Traffic Trace Info
DumpFile: 201102161400.dump
FileSize: 2866.63MB
Id: 201102161400
StartTime: Wed Feb 16 14:00:00 2011
EndTime: Wed Feb 16 14:15:00 2011
TotalTime: 900.05 seconds
TotalCapSize: -1852.40MB CapLen: 96 bytes
# of packets: 40829938 (31703.00MB)
AvgRate: 295.47Mbps stddev:54.16M
IP flow (unique src/dst pair) Information
# of flows: 931440 (avg. 43.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.5% 1.4% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 490194
Top 10 bandwidth usage (bytes/total in %):
23.3% 4.9% 4.8% 4.5% 3.7% 3.0% 2.8% 2.8% 2.3% 2.1%
# of IPv6 addresses: 4190
Top 10 bandwidth usage (bytes/total in %):
76.2% 76.2% 4.6% 3.8% 3.5% 1.9% 1.7% 1.5% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102161400.pktlen.png)
detailed numbers
[ 32- 63]: 7913367
[ 64- 127]: 8433063
[ 128- 255]: 1411898
[ 256- 511]: 1135885
[ 512- 1023]: 911827
[ 1024- 2047]: 21023898
Protocol Breakdown
![[protocol breakdown chart]](201102161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40829938 (100.00%) 33243006438 (100.00%) 814.18
ip 40548946 ( 99.31%) 33071436541 ( 99.48%) 815.59
tcp 33923782 ( 83.09%) 29873098383 ( 89.86%) 880.59
http(s) 17096517 ( 41.87%) 23738214448 ( 71.41%) 1388.48
http(c) 8749470 ( 21.43%) 1149669719 ( 3.46%) 131.40
squid 341856 ( 0.84%) 104884675 ( 0.32%) 306.81
smtp 314890 ( 0.77%) 118334535 ( 0.36%) 375.80
ftp 35338 ( 0.09%) 3461694 ( 0.01%) 97.96
pop3 43809 ( 0.11%) 16733807 ( 0.05%) 381.97
imap 11184 ( 0.03%) 10030149 ( 0.03%) 896.83
telnet 1750 ( 0.00%) 112721 ( 0.00%) 64.41
ssh 304449 ( 0.75%) 38312296 ( 0.12%) 125.84
dns 10093 ( 0.02%) 862966 ( 0.00%) 85.50
bgp 541 ( 0.00%) 89996 ( 0.00%) 166.35
napster 108 ( 0.00%) 15108 ( 0.00%) 139.89
realaud 136 ( 0.00%) 14185 ( 0.00%) 104.30
rtsp 9001 ( 0.02%) 7855401 ( 0.02%) 872.73
icecast 8305 ( 0.02%) 564108 ( 0.00%) 67.92
hotline 21 ( 0.00%) 2547 ( 0.00%) 121.29
other 6996313 ( 17.14%) 4683939968 ( 14.09%) 669.49
udp 5376137 ( 13.17%) 2583658733 ( 7.77%) 480.58
dns 830661 ( 2.03%) 137211007 ( 0.41%) 165.18
realaud 18 ( 0.00%) 3162 ( 0.00%) 175.67
halflif 52 ( 0.00%) 5423 ( 0.00%) 104.29
starcra 82 ( 0.00%) 14154 ( 0.00%) 172.61
everque 1051 ( 0.00%) 174749 ( 0.00%) 166.27
unreal 18 ( 0.00%) 2891 ( 0.00%) 160.61
quake 35 ( 0.00%) 5995 ( 0.00%) 171.29
cuseeme 5 ( 0.00%) 441 ( 0.00%) 88.20
other 4544135 ( 11.13%) 2446206302 ( 7.36%) 538.32
icmp 439799 ( 1.08%) 95858516 ( 0.29%) 217.96
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3847 ( 0.01%) 1573894 ( 0.00%) 409.12
ip6 764639 ( 1.87%) 491830158 ( 1.48%) 643.22
other 40557 ( 0.10%) 25397587 ( 0.08%) 626.22
frag 1124 ( 0.00%) 1063241 ( 0.00%) 945.94
ip6 280992 ( 0.69%) 171569897 ( 0.52%) 610.59
tcp6 206998 ( 0.51%) 152071542 ( 0.46%) 734.65
http(s) 8345 ( 0.02%) 2104377 ( 0.01%) 252.17
http(c) 24968 ( 0.06%) 2301300 ( 0.01%) 92.17
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 219 ( 0.00%) 57476 ( 0.00%) 262.45
ftp 90 ( 0.00%) 8072 ( 0.00%) 89.69
dns 973 ( 0.00%) 244098 ( 0.00%) 250.87
bgp 94 ( 0.00%) 19632 ( 0.00%) 208.85
other 172306 ( 0.42%) 147336333 ( 0.44%) 855.09
udp6 52876 ( 0.13%) 16873914 ( 0.05%) 319.12
dns 50826 ( 0.12%) 16476638 ( 0.05%) 324.18
unreal 2 ( 0.00%) 224 ( 0.00%) 112.00
other 2048 ( 0.01%) 397052 ( 0.00%) 193.87
icmp6 20559 ( 0.05%) 2196700 ( 0.01%) 106.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 529 ( 0.00%) 423661 ( 0.00%) 800.87
tcpdump file: 201102161400.dump.gz (961.17 MB)