) 474.61
imap 15086 ( 0.04%) 11689653 ( 0.04%) 774.87
telnet 330 ( 0.00%) 23484 ( 0.00%) 71.16
ssh 36404 ( 0.09%) 6806232 ( 0.02%) 186.96
dns 11490 ( 0.03%) 885164 ( 0.00%) 77.04
bgp 599 ( 0.00%) 125334 ( 0.00%) 209.24
napster 140 ( 0.00%) 26169 ( 0.00%) 186.92
realaud 131 ( 0.00%) 18899 ( 0.00%) 144.27
rtsp 110 ( 0.00%) 14097 ( 0.00%) 128.15
icecast 5516 ( 0.01%) 373471 ( 0.00%) 67.71
hotline 4 ( 0.00%) 258 ( 0.00%) 64.50
other 9675758 ( 24.58%) 6264922920 ( 21.50%) 647.49
udp 4454370 ( 11.32%) 2003594885 ( 6.88%) 449.80
dns 809226 ( 2.06%) 132431724 ( 0.45%) 163.65
realaud 10 ( 0.00%) 1714 ( 0.00%) 171.40
halflif 37 ( 0.00%) 4136 ( 0.00%) 111.78
starcra 41 ( 0.00%) 7717 ( 0.00%) 188.22
everque 264 ( 0.00%) 53064 ( 0.00%) 201.00
unreal 24 ( 0.00%) 3632 ( 0.00%) 151.33
quake 20 ( 0.00%) 1792 ( 0.00%) 89.60
cuseeme 7 ( 0.00%) 619 ( 0.00%) 88.43
other 3644489 ( 9.26%) 1870932997 ( 6.42%) 513.36
icmp 412606 ( 1.05%) 79159707 ( 0.27%) 191.85
ipip 181 ( 0.00%) 18878 ( 0.00%) 104.30
ipsec 939 ( 0.00%) 373542 ( 0.00%) 397.81
ip6 565615 ( 1.44%) 317386087 ( 1.09%) 561.13
other 15704 ( 0.04%) 3349414 ( 0.01%) 213.28
frag 1536 ( 0.00%) 1616591 ( 0.01%) 1052.47
ip6 330657 ( 0.84%) 230839392 ( 0.79%) 698.12
tcp6 260803 ( 0.66%) 212434703 ( 0.73%) 814.54
http(s) 27391 ( 0.07%) 28028898 ( 0.10%) 1023.29
http(c) 19942 ( 0.05%) 1916819 ( 0.01%) 96.12
squid 316 ( 0.00%) 121110 ( 0.00%) 383.26
smtp 450 ( 0.00%) 170703 ( 0.00%) 379.34
ftp 78 ( 0.00%) 6958 ( 0.00%) 89.21
dns 478 ( 0.00%) 123318 ( 0.00%) 257.99
bgp 90 ( 0.00%) 18904 ( 0.00%) 210.04
other 212058 ( 0.54%) 182047993 ( 0.62%) 858.48
udp6 48286 ( 0.12%) 15734469 ( 0.05%) 325.86
dns 46022 ( 0.12%) 15318577 ( 0.05%) 332.85
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2261 ( 0.01%) 415559 ( 0.00%) 183.79
icmp6 21184 ( 0.05%) 2344772 ( 0.01%) 110.69
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 354 ( 0.00%) 321368 ( 0.00%) 907.82
tcpdump file: 201102151400.dump.gz (936.83 MB)