Traffic Trace Info
DumpFile: 201010011400.dump
FileSize: 7558.44MB
Id: 201010011400
StartTime: Fri Oct 1 14:00:02 2010
EndTime: Fri Oct 1 14:15:01 2010
TotalTime: 898.78 seconds
TotalCapSize: 1468.68MB CapLen: 96 bytes
# of packets: 130661182 (17807.03MB)
AvgRate: 166.17Mbps stddev:27.65M
IP flow (unique src/dst pair) Information
# of flows: 712719 (avg. 183.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
35.8% 1.7% 1.1% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 436961
Top 10 bandwidth usage (bytes/total in %):
35.9% 35.8% 9.9% 9.7% 3.8% 2.4% 1.7% 1.7% 1.5% 1.4%
# of IPv6 addresses: 2505
Top 10 bandwidth usage (bytes/total in %):
46.3% 29.4% 13.5% 12.3% 6.5% 4.2% 4.2% 3.3% 3.3% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010011400.pktlen.png)
detailed numbers
[ 32- 63]: 114743294
[ 64- 127]: 5878531
[ 128- 255]: 1257182
[ 256- 511]: 805565
[ 512- 1023]: 531294
[ 1024- 2047]: 7445316
Protocol Breakdown
![[protocol breakdown chart]](201010011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 130661182 (100.00%) 18672028468 (100.00%) 142.90
ip 130545089 ( 99.91%) 18634401417 ( 99.80%) 142.74
tcp 11168960 ( 8.55%) 7463749770 ( 39.97%) 668.26
http(s) 4111968 ( 3.15%) 5176338148 ( 27.72%) 1258.85
http(c) 4140035 ( 3.17%) 660835413 ( 3.54%) 159.62
squid 179275 ( 0.14%) 91548218 ( 0.49%) 510.66
smtp 123013 ( 0.09%) 26927927 ( 0.14%) 218.90
nntp 3 ( 0.00%) 188 ( 0.00%) 62.67
ftp 17969 ( 0.01%) 1490116 ( 0.01%) 82.93
pop3 8341 ( 0.01%) 2239961 ( 0.01%) 268.55
imap 2434 ( 0.00%) 983941 ( 0.01%) 404.25
telnet 365 ( 0.00%) 23579 ( 0.00%) 64.60
ssh 26469 ( 0.02%) 11046439 ( 0.06%) 417.33
dns 2612 ( 0.00%) 199489 ( 0.00%) 76.37
bgp 68 ( 0.00%) 22969 ( 0.00%) 337.78
napster 25 ( 0.00%) 6153 ( 0.00%) 246.12
realaud 22 ( 0.00%) 3098 ( 0.00%) 140.82
rtsp 3039 ( 0.00%) 2950569 ( 0.02%) 970.90
icecast 12058 ( 0.01%) 7371263 ( 0.04%) 611.32
other 2541262 ( 1.94%) 1481762179 ( 7.94%) 583.08
udp 116228103 ( 88.95%) 9224778683 ( 49.40%) 79.37
dns 700461 ( 0.54%) 100278945 ( 0.54%) 143.16
realaud 4428 ( 0.00%) 2723426 ( 0.01%) 615.05
halflif 25 ( 0.00%) 2490 ( 0.00%) 99.60
starcra 29 ( 0.00%) 4145 ( 0.00%) 142.93
everque 4983 ( 0.00%) 566679 ( 0.00%) 113.72
unreal 13 ( 0.00%) 1899 ( 0.00%) 146.08
quake 11 ( 0.00%) 981 ( 0.00%) 89.18
other 115516052 ( 88.41%) 9120233196 ( 48.84%) 78.95
icmp 544452 ( 0.42%) 75228172 ( 0.40%) 138.17
ipip 211 ( 0.00%) 24446 ( 0.00%) 115.86
ipsec 4769 ( 0.00%) 692822 ( 0.00%) 145.28
ip6 2576794 ( 1.97%) 1863222537 ( 9.98%) 723.08
other 21800 ( 0.02%) 6704987 ( 0.04%) 307.57
frag 4462 ( 0.00%) 2468434 ( 0.01%) 553.21
ip6 116093 ( 0.09%) 37627051 ( 0.20%) 324.11
tcp6 74698 ( 0.06%) 26163362 ( 0.14%) 350.26
http(s) 5166 ( 0.00%) 7156519 ( 0.04%) 1385.31
http(c) 9591 ( 0.01%) 890341 ( 0.00%) 92.83
squid 30 ( 0.00%) 3244 ( 0.00%) 108.13
smtp 2505 ( 0.00%) 260485 ( 0.00%) 103.99
ftp 52 ( 0.00%) 4778 ( 0.00%) 91.88
ssh 28 ( 0.00%) 8200 ( 0.00%) 292.86
dns 88 ( 0.00%) 20716 ( 0.00%) 235.41
bgp 54 ( 0.00%) 8298 ( 0.00%) 153.67
other 57184 ( 0.04%) 17810781 ( 0.10%) 311.46
udp6 32199 ( 0.02%) 9217109 ( 0.05%) 286.25
dns 28012 ( 0.02%) 8417612 ( 0.05%) 300.50
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
other 4186 ( 0.00%) 799393 ( 0.00%) 190.97
icmp6 7774 ( 0.01%) 1246177 ( 0.01%) 160.30
ip6 46 ( 0.00%) 6328 ( 0.00%) 137.57
pim6 23 ( 0.00%) 3128 ( 0.00%) 136.00
other6 1353 ( 0.00%) 990947 ( 0.01%) 732.41
tcpdump file: 201010011400.dump.gz (1505.41 MB)