Traffic Trace Info
DumpFile: 201102221400.dump
FileSize: 2781.48MB
Id: 201102221400
StartTime: Tue Feb 22 14:00:01 2011
EndTime: Tue Feb 22 14:15:01 2011
TotalTime: 900.08 seconds
TotalCapSize: -1902.78MB CapLen: 96 bytes
# of packets: 38551518 (28193.14MB)
AvgRate: 262.73Mbps stddev:44.94M
IP flow (unique src/dst pair) Information
# of flows: 1254764 (avg. 30.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 2.6% 1.6% 1.5% 1.4% 1.4% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 653963
Top 10 bandwidth usage (bytes/total in %):
13.8% 11.5% 7.2% 5.5% 4.1% 3.8% 3.0% 2.8% 2.6% 1.9%
# of IPv6 addresses: 4000
Top 10 bandwidth usage (bytes/total in %):
17.9% 15.7% 15.7% 14.7% 11.2% 9.5% 4.8% 4.6% 3.5% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102221400.pktlen.png)
detailed numbers
[ 32- 63]: 7350701
[ 64- 127]: 9555708
[ 128- 255]: 1260705
[ 256- 511]: 968094
[ 512- 1023]: 912328
[ 1024- 2047]: 18503982
Protocol Breakdown
![[protocol breakdown chart]](201102221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38551518 (100.00%) 29562650252 (100.00%) 766.83
ip 38398611 ( 99.60%) 29507900688 ( 99.81%) 768.46
tcp 32894174 ( 85.33%) 27041284024 ( 91.47%) 822.07
http(s) 14743267 ( 38.24%) 20023705202 ( 67.73%) 1358.16
http(c) 9192844 ( 23.85%) 1999678951 ( 6.76%) 217.53
squid 459803 ( 1.19%) 191407491 ( 0.65%) 416.28
smtp 255511 ( 0.66%) 90499922 ( 0.31%) 354.19
nntp 24 ( 0.00%) 1472 ( 0.00%) 61.33
ftp 55565 ( 0.14%) 5332028 ( 0.02%) 95.96
pop3 28322 ( 0.07%) 10846741 ( 0.04%) 382.98
imap 44872 ( 0.12%) 56285640 ( 0.19%) 1254.36
telnet 1006 ( 0.00%) 68662 ( 0.00%) 68.25
ssh 127366 ( 0.33%) 17941206 ( 0.06%) 140.86
dns 9733 ( 0.03%) 787294 ( 0.00%) 80.89
bgp 562 ( 0.00%) 104595 ( 0.00%) 186.11
napster 133 ( 0.00%) 16700 ( 0.00%) 125.56
realaud 99 ( 0.00%) 17282 ( 0.00%) 174.57
rtsp 19404 ( 0.05%) 15827958 ( 0.05%) 815.71
icecast 83080 ( 0.22%) 5047849 ( 0.02%) 60.76
hotline 15 ( 0.00%) 956 ( 0.00%) 63.73
other 7872568 ( 20.42%) 4623714075 ( 15.64%) 587.32
udp 4032437 ( 10.46%) 2096001522 ( 7.09%) 519.79
dns 794685 ( 2.06%) 170531615 ( 0.58%) 214.59
realaud 14 ( 0.00%) 2046 ( 0.00%) 146.14
halflif 33 ( 0.00%) 3236 ( 0.00%) 98.06
starcra 62 ( 0.00%) 8013 ( 0.00%) 129.24
everque 168 ( 0.00%) 32296 ( 0.00%) 192.24
unreal 68 ( 0.00%) 14296 ( 0.00%) 210.24
quake 27 ( 0.00%) 3077 ( 0.00%) 113.96
cuseeme 9 ( 0.00%) 755 ( 0.00%) 83.89
other 3236971 ( 8.40%) 1925275553 ( 6.51%) 594.78
icmp 871392 ( 2.26%) 107506461 ( 0.36%) 123.37
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1344 ( 0.00%) 395660 ( 0.00%) 294.39
ip6 578466 ( 1.50%) 257260252 ( 0.87%) 444.73
other 20614 ( 0.05%) 5433609 ( 0.02%) 263.59
frag 1430 ( 0.00%) 1309971 ( 0.00%) 916.06
ip6 152907 ( 0.40%) 54749564 ( 0.19%) 358.06
tcp6 89342 ( 0.23%) 38063724 ( 0.13%) 426.05
http(s) 11771 ( 0.03%) 8084755 ( 0.03%) 686.84
http(c) 26764 ( 0.07%) 2408029 ( 0.01%) 89.97
squid 738 ( 0.00%) 386460 ( 0.00%) 523.66
smtp 730 ( 0.00%) 403011 ( 0.00%) 552.07
ftp 112 ( 0.00%) 10702 ( 0.00%) 95.55
ssh 15 ( 0.00%) 1110 ( 0.00%) 74.00
dns 1261 ( 0.00%) 292761 ( 0.00%) 232.17
bgp 94 ( 0.00%) 17351 ( 0.00%) 184.59
other 47857 ( 0.12%) 26459545 ( 0.09%) 552.89
udp6 40905 ( 0.11%) 14170909 ( 0.05%) 346.43
dns 40084 ( 0.10%) 14025555 ( 0.05%) 349.90
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
other 820 ( 0.00%) 145245 ( 0.00%) 177.13
icmp6 22245 ( 0.06%) 2221122 ( 0.01%) 99.85
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 302 ( 0.00%) 278417 ( 0.00%) 921.91
tcpdump file: 201102221400.dump.gz (899.62 MB)