Traffic Trace Info
DumpFile: 201102201400.dump
FileSize: 2067.09MB
Id: 201102201400
StartTime: Sun Feb 20 14:00:00 2011
EndTime: Sun Feb 20 14:15:00 2011
TotalTime: 899.83 seconds
TotalCapSize: 1614.68MB CapLen: 96 bytes
# of packets: 29648040 (23857.02MB)
AvgRate: 222.46Mbps stddev:53.97M
IP flow (unique src/dst pair) Information
# of flows: 906648 (avg. 32.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 1.1% 0.9% 0.9% 0.9% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 516069
Top 10 bandwidth usage (bytes/total in %):
28.5% 15.6% 11.5% 6.3% 3.2% 2.3% 1.8% 1.6% 1.5% 1.5%
# of IPv6 addresses: 3127
Top 10 bandwidth usage (bytes/total in %):
22.0% 21.9% 17.3% 17.3% 12.3% 11.9% 11.8% 9.4% 8.3% 8.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102201400.pktlen.png)
detailed numbers
[ 32- 63]: 5812967
[ 64- 127]: 5585347
[ 128- 255]: 1061918
[ 256- 511]: 674800
[ 512- 1023]: 571996
[ 1024- 2047]: 15941012
Protocol Breakdown
![[protocol breakdown chart]](201102201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29648040 (100.00%) 25015895425 (100.00%) 843.76
ip 29459849 ( 99.37%) 24958263830 ( 99.77%) 847.20
tcp 24346994 ( 82.12%) 22283602800 ( 89.08%) 915.25
http(s) 13274274 ( 44.77%) 18566034602 ( 74.22%) 1398.65
http(c) 5786683 ( 19.52%) 565943163 ( 2.26%) 97.80
squid 281563 ( 0.95%) 157695724 ( 0.63%) 560.07
smtp 176336 ( 0.59%) 56084999 ( 0.22%) 318.06
nntp 38 ( 0.00%) 2338 ( 0.00%) 61.53
ftp 34272 ( 0.12%) 3071981 ( 0.01%) 89.64
pop3 5745 ( 0.02%) 3098594 ( 0.01%) 539.35
imap 20815 ( 0.07%) 16045173 ( 0.06%) 770.85
telnet 840 ( 0.00%) 58636 ( 0.00%) 69.80
ssh 17509 ( 0.06%) 3173319 ( 0.01%) 181.24
dns 10816 ( 0.04%) 767303 ( 0.00%) 70.94
bgp 568 ( 0.00%) 110710 ( 0.00%) 194.91
napster 14 ( 0.00%) 918 ( 0.00%) 65.57
realaud 26 ( 0.00%) 1668 ( 0.00%) 64.15
rtsp 14791 ( 0.05%) 8320739 ( 0.03%) 562.55
icecast 32096 ( 0.11%) 23777730 ( 0.10%) 740.83
hotline 18 ( 0.00%) 3705 ( 0.00%) 205.83
other 4690589 ( 15.82%) 2879411438 ( 11.51%) 613.87
udp 4081853 ( 13.77%) 2329577728 ( 9.31%) 570.72
dns 442174 ( 1.49%) 75059282 ( 0.30%) 169.75
realaud 38 ( 0.00%) 4390 ( 0.00%) 115.53
halflif 29 ( 0.00%) 3335 ( 0.00%) 115.00
starcra 34 ( 0.00%) 4922 ( 0.00%) 144.76
everque 136 ( 0.00%) 27486 ( 0.00%) 202.10
unreal 8 ( 0.00%) 1143 ( 0.00%) 142.88
quake 17 ( 0.00%) 2752 ( 0.00%) 161.88
other 3639342 ( 12.28%) 2254411736 ( 9.01%) 619.46
icmp 496008 ( 1.67%) 78290229 ( 0.31%) 157.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8722 ( 0.03%) 6527472 ( 0.03%) 748.39
ip6 506536 ( 1.71%) 255135818 ( 1.02%) 503.69
other 19551 ( 0.07%) 5110513 ( 0.02%) 261.39
frag 951 ( 0.00%) 979159 ( 0.00%) 1029.61
ip6 188191 ( 0.63%) 57631595 ( 0.23%) 306.24
tcp6 141401 ( 0.48%) 46802079 ( 0.19%) 330.99
http(s) 14576 ( 0.05%) 13036537 ( 0.05%) 894.38
http(c) 3237 ( 0.01%) 421093 ( 0.00%) 130.09
squid 12 ( 0.00%) 1016 ( 0.00%) 84.67
smtp 409 ( 0.00%) 154468 ( 0.00%) 377.67
ftp 2374 ( 0.01%) 195725 ( 0.00%) 82.45
ssh 102 ( 0.00%) 11140 ( 0.00%) 109.22
dns 447 ( 0.00%) 118715 ( 0.00%) 265.58
bgp 90 ( 0.00%) 18277 ( 0.00%) 203.08
other 120154 ( 0.41%) 32845108 ( 0.13%) 273.36
udp6 28763 ( 0.10%) 8763841 ( 0.04%) 304.69
dns 28163 ( 0.09%) 8641662 ( 0.03%) 306.84
unreal 1 ( 0.00%) 111 ( 0.00%) 111.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 597 ( 0.00%) 121847 ( 0.00%) 204.10
icmp6 17730 ( 0.06%) 1871276 ( 0.01%) 105.54
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 183 ( 0.00%) 178907 ( 0.00%) 977.63
tcpdump file: 201102201400.dump.gz (671.99 MB)