Traffic Trace Info
DumpFile: 201102171400.dump
FileSize: 2723.23MB
Id: 201102171400
StartTime: Thu Feb 17 14:00:01 2011
EndTime: Thu Feb 17 14:15:00 2011
TotalTime: 899.65 seconds
TotalCapSize: -1953.61MB CapLen: 96 bytes
# of packets: 38065338 (28224.91MB)
AvgRate: 263.19Mbps stddev:48.07M
IP flow (unique src/dst pair) Information
# of flows: 918830 (avg. 41.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.6% 1.6% 1.5% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 494759
Top 10 bandwidth usage (bytes/total in %):
19.0% 6.0% 4.7% 4.3% 4.1% 3.8% 3.2% 3.2% 2.6% 2.3%
# of IPv6 addresses: 4341
Top 10 bandwidth usage (bytes/total in %):
68.6% 68.6% 5.2% 2.8% 2.8% 2.7% 2.0% 2.0% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102171400.pktlen.png)
detailed numbers
[ 32- 63]: 6537751
[ 64- 127]: 9165959
[ 128- 255]: 1607078
[ 256- 511]: 1302287
[ 512- 1023]: 1021939
[ 1024- 2047]: 18430324
Protocol Breakdown
![[protocol breakdown chart]](201102171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38065338 (100.00%) 29595960364 (100.00%) 777.50
ip 37866079 ( 99.48%) 29488236225 ( 99.64%) 778.75
tcp 30887875 ( 81.14%) 25801161965 ( 87.18%) 835.32
http(s) 13828783 ( 36.33%) 18803596705 ( 63.53%) 1359.74
http(c) 7802932 ( 20.50%) 1297295192 ( 4.38%) 166.26
squid 230069 ( 0.60%) 90158029 ( 0.30%) 391.87
smtp 301641 ( 0.79%) 174612631 ( 0.59%) 578.88
ftp 19869 ( 0.05%) 1849785 ( 0.01%) 93.10
pop3 14150 ( 0.04%) 6799000 ( 0.02%) 480.49
imap 94277 ( 0.25%) 88056318 ( 0.30%) 934.02
telnet 185 ( 0.00%) 12469 ( 0.00%) 67.40
ssh 1109581 ( 2.91%) 169017317 ( 0.57%) 152.33
dns 10265 ( 0.03%) 838698 ( 0.00%) 81.70
bgp 610 ( 0.00%) 135578 ( 0.00%) 222.26
napster 136 ( 0.00%) 13606 ( 0.00%) 100.04
realaud 42 ( 0.00%) 3281 ( 0.00%) 78.12
rtsp 274 ( 0.00%) 61179 ( 0.00%) 223.28
icecast 26909 ( 0.07%) 23159724 ( 0.08%) 860.67
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 7448150 ( 19.57%) 5145552329 ( 17.39%) 690.85
udp 5219723 ( 13.71%) 2564274179 ( 8.66%) 491.27
dns 866632 ( 2.28%) 140689161 ( 0.48%) 162.34
rip 4 ( 0.00%) 757 ( 0.00%) 189.25
realaud 5 ( 0.00%) 852 ( 0.00%) 170.40
halflif 85 ( 0.00%) 7034 ( 0.00%) 82.75
starcra 38 ( 0.00%) 5968 ( 0.00%) 157.05
everque 195 ( 0.00%) 46796 ( 0.00%) 239.98
unreal 37 ( 0.00%) 6441 ( 0.00%) 174.08
quake 43 ( 0.00%) 3972 ( 0.00%) 92.37
cuseeme 3 ( 0.00%) 338 ( 0.00%) 112.67
other 4352587 ( 11.43%) 2423455898 ( 8.19%) 556.79
icmp 494944 ( 1.30%) 88953069 ( 0.30%) 179.72
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3734 ( 0.01%) 2128280 ( 0.01%) 569.97
ip6 1214612 ( 3.19%) 1010406532 ( 3.41%) 831.88
other 45007 ( 0.12%) 21293040 ( 0.07%) 473.11
frag 904 ( 0.00%) 911522 ( 0.00%) 1008.32
ip6 199259 ( 0.52%) 107724139 ( 0.36%) 540.62
tcp6 125167 ( 0.33%) 89516081 ( 0.30%) 715.17
http(s) 9694 ( 0.03%) 3630346 ( 0.01%) 374.49
http(c) 16707 ( 0.04%) 1499580 ( 0.01%) 89.76
squid 18 ( 0.00%) 1524 ( 0.00%) 84.67
smtp 119 ( 0.00%) 23616 ( 0.00%) 198.45
ftp 1125 ( 0.00%) 94108 ( 0.00%) 83.65
ssh 423 ( 0.00%) 78690 ( 0.00%) 186.03
dns 1152 ( 0.00%) 293875 ( 0.00%) 255.10
bgp 93 ( 0.00%) 20218 ( 0.00%) 217.40
other 95836 ( 0.25%) 83874124 ( 0.28%) 875.18
udp6 52642 ( 0.14%) 15743774 ( 0.05%) 299.07
dns 46865 ( 0.12%) 14911540 ( 0.05%) 318.18
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 120 ( 0.00%) 120.00
other 5774 ( 0.02%) 831906 ( 0.00%) 144.08
icmp6 21086 ( 0.06%) 2158283 ( 0.01%) 102.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 334 ( 0.00%) 301921 ( 0.00%) 903.96
tcpdump file: 201102171400.dump.gz (926.85 MB)