Traffic Trace Info
DumpFile: 201102261400.dump
FileSize: 2593.58MB
Id: 201102261400
StartTime: Sat Feb 26 14:00:01 2011
EndTime: Sat Feb 26 14:15:00 2011
TotalTime: 899.18 seconds
TotalCapSize: 2035.86MB CapLen: 96 bytes
# of packets: 36550151 (28515.80MB)
AvgRate: 265.97Mbps stddev:44.64M
IP flow (unique src/dst pair) Information
# of flows: 912729 (avg. 40.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.3% 1.8% 1.8% 1.4% 1.4% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 507509
Top 10 bandwidth usage (bytes/total in %):
21.1% 8.7% 7.6% 5.6% 2.8% 2.6% 2.6% 2.4% 2.4% 2.3%
# of IPv6 addresses: 3321
Top 10 bandwidth usage (bytes/total in %):
75.4% 75.3% 16.8% 15.1% 1.6% 1.6% 1.5% 1.2% 1.0% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102261400.pktlen.png)
detailed numbers
[ 32- 63]: 6936742
[ 64- 127]: 7459484
[ 128- 255]: 1390590
[ 256- 511]: 829914
[ 512- 1023]: 1197851
[ 1024- 2047]: 18735570
Protocol Breakdown
![[protocol breakdown chart]](201102261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36550151 (100.00%) 29900983685 (100.00%) 818.08
ip 35987903 ( 98.46%) 29345431532 ( 98.14%) 815.42
tcp 30057728 ( 82.24%) 26264492954 ( 87.84%) 873.80
http(s) 16014638 ( 43.82%) 22397638995 ( 74.91%) 1398.57
http(c) 7754887 ( 21.22%) 1290773204 ( 4.32%) 166.45
squid 346878 ( 0.95%) 101594887 ( 0.34%) 292.88
smtp 241091 ( 0.66%) 181878337 ( 0.61%) 754.40
ftp 327445 ( 0.90%) 215109889 ( 0.72%) 656.93
pop3 56569 ( 0.15%) 15536393 ( 0.05%) 274.64
imap 3623 ( 0.01%) 1227055 ( 0.00%) 338.68
telnet 566 ( 0.00%) 40157 ( 0.00%) 70.95
ssh 614697 ( 1.68%) 104390884 ( 0.35%) 169.82
dns 9580 ( 0.03%) 732043 ( 0.00%) 76.41
bgp 590 ( 0.00%) 106367 ( 0.00%) 180.28
napster 11 ( 0.00%) 762 ( 0.00%) 69.27
realaud 89 ( 0.00%) 8622 ( 0.00%) 96.88
rtsp 6735 ( 0.02%) 7733387 ( 0.03%) 1148.24
icecast 22575 ( 0.06%) 22201021 ( 0.07%) 983.43
hotline 6 ( 0.00%) 1274 ( 0.00%) 212.33
other 4657746 ( 12.74%) 1925519557 ( 6.44%) 413.40
udp 4487638 ( 12.28%) 2487438057 ( 8.32%) 554.29
dns 539421 ( 1.48%) 118582534 ( 0.40%) 219.83
realaud 24 ( 0.00%) 4299 ( 0.00%) 179.12
halflif 23 ( 0.00%) 3237 ( 0.00%) 140.74
starcra 26 ( 0.00%) 4928 ( 0.00%) 189.54
everque 176 ( 0.00%) 34390 ( 0.00%) 195.40
unreal 29 ( 0.00%) 4872 ( 0.00%) 168.00
quake 45 ( 0.00%) 6421 ( 0.00%) 142.69
cuseeme 14 ( 0.00%) 2184 ( 0.00%) 156.00
other 3947796 ( 10.80%) 2368723659 ( 7.92%) 600.01
icmp 639891 ( 1.75%) 110690228 ( 0.37%) 172.98
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 310 ( 0.00%) 77956 ( 0.00%) 251.47
ip6 773804 ( 2.12%) 464146163 ( 1.55%) 599.82
other 28347 ( 0.08%) 18566904 ( 0.06%) 654.99
frag 365 ( 0.00%) 388979 ( 0.00%) 1065.70
ip6 562248 ( 1.54%) 555552153 ( 1.86%) 988.09
tcp6 514204 ( 1.41%) 544038622 ( 1.82%) 1058.02
http(s) 13793 ( 0.04%) 9778253 ( 0.03%) 708.93
http(c) 27468 ( 0.08%) 2448448 ( 0.01%) 89.14
squid 80 ( 0.00%) 7296 ( 0.00%) 91.20
smtp 188 ( 0.00%) 22448 ( 0.00%) 119.40
ftp 2009 ( 0.01%) 173753 ( 0.00%) 86.49
ssh 264 ( 0.00%) 75616 ( 0.00%) 286.42
dns 813 ( 0.00%) 195369 ( 0.00%) 240.31
bgp 90 ( 0.00%) 15154 ( 0.00%) 168.38
other 469499 ( 1.28%) 531322285 ( 1.78%) 1131.68
udp6 31209 ( 0.09%) 9580579 ( 0.03%) 306.98
dns 30490 ( 0.08%) 9460403 ( 0.03%) 310.28
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 717 ( 0.00%) 119956 ( 0.00%) 167.30
icmp6 16555 ( 0.05%) 1765504 ( 0.01%) 106.64
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 169 ( 0.00%) 152260 ( 0.00%) 900.95
tcpdump file: 201102261400.dump.gz (854.64 MB)