Traffic Trace Info
DumpFile: 201010051400.dump
FileSize: 7830.02MB
Id: 201010051400
StartTime: Tue Oct 5 14:00:01 2010
EndTime: Tue Oct 5 14:15:01 2010
TotalTime: 900.02 seconds
TotalCapSize: 1653.24MB CapLen: 96 bytes
# of packets: 136363931 (17150.27MB)
AvgRate: 159.88Mbps stddev:34.39M
IP flow (unique src/dst pair) Information
# of flows: 629348 (avg. 216.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
39.6% 1.0% 1.0% 0.7% 0.7% 0.5% 0.5% 0.4% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 372631
Top 10 bandwidth usage (bytes/total in %):
39.8% 39.7% 7.6% 5.8% 5.3% 2.9% 2.5% 2.0% 1.3% 1.1%
# of IPv6 addresses: 2788
Top 10 bandwidth usage (bytes/total in %):
25.2% 22.6% 22.6% 21.9% 9.1% 9.1% 8.1% 7.3% 7.3% 6.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010051400.pktlen.png)
detailed numbers
[ 32- 63]: 121909782
[ 64- 127]: 5596719
[ 128- 255]: 1012210
[ 256- 511]: 776234
[ 512- 1023]: 407091
[ 1024- 2047]: 6661895
Protocol Breakdown
![[protocol breakdown chart]](201010051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 136363931 (100.00%) 17983366741 (100.00%) 131.88
ip 136225252 ( 99.90%) 17918430699 ( 99.64%) 131.54
tcp 11068081 ( 8.12%) 7379711498 ( 41.04%) 666.76
http(s) 4136518 ( 3.03%) 5267428253 ( 29.29%) 1273.40
http(c) 4072620 ( 2.99%) 648463261 ( 3.61%) 159.23
squid 636184 ( 0.47%) 453281001 ( 2.52%) 712.50
smtp 122802 ( 0.09%) 38801207 ( 0.22%) 315.97
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 12426 ( 0.01%) 1029671 ( 0.01%) 82.86
pop3 9541 ( 0.01%) 3240310 ( 0.02%) 339.62
imap 1866 ( 0.00%) 193374 ( 0.00%) 103.63
telnet 603 ( 0.00%) 41916 ( 0.00%) 69.51
ssh 7365 ( 0.01%) 1455364 ( 0.01%) 197.61
dns 2739 ( 0.00%) 217248 ( 0.00%) 79.32
bgp 145 ( 0.00%) 34728 ( 0.00%) 239.50
napster 26 ( 0.00%) 2430 ( 0.00%) 93.46
realaud 30 ( 0.00%) 6335 ( 0.00%) 211.17
rtsp 17633 ( 0.01%) 15913838 ( 0.09%) 902.50
icecast 15083 ( 0.01%) 11066537 ( 0.06%) 733.71
hotline 7 ( 0.00%) 897 ( 0.00%) 128.14
other 2032492 ( 1.49%) 938535068 ( 5.22%) 461.77
udp 123258389 ( 90.39%) 9443197342 ( 52.51%) 76.61
dns 606098 ( 0.44%) 86323592 ( 0.48%) 142.43
realaud 7 ( 0.00%) 1121 ( 0.00%) 160.14
halflif 13 ( 0.00%) 1359 ( 0.00%) 104.54
starcra 28 ( 0.00%) 4881 ( 0.00%) 174.32
everque 241 ( 0.00%) 35131 ( 0.00%) 145.77
unreal 16 ( 0.00%) 2543 ( 0.00%) 158.94
quake 13 ( 0.00%) 1227 ( 0.00%) 94.38
cuseeme 5 ( 0.00%) 760 ( 0.00%) 152.00
other 122651877 ( 89.94%) 9356771544 ( 52.03%) 76.29
icmp 196395 ( 0.14%) 15144303 ( 0.08%) 77.11
ipip 81 ( 0.00%) 8442 ( 0.00%) 104.22
ipsec 2222 ( 0.00%) 323748 ( 0.00%) 145.70
ip6 1687577 ( 1.24%) 1076753984 ( 5.99%) 638.05
other 12507 ( 0.01%) 3291382 ( 0.02%) 263.16
frag 276 ( 0.00%) 282238 ( 0.00%) 1022.60
ip6 138679 ( 0.10%) 64936042 ( 0.36%) 468.25
tcp6 104315 ( 0.08%) 56039209 ( 0.31%) 537.21
http(s) 5327 ( 0.00%) 6650611 ( 0.04%) 1248.47
http(c) 5944 ( 0.00%) 569016 ( 0.00%) 95.73
smtp 156 ( 0.00%) 51656 ( 0.00%) 331.13
ftp 33 ( 0.00%) 2892 ( 0.00%) 87.64
ssh 27 ( 0.00%) 7314 ( 0.00%) 270.89
dns 58 ( 0.00%) 13559 ( 0.00%) 233.78
bgp 45 ( 0.00%) 7290 ( 0.00%) 162.00
other 92725 ( 0.07%) 48736871 ( 0.27%) 525.61
udp6 27502 ( 0.02%) 7873332 ( 0.04%) 286.28
dns 24534 ( 0.02%) 7271105 ( 0.04%) 296.37
other 2968 ( 0.00%) 602227 ( 0.00%) 202.91
icmp6 6697 ( 0.00%) 928872 ( 0.01%) 138.70
ip6 43 ( 0.00%) 5924 ( 0.00%) 137.77
pim6 17 ( 0.00%) 2312 ( 0.00%) 136.00
other6 105 ( 0.00%) 86393 ( 0.00%) 822.79
tcpdump file: 201010051400.dump.gz (1519.90 MB)