Traffic Trace Info
DumpFile: 201010041400.dump
FileSize: 7993.88MB
Id: 201010041400
StartTime: Mon Oct 4 14:00:00 2010
EndTime: Mon Oct 4 14:15:01 2010
TotalTime: 900.16 seconds
TotalCapSize: 1784.35MB CapLen: 96 bytes
# of packets: 138509145 (17827.51MB)
AvgRate: 166.47Mbps stddev:32.64M
IP flow (unique src/dst pair) Information
# of flows: 845897 (avg. 163.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
38.2% 1.7% 0.9% 0.9% 0.8% 0.6% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 510929
Top 10 bandwidth usage (bytes/total in %):
38.3% 38.3% 8.8% 7.5% 4.5% 3.9% 3.2% 2.5% 1.7% 1.0%
# of IPv6 addresses: 2982
Top 10 bandwidth usage (bytes/total in %):
23.8% 19.7% 19.6% 17.3% 16.3% 9.3% 7.4% 5.2% 4.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010041400.pktlen.png)
detailed numbers
[ 32- 63]: 122607426
[ 64- 127]: 6530391
[ 128- 255]: 1022399
[ 256- 511]: 878260
[ 512- 1023]: 451132
[ 1024- 2047]: 7019537
Protocol Breakdown
![[protocol breakdown chart]](201010041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 138509145 (100.00%) 18693500749 (100.00%) 134.96
ip 138334946 ( 99.87%) 18642388096 ( 99.73%) 134.76
tcp 11894580 ( 8.59%) 7896722373 ( 42.24%) 663.89
http(s) 4834925 ( 3.49%) 6172965703 ( 33.02%) 1276.74
http(c) 4662734 ( 3.37%) 658254954 ( 3.52%) 141.17
squid 169323 ( 0.12%) 51193641 ( 0.27%) 302.34
smtp 128995 ( 0.09%) 50203357 ( 0.27%) 389.19
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 42346 ( 0.03%) 3517543 ( 0.02%) 83.07
pop3 18374 ( 0.01%) 3748646 ( 0.02%) 204.02
imap 1476 ( 0.00%) 322727 ( 0.00%) 218.65
telnet 54 ( 0.00%) 3741 ( 0.00%) 69.28
ssh 10146 ( 0.01%) 1406028 ( 0.01%) 138.58
dns 2343 ( 0.00%) 194490 ( 0.00%) 83.01
bgp 160 ( 0.00%) 28130 ( 0.00%) 175.81
napster 17 ( 0.00%) 2894 ( 0.00%) 170.24
realaud 17 ( 0.00%) 2740 ( 0.00%) 161.18
rtsp 3328 ( 0.00%) 2758487 ( 0.01%) 828.87
icecast 414 ( 0.00%) 170267 ( 0.00%) 411.27
hotline 4 ( 0.00%) 242 ( 0.00%) 60.50
other 2019923 ( 1.46%) 951948723 ( 5.09%) 471.28
udp 123710826 ( 89.32%) 9263239947 ( 49.55%) 74.88
dns 686667 ( 0.50%) 98098225 ( 0.52%) 142.86
realaud 13 ( 0.00%) 2590 ( 0.00%) 199.23
halflif 35 ( 0.00%) 3449 ( 0.00%) 98.54
starcra 12 ( 0.00%) 1928 ( 0.00%) 160.67
everque 4374 ( 0.00%) 510435 ( 0.00%) 116.70
unreal 30 ( 0.00%) 5745 ( 0.00%) 191.50
quake 13 ( 0.00%) 2248 ( 0.00%) 172.92
cuseeme 4 ( 0.00%) 674 ( 0.00%) 168.50
other 123017785 ( 88.82%) 9164381793 ( 49.02%) 74.50
icmp 664474 ( 0.48%) 48310761 ( 0.26%) 72.71
ipip 97 ( 0.00%) 10058 ( 0.00%) 103.69
ipsec 2690 ( 0.00%) 357220 ( 0.00%) 132.80
ip6 2056533 ( 1.48%) 1432716791 ( 7.66%) 696.67
other 5746 ( 0.00%) 1030946 ( 0.01%) 179.42
frag 3633 ( 0.00%) 2630655 ( 0.01%) 724.10
ip6 174199 ( 0.13%) 51112653 ( 0.27%) 293.42
tcp6 134843 ( 0.10%) 40954592 ( 0.22%) 303.72
http(s) 10958 ( 0.01%) 14669775 ( 0.08%) 1338.73
http(c) 11852 ( 0.01%) 1094041 ( 0.01%) 92.31
squid 3 ( 0.00%) 246 ( 0.00%) 82.00
smtp 251 ( 0.00%) 48244 ( 0.00%) 192.21
ftp 82 ( 0.00%) 7845 ( 0.00%) 95.67
ssh 15 ( 0.00%) 4186 ( 0.00%) 279.07
dns 70 ( 0.00%) 14646 ( 0.00%) 209.23
bgp 53 ( 0.00%) 8828 ( 0.00%) 166.57
icecast 20 ( 0.00%) 3010 ( 0.00%) 150.50
other 111539 ( 0.08%) 25103771 ( 0.13%) 225.07
udp6 32220 ( 0.02%) 8809834 ( 0.05%) 273.43
dns 29381 ( 0.02%) 8375511 ( 0.04%) 285.07
other 2839 ( 0.00%) 434323 ( 0.00%) 152.98
icmp6 6825 ( 0.00%) 1123032 ( 0.01%) 164.55
ip6 46 ( 0.00%) 6328 ( 0.00%) 137.57
pim6 15 ( 0.00%) 2040 ( 0.00%) 136.00
other6 250 ( 0.00%) 216827 ( 0.00%) 867.31
tcpdump file: 201010041400.dump.gz (1575.24 MB)