Traffic Trace Info
DumpFile: 201102251400.dump
FileSize: 2704.25MB
Id: 201102251400
StartTime: Fri Feb 25 14:00:01 2011
EndTime: Fri Feb 25 14:15:00 2011
TotalTime: 899.93 seconds
TotalCapSize: -1980.53MB CapLen: 96 bytes
# of packets: 38586010 (28113.28MB)
AvgRate: 262.06Mbps stddev:64.94M
IP flow (unique src/dst pair) Information
# of flows: 975001 (avg. 39.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.4% 3.4% 3.1% 2.5% 1.6% 1.3% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 523939
Top 10 bandwidth usage (bytes/total in %):
18.3% 11.7% 11.4% 6.5% 6.1% 3.5% 3.5% 3.4% 3.4% 3.1%
# of IPv6 addresses: 4078
Top 10 bandwidth usage (bytes/total in %):
19.3% 17.9% 17.9% 14.5% 8.7% 8.4% 7.8% 6.5% 5.7% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102251400.pktlen.png)
detailed numbers
[ 32- 63]: 7635495
[ 64- 127]: 8662436
[ 128- 255]: 1772822
[ 256- 511]: 975920
[ 512- 1023]: 1262697
[ 1024- 2047]: 18276640
Protocol Breakdown
![[protocol breakdown chart]](201102251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38586010 (100.00%) 29478910424 (100.00%) 763.98
ip 38429339 ( 99.59%) 29433864954 ( 99.85%) 765.92
tcp 31501791 ( 81.64%) 25716005962 ( 87.24%) 816.33
http(s) 11633535 ( 30.15%) 15949239718 ( 54.10%) 1370.97
http(c) 6590370 ( 17.08%) 1065030899 ( 3.61%) 161.60
squid 233162 ( 0.60%) 67468186 ( 0.23%) 289.36
smtp 327871 ( 0.85%) 173035344 ( 0.59%) 527.75
nntp 9 ( 0.00%) 546 ( 0.00%) 60.67
ftp 47465 ( 0.12%) 5027058 ( 0.02%) 105.91
pop3 1459196 ( 3.78%) 103268826 ( 0.35%) 70.77
imap 4243 ( 0.01%) 861352 ( 0.00%) 203.01
telnet 1624 ( 0.00%) 246267 ( 0.00%) 151.64
ssh 666754 ( 1.73%) 109564643 ( 0.37%) 164.33
dns 9195 ( 0.02%) 719583 ( 0.00%) 78.26
bgp 562 ( 0.00%) 83187 ( 0.00%) 148.02
napster 403 ( 0.00%) 31094 ( 0.00%) 77.16
realaud 73 ( 0.00%) 6519 ( 0.00%) 89.30
rtsp 2375527 ( 6.16%) 3448039827 ( 11.70%) 1451.48
icecast 14105 ( 0.04%) 15203724 ( 0.05%) 1077.90
hotline 90 ( 0.00%) 5972 ( 0.00%) 66.36
other 8137603 ( 21.09%) 4778172977 ( 16.21%) 587.17
udp 5729728 ( 14.85%) 3404281999 ( 11.55%) 594.14
dns 752907 ( 1.95%) 168090884 ( 0.57%) 223.26
realaud 21 ( 0.00%) 3139 ( 0.00%) 149.48
halflif 270 ( 0.00%) 18339 ( 0.00%) 67.92
starcra 70 ( 0.00%) 13455 ( 0.00%) 192.21
everque 215 ( 0.00%) 36770 ( 0.00%) 171.02
unreal 21 ( 0.00%) 3784 ( 0.00%) 180.19
quake 11 ( 0.00%) 1371 ( 0.00%) 124.64
cuseeme 6 ( 0.00%) 869 ( 0.00%) 144.83
other 4976150 ( 12.90%) 3236078939 ( 10.98%) 650.32
icmp 629632 ( 1.63%) 102557165 ( 0.35%) 162.88
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2348 ( 0.01%) 713648 ( 0.00%) 303.94
ip6 548806 ( 1.42%) 205352215 ( 0.70%) 374.18
other 16849 ( 0.04%) 4934695 ( 0.02%) 292.88
frag 395 ( 0.00%) 414844 ( 0.00%) 1050.24
ip6 156671 ( 0.41%) 45045470 ( 0.15%) 287.52
tcp6 93107 ( 0.24%) 30337402 ( 0.10%) 325.83
http(s) 18145 ( 0.05%) 15620188 ( 0.05%) 860.85
http(c) 24176 ( 0.06%) 2216303 ( 0.01%) 91.67
smtp 235 ( 0.00%) 58456 ( 0.00%) 248.75
ftp 61 ( 0.00%) 5415 ( 0.00%) 88.77
dns 791 ( 0.00%) 182625 ( 0.00%) 230.88
bgp 90 ( 0.00%) 13430 ( 0.00%) 149.22
other 49609 ( 0.13%) 12240985 ( 0.04%) 246.75
udp6 39410 ( 0.10%) 11791365 ( 0.04%) 299.20
dns 37902 ( 0.10%) 11579416 ( 0.04%) 305.51
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1506 ( 0.00%) 211725 ( 0.00%) 140.59
icmp6 23337 ( 0.06%) 2355339 ( 0.01%) 100.93
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 705 ( 0.00%) 546108 ( 0.00%) 774.62
tcpdump file: 201102251400.dump.gz (912.30 MB)