Traffic Trace Info
DumpFile: 201010031400.dump
FileSize: 7357.42MB
Id: 201010031400
StartTime: Sun Oct 3 14:00:03 2010
EndTime: Sun Oct 3 14:13:22 2010
TotalTime: 798.88 seconds
TotalCapSize: 1304.89MB CapLen: 96 bytes
# of packets: 128221674 (14997.36MB)
AvgRate: 157.57Mbps stddev:41.94M
IP flow (unique src/dst pair) Information
# of flows: 465413 (avg. 275.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
43.4% 1.9% 1.2% 1.2% 1.2% 1.2% 1.2% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 308638
Top 10 bandwidth usage (bytes/total in %):
44.3% 44.3% 9.4% 8.4% 7.2% 6.4% 2.1% 1.3% 1.3% 1.3%
# of IPv6 addresses: 2267
Top 10 bandwidth usage (bytes/total in %):
88.6% 88.2% 3.4% 3.4% 2.0% 1.4% 1.4% 1.2% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010031400.pktlen.png)
detailed numbers
[ 32- 63]: 115592610
[ 64- 127]: 5458945
[ 128- 255]: 721411
[ 256- 511]: 632688
[ 512- 1023]: 352465
[ 1024- 2047]: 5463555
Protocol Breakdown
![[protocol breakdown chart]](201010031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 128221674 (100.00%) 15725876993 (100.00%) 122.65
ip 127880296 ( 99.73%) 15386656065 ( 97.84%) 120.32
tcp 8027639 ( 6.26%) 5609246908 ( 35.67%) 698.74
http(s) 3387805 ( 2.64%) 4541518063 ( 28.88%) 1340.55
http(c) 3110640 ( 2.43%) 337347977 ( 2.15%) 108.45
squid 154138 ( 0.12%) 70818910 ( 0.45%) 459.45
smtp 63298 ( 0.05%) 10310812 ( 0.07%) 162.89
ftp 12489 ( 0.01%) 1177172 ( 0.01%) 94.26
pop3 2039 ( 0.00%) 842633 ( 0.01%) 413.26
imap 901 ( 0.00%) 151640 ( 0.00%) 168.30
telnet 265 ( 0.00%) 18698 ( 0.00%) 70.56
ssh 83432 ( 0.07%) 12198166 ( 0.08%) 146.20
dns 1905 ( 0.00%) 163392 ( 0.00%) 85.77
bgp 57 ( 0.00%) 23511 ( 0.00%) 412.47
napster 21 ( 0.00%) 1808 ( 0.00%) 86.10
realaud 50 ( 0.00%) 32897 ( 0.00%) 657.94
rtsp 83402 ( 0.07%) 7507405 ( 0.05%) 90.01
icecast 11026 ( 0.01%) 8726715 ( 0.06%) 791.47
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1116170 ( 0.87%) 618407049 ( 3.93%) 554.04
udp 117537062 ( 91.67%) 8443557564 ( 53.69%) 71.84
dns 454673 ( 0.35%) 64767770 ( 0.41%) 142.45
realaud 151 ( 0.00%) 9758 ( 0.00%) 64.62
halflif 18 ( 0.00%) 3620 ( 0.00%) 201.11
starcra 8 ( 0.00%) 1287 ( 0.00%) 160.88
everque 90 ( 0.00%) 14719 ( 0.00%) 163.54
unreal 18 ( 0.00%) 3456 ( 0.00%) 192.00
quake 12 ( 0.00%) 1398 ( 0.00%) 116.50
other 117080860 ( 91.31%) 8378416032 ( 53.28%) 71.56
icmp 387311 ( 0.30%) 27805896 ( 0.18%) 71.79
ipip 68 ( 0.00%) 7012 ( 0.00%) 103.12
ipsec 2200 ( 0.00%) 292000 ( 0.00%) 132.73
ip6 1922688 ( 1.50%) 1305091670 ( 8.30%) 678.78
other 3328 ( 0.00%) 655015 ( 0.00%) 196.82
frag 3045 ( 0.00%) 1758757 ( 0.01%) 577.59
ip6 341378 ( 0.27%) 339220928 ( 2.16%) 993.68
tcp6 316160 ( 0.25%) 332166201 ( 2.11%) 1050.63
http(s) 773 ( 0.00%) 737581 ( 0.00%) 954.18
http(c) 20910 ( 0.02%) 1715662 ( 0.01%) 82.05
smtp 154 ( 0.00%) 23653 ( 0.00%) 153.59
ftp 45 ( 0.00%) 3926 ( 0.00%) 87.24
ssh 16 ( 0.00%) 4576 ( 0.00%) 286.00
dns 30 ( 0.00%) 5316 ( 0.00%) 177.20
bgp 50 ( 0.00%) 7682 ( 0.00%) 153.64
other 294182 ( 0.23%) 329667805 ( 2.10%) 1120.63
udp6 20354 ( 0.02%) 5945251 ( 0.04%) 292.09
dns 18742 ( 0.01%) 5691866 ( 0.04%) 303.70
other 1612 ( 0.00%) 253385 ( 0.00%) 157.19
icmp6 4279 ( 0.00%) 752491 ( 0.00%) 175.86
ip6 37 ( 0.00%) 5216 ( 0.00%) 140.97
pim6 18 ( 0.00%) 2448 ( 0.00%) 136.00
other6 530 ( 0.00%) 349321 ( 0.00%) 659.10
tcpdump file: 201010031400.dump.gz (1361.01 MB)