Traffic Trace Info
DumpFile: 201102211400.dump
FileSize: 2587.64MB
Id: 201102211400
StartTime: Mon Feb 21 14:00:01 2011
EndTime: Mon Feb 21 14:15:01 2011
TotalTime: 899.55 seconds
TotalCapSize: 2029.62MB CapLen: 96 bytes
# of packets: 36569877 (26579.70MB)
AvgRate: 247.80Mbps stddev:43.24M
IP flow (unique src/dst pair) Information
# of flows: 969132 (avg. 37.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 7.2% 3.0% 2.0% 1.8% 1.5% 1.4% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 504349
Top 10 bandwidth usage (bytes/total in %):
12.9% 10.1% 8.8% 8.2% 7.3% 5.8% 5.4% 3.7% 3.1% 3.0%
# of IPv6 addresses: 3791
Top 10 bandwidth usage (bytes/total in %):
14.4% 14.3% 11.1% 10.5% 9.2% 9.2% 6.5% 4.8% 4.7% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102211400.pktlen.png)
detailed numbers
[ 32- 63]: 6900107
[ 64- 127]: 9037059
[ 128- 255]: 1434450
[ 256- 511]: 980052
[ 512- 1023]: 848086
[ 1024- 2047]: 17370123
Protocol Breakdown
![[protocol breakdown chart]](201102211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36569877 (100.00%) 27870832229 (100.00%) 762.13
ip 36452396 ( 99.68%) 27831814626 ( 99.86%) 763.51
tcp 30136403 ( 82.41%) 24829761232 ( 89.09%) 823.91
http(s) 13472960 ( 36.84%) 18187549014 ( 65.26%) 1349.93
http(c) 8984083 ( 24.57%) 2080509502 ( 7.46%) 231.58
squid 324815 ( 0.89%) 180279094 ( 0.65%) 555.02
smtp 243724 ( 0.67%) 142991053 ( 0.51%) 586.69
nntp 43 ( 0.00%) 2622 ( 0.00%) 60.98
ftp 66682 ( 0.18%) 14731807 ( 0.05%) 220.93
pop3 22749 ( 0.06%) 9550981 ( 0.03%) 419.84
imap 11365 ( 0.03%) 4516730 ( 0.02%) 397.42
telnet 1868 ( 0.01%) 132196 ( 0.00%) 70.77
ssh 28435 ( 0.08%) 4244614 ( 0.02%) 149.27
dns 14390 ( 0.04%) 1108709 ( 0.00%) 77.05
bgp 526 ( 0.00%) 73074 ( 0.00%) 138.92
napster 45 ( 0.00%) 3496 ( 0.00%) 77.69
realaud 30 ( 0.00%) 2205 ( 0.00%) 73.50
rtsp 32466 ( 0.09%) 31315557 ( 0.11%) 964.56
icecast 40132 ( 0.11%) 24298578 ( 0.09%) 605.47
hotline 5 ( 0.00%) 306 ( 0.00%) 61.20
other 6891966 ( 18.85%) 4148442002 ( 14.88%) 601.92
udp 5178789 ( 14.16%) 2774245994 ( 9.95%) 535.69
dns 825729 ( 2.26%) 134202965 ( 0.48%) 162.53
realaud 39 ( 0.00%) 7559 ( 0.00%) 193.82
halflif 223 ( 0.00%) 14506 ( 0.00%) 65.05
starcra 46 ( 0.00%) 7620 ( 0.00%) 165.65
everque 205 ( 0.00%) 36255 ( 0.00%) 176.85
unreal 29 ( 0.00%) 4866 ( 0.00%) 167.79
quake 21 ( 0.00%) 3288 ( 0.00%) 156.57
cuseeme 7 ( 0.00%) 756 ( 0.00%) 108.00
other 4352375 ( 11.90%) 2639886176 ( 9.47%) 606.54
icmp 631329 ( 1.73%) 89861153 ( 0.32%) 142.34
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1519 ( 0.00%) 459582 ( 0.00%) 302.56
ip6 482591 ( 1.32%) 131517040 ( 0.47%) 272.52
other 21580 ( 0.06%) 5950355 ( 0.02%) 275.73
frag 941 ( 0.00%) 918677 ( 0.00%) 976.28
ip6 117481 ( 0.32%) 39017603 ( 0.14%) 332.12
tcp6 58049 ( 0.16%) 23612422 ( 0.08%) 406.77
http(s) 10088 ( 0.03%) 6129127 ( 0.02%) 607.57
http(c) 21352 ( 0.06%) 1925150 ( 0.01%) 90.16
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 161 ( 0.00%) 30192 ( 0.00%) 187.53
ftp 90 ( 0.00%) 8496 ( 0.00%) 94.40
dns 895 ( 0.00%) 200772 ( 0.00%) 224.33
bgp 92 ( 0.00%) 20259 ( 0.00%) 220.21
other 25362 ( 0.07%) 15297664 ( 0.05%) 603.17
udp6 40112 ( 0.11%) 13220588 ( 0.05%) 329.59
dns 37073 ( 0.10%) 12539591 ( 0.04%) 338.24
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3038 ( 0.01%) 680891 ( 0.00%) 224.12
icmp6 18968 ( 0.05%) 1955592 ( 0.01%) 103.10
ip6 80 ( 0.00%) 10990 ( 0.00%) 137.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 242 ( 0.00%) 213931 ( 0.00%) 884.01
tcpdump file: 201102211400.dump.gz (848.14 MB)