Traffic Trace Info
DumpFile: 201010021400.dump
FileSize: 7847.78MB
Id: 201010021400
StartTime: Sat Oct 2 14:00:00 2010
EndTime: Sat Oct 2 14:15:00 2010
TotalTime: 900.04 seconds
TotalCapSize: 1667.28MB CapLen: 96 bytes
# of packets: 136607560 (16374.17MB)
AvgRate: 152.58Mbps stddev:27.21M
IP flow (unique src/dst pair) Information
# of flows: 527642 (avg. 258.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
42.2% 2.1% 1.5% 1.2% 1.0% 0.9% 0.9% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 328191
Top 10 bandwidth usage (bytes/total in %):
44.1% 43.8% 9.5% 8.3% 5.2% 4.8% 2.4% 2.3% 1.6% 1.1%
# of IPv6 addresses: 2480
Top 10 bandwidth usage (bytes/total in %):
61.0% 61.0% 33.5% 33.3% 1.3% 0.9% 0.9% 0.8% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010021400.pktlen.png)
detailed numbers
[ 32- 63]: 123215159
[ 64- 127]: 5236108
[ 128- 255]: 882404
[ 256- 511]: 799181
[ 512- 1023]: 448455
[ 1024- 2047]: 6026253
Protocol Breakdown
![[protocol breakdown chart]](201010021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 136607560 (100.00%) 17169558579 (100.00%) 125.69
ip 135940737 ( 99.51%) 16562621208 ( 96.47%) 121.84
tcp 8262068 ( 6.05%) 5793435595 ( 33.74%) 701.21
http(s) 3483870 ( 2.55%) 4513614803 ( 26.29%) 1295.57
http(c) 2906292 ( 2.13%) 365147957 ( 2.13%) 125.64
squid 203833 ( 0.15%) 63291007 ( 0.37%) 310.50
smtp 91589 ( 0.07%) 23675127 ( 0.14%) 258.49
ftp 12456 ( 0.01%) 1102812 ( 0.01%) 88.54
pop3 11319 ( 0.01%) 1877264 ( 0.01%) 165.85
imap 1828 ( 0.00%) 495344 ( 0.00%) 270.98
telnet 396 ( 0.00%) 28211 ( 0.00%) 71.24
ssh 33690 ( 0.02%) 7565510 ( 0.04%) 224.56
dns 2412 ( 0.00%) 196766 ( 0.00%) 81.58
bgp 75 ( 0.00%) 29201 ( 0.00%) 389.35
napster 493 ( 0.00%) 232656 ( 0.00%) 471.92
realaud 165 ( 0.00%) 10624 ( 0.00%) 64.39
rtsp 1527 ( 0.00%) 162833 ( 0.00%) 106.64
icecast 17366 ( 0.01%) 11035485 ( 0.06%) 635.46
hotline 22 ( 0.00%) 1574 ( 0.00%) 71.55
other 1494734 ( 1.09%) 804968361 ( 4.69%) 538.54
udp 125022892 ( 91.52%) 9254020996 ( 53.90%) 74.02
dns 554657 ( 0.41%) 76280154 ( 0.44%) 137.53
realaud 6126 ( 0.00%) 1464464 ( 0.01%) 239.06
halflif 12 ( 0.00%) 866 ( 0.00%) 72.17
starcra 9 ( 0.00%) 1393 ( 0.00%) 154.78
everque 179 ( 0.00%) 30077 ( 0.00%) 168.03
unreal 23 ( 0.00%) 4598 ( 0.00%) 199.91
quake 36 ( 0.00%) 2782 ( 0.00%) 77.28
cuseeme 15 ( 0.00%) 1626 ( 0.00%) 108.40
other 124461079 ( 91.11%) 9175858442 ( 53.44%) 73.72
icmp 445298 ( 0.33%) 59085341 ( 0.34%) 132.69
ipip 104 ( 0.00%) 10804 ( 0.00%) 103.88
ipsec 2588 ( 0.00%) 347384 ( 0.00%) 134.23
ip6 2202466 ( 1.61%) 1454789392 ( 8.47%) 660.53
other 5321 ( 0.00%) 931696 ( 0.01%) 175.10
frag 1912 ( 0.00%) 1140477 ( 0.01%) 596.48
ip6 666823 ( 0.49%) 606937371 ( 3.53%) 910.19
tcp6 632303 ( 0.46%) 597962517 ( 3.48%) 945.69
http(s) 1497 ( 0.00%) 1627523 ( 0.01%) 1087.19
http(c) 5750 ( 0.00%) 556978 ( 0.00%) 96.87
smtp 164 ( 0.00%) 23030 ( 0.00%) 140.43
ftp 61 ( 0.00%) 5285 ( 0.00%) 86.64
ssh 16 ( 0.00%) 4576 ( 0.00%) 286.00
dns 47 ( 0.00%) 8945 ( 0.00%) 190.32
bgp 56 ( 0.00%) 9073 ( 0.00%) 162.02
other 624712 ( 0.46%) 595727107 ( 3.47%) 953.60
udp6 27437 ( 0.02%) 7562801 ( 0.04%) 275.64
dns 23335 ( 0.02%) 7069171 ( 0.04%) 302.94
other 4102 ( 0.00%) 493630 ( 0.00%) 120.34
icmp6 6520 ( 0.00%) 1040576 ( 0.01%) 159.60
ip6 49 ( 0.00%) 6732 ( 0.00%) 137.39
pim6 16 ( 0.00%) 2176 ( 0.00%) 136.00
other6 498 ( 0.00%) 362569 ( 0.00%) 728.05
tcpdump file: 201010021400.dump.gz (1460.62 MB)