Traffic Trace Info
DumpFile: 201102181400.dump
FileSize: 2718.57MB
Id: 201102181400
StartTime: Fri Feb 18 14:00:00 2011
EndTime: Fri Feb 18 14:15:00 2011
TotalTime: 899.73 seconds
TotalCapSize: -1964.03MB CapLen: 96 bytes
# of packets: 38442796 (28718.70MB)
AvgRate: 267.75Mbps stddev:42.00M
IP flow (unique src/dst pair) Information
# of flows: 1000029 (avg. 38.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.2% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 531418
Top 10 bandwidth usage (bytes/total in %):
12.7% 6.4% 5.6% 4.5% 3.9% 3.4% 2.8% 2.8% 2.4% 1.8%
# of IPv6 addresses: 4179
Top 10 bandwidth usage (bytes/total in %):
27.9% 27.3% 23.1% 19.8% 19.8% 17.7% 9.9% 7.7% 7.7% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102181400.pktlen.png)
detailed numbers
[ 32- 63]: 7339108
[ 64- 127]: 8493238
[ 128- 255]: 1644198
[ 256- 511]: 1090138
[ 512- 1023]: 1048215
[ 1024- 2047]: 18827899
Protocol Breakdown
![[protocol breakdown chart]](201102181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38442796 (100.00%) 30113739852 (100.00%) 783.34
ip 38038571 ( 98.95%) 29868799664 ( 99.19%) 785.22
tcp 30900175 ( 80.38%) 26463308400 ( 87.88%) 856.41
http(s) 14860933 ( 38.66%) 20455371257 ( 67.93%) 1376.45
http(c) 8446330 ( 21.97%) 1191154097 ( 3.96%) 141.03
squid 201833 ( 0.53%) 76899955 ( 0.26%) 381.01
smtp 220142 ( 0.57%) 97928612 ( 0.33%) 444.84
nntp 233 ( 0.00%) 14426 ( 0.00%) 61.91
ftp 38025 ( 0.10%) 3311295 ( 0.01%) 87.08
pop3 37675 ( 0.10%) 19516044 ( 0.06%) 518.01
imap 8614 ( 0.02%) 4201810 ( 0.01%) 487.79
telnet 1077 ( 0.00%) 68512 ( 0.00%) 63.61
ssh 90545 ( 0.24%) 9155210 ( 0.03%) 101.11
dns 13241 ( 0.03%) 1097150 ( 0.00%) 82.86
bgp 556 ( 0.00%) 103747 ( 0.00%) 186.60
napster 37 ( 0.00%) 4283 ( 0.00%) 115.76
realaud 11 ( 0.00%) 732 ( 0.00%) 66.55
rtsp 16147 ( 0.04%) 15534137 ( 0.05%) 962.04
icecast 33058 ( 0.09%) 23834099 ( 0.08%) 720.98
hotline 23 ( 0.00%) 1934 ( 0.00%) 84.09
other 6931687 ( 18.03%) 4565110620 ( 15.16%) 658.59
udp 5676031 ( 14.76%) 2865169255 ( 9.51%) 504.78
dns 851825 ( 2.22%) 136388941 ( 0.45%) 160.11
realaud 19 ( 0.00%) 2026 ( 0.00%) 106.63
halflif 54 ( 0.00%) 4869 ( 0.00%) 90.17
starcra 44 ( 0.00%) 6296 ( 0.00%) 143.09
everque 362 ( 0.00%) 59558 ( 0.00%) 164.52
unreal 17 ( 0.00%) 2565 ( 0.00%) 150.88
quake 59 ( 0.00%) 6696 ( 0.00%) 113.49
cuseeme 4 ( 0.00%) 654 ( 0.00%) 163.50
other 4823525 ( 12.55%) 2728617314 ( 9.06%) 565.69
icmp 533043 ( 1.39%) 83947509 ( 0.28%) 157.49
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3724 ( 0.01%) 1339208 ( 0.00%) 359.62
ip6 903414 ( 2.35%) 449408357 ( 1.49%) 497.46
other 22000 ( 0.06%) 5607775 ( 0.02%) 254.90
frag 738 ( 0.00%) 772377 ( 0.00%) 1046.58
ip6 404225 ( 1.05%) 244940188 ( 0.81%) 605.95
tcp6 337623 ( 0.88%) 227701455 ( 0.76%) 674.43
http(s) 71133 ( 0.19%) 94988334 ( 0.32%) 1335.36
http(c) 124829 ( 0.32%) 9495150 ( 0.03%) 76.07
smtp 390 ( 0.00%) 135202 ( 0.00%) 346.67
ftp 1154 ( 0.00%) 97126 ( 0.00%) 84.16
ssh 14 ( 0.00%) 4216 ( 0.00%) 301.14
dns 592 ( 0.00%) 146197 ( 0.00%) 246.95
bgp 91 ( 0.00%) 19341 ( 0.00%) 212.54
other 139420 ( 0.36%) 122815889 ( 0.41%) 880.91
udp6 44652 ( 0.12%) 13977755 ( 0.05%) 313.04
dns 42458 ( 0.11%) 13552971 ( 0.05%) 319.21
unreal 1 ( 0.00%) 120 ( 0.00%) 120.00
other 2193 ( 0.01%) 424664 ( 0.00%) 193.65
icmp6 20627 ( 0.05%) 2306204 ( 0.01%) 111.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1293 ( 0.00%) 950694 ( 0.00%) 735.26
tcpdump file: 201102181400.dump.gz (908.78 MB)