Traffic Trace Info
DumpFile: 201102231400.dump
FileSize: 2567.21MB
Id: 201102231400
StartTime: Wed Feb 23 14:00:01 2011
EndTime: Wed Feb 23 14:15:00 2011
TotalTime: 899.77 seconds
TotalCapSize: 2015.47MB CapLen: 96 bytes
# of packets: 36158077 (24131.64MB)
AvgRate: 224.88Mbps stddev:40.40M
IP flow (unique src/dst pair) Information
# of flows: 1129013 (avg. 32.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.9% 1.6% 1.0% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 574818
Top 10 bandwidth usage (bytes/total in %):
13.7% 5.9% 5.7% 5.2% 3.8% 3.5% 3.4% 2.6% 2.5% 1.9%
# of IPv6 addresses: 4029
Top 10 bandwidth usage (bytes/total in %):
55.0% 54.9% 23.8% 21.6% 4.1% 4.1% 1.9% 1.9% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102231400.pktlen.png)
detailed numbers
[ 32- 63]: 7869894
[ 64- 127]: 9107338
[ 128- 255]: 1703974
[ 256- 511]: 965678
[ 512- 1023]: 1018812
[ 1024- 2047]: 15492381
Protocol Breakdown
![[protocol breakdown chart]](201102231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36158077 (100.00%) 25303859593 (100.00%) 699.81
ip 35846104 ( 99.14%) 25106093652 ( 99.22%) 700.39
tcp 29543461 ( 81.71%) 22272131592 ( 88.02%) 753.88
http(s) 12321820 ( 34.08%) 16348021008 ( 64.61%) 1326.75
http(c) 8392909 ( 23.21%) 2688370028 ( 10.62%) 320.31
squid 215271 ( 0.60%) 81255064 ( 0.32%) 377.45
smtp 334536 ( 0.93%) 90965337 ( 0.36%) 271.91
nntp 12 ( 0.00%) 764 ( 0.00%) 63.67
ftp 56129 ( 0.16%) 5383599 ( 0.02%) 95.91
pop3 21852 ( 0.06%) 9354525 ( 0.04%) 428.09
imap 5554 ( 0.02%) 1558569 ( 0.01%) 280.62
telnet 536 ( 0.00%) 36854 ( 0.00%) 68.76
ssh 1040263 ( 2.88%) 153191884 ( 0.61%) 147.26
dns 10874 ( 0.03%) 871397 ( 0.00%) 80.14
bgp 606 ( 0.00%) 132461 ( 0.00%) 218.58
napster 142 ( 0.00%) 21342 ( 0.00%) 150.30
realaud 77 ( 0.00%) 15311 ( 0.00%) 198.84
rtsp 6606 ( 0.02%) 7700454 ( 0.03%) 1165.68
icecast 2991 ( 0.01%) 207991 ( 0.00%) 69.54
hotline 40 ( 0.00%) 4579 ( 0.00%) 114.47
other 7133233 ( 19.73%) 2885039825 ( 11.40%) 404.45
udp 5135698 ( 14.20%) 2484770888 ( 9.82%) 483.82
dns 736599 ( 2.04%) 162858102 ( 0.64%) 221.09
realaud 22 ( 0.00%) 2845 ( 0.00%) 129.32
halflif 1071 ( 0.00%) 354173 ( 0.00%) 330.69
starcra 37 ( 0.00%) 5128 ( 0.00%) 138.59
everque 360 ( 0.00%) 71523 ( 0.00%) 198.68
unreal 9 ( 0.00%) 1152 ( 0.00%) 128.00
quake 30 ( 0.00%) 2526 ( 0.00%) 84.20
cuseeme 8 ( 0.00%) 730 ( 0.00%) 91.25
other 4397463 ( 12.16%) 2321416872 ( 9.17%) 527.90
icmp 679673 ( 1.88%) 82030297 ( 0.32%) 120.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1275 ( 0.00%) 338890 ( 0.00%) 265.80
ip6 460552 ( 1.27%) 259911091 ( 1.03%) 564.35
other 25260 ( 0.07%) 6891624 ( 0.03%) 272.83
frag 8782 ( 0.02%) 6679747 ( 0.03%) 760.62
ip6 311973 ( 0.86%) 197765941 ( 0.78%) 633.92
tcp6 244535 ( 0.68%) 181429389 ( 0.72%) 741.94
http(s) 9305 ( 0.03%) 5202677 ( 0.02%) 559.13
http(c) 53472 ( 0.15%) 4492211 ( 0.02%) 84.01
squid 83 ( 0.00%) 7010 ( 0.00%) 84.46
smtp 534 ( 0.00%) 201105 ( 0.00%) 376.60
ftp 138 ( 0.00%) 13815 ( 0.00%) 100.11
dns 1009 ( 0.00%) 239135 ( 0.00%) 237.00
bgp 95 ( 0.00%) 19825 ( 0.00%) 208.68
other 179899 ( 0.50%) 171253611 ( 0.68%) 951.94
udp6 44179 ( 0.12%) 13728821 ( 0.05%) 310.75
dns 40409 ( 0.11%) 12796905 ( 0.05%) 316.68
realaud 2 ( 0.00%) 209 ( 0.00%) 104.50
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
other 3767 ( 0.01%) 931594 ( 0.00%) 247.30
icmp6 22779 ( 0.06%) 2249014 ( 0.01%) 98.73
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 366 ( 0.00%) 343175 ( 0.00%) 937.64
tcpdump file: 201102231400.dump.gz (905.47 MB)