Traffic Trace Info
DumpFile: 201010061400.dump
FileSize: 3265.49MB
Id: 201010061400
StartTime: Wed Oct 6 14:00:01 2010
EndTime: Wed Oct 6 14:15:01 2010
TotalTime: 899.57 seconds
TotalCapSize: -1508.99MB CapLen: 96 bytes
# of packets: 44462955 (26776.76MB)
AvgRate: 249.69Mbps stddev:22.77M
IP flow (unique src/dst pair) Information
# of flows: 1700256 (avg. 26.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.2% 1.9% 1.6% 1.6% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 794078
Top 10 bandwidth usage (bytes/total in %):
9.8% 9.2% 8.2% 4.1% 3.2% 3.2% 2.9% 2.5% 2.3% 2.0%
# of IPv6 addresses: 4025
Top 10 bandwidth usage (bytes/total in %):
34.5% 25.4% 25.4% 12.9% 11.5% 6.5% 6.5% 4.3% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010061400.pktlen.png)
detailed numbers
[ 32- 63]: 7724835
[ 64- 127]: 14501386
[ 128- 255]: 2515889
[ 256- 511]: 1522032
[ 512- 1023]: 943100
[ 1024- 2047]: 17255713
Protocol Breakdown
![[protocol breakdown chart]](201010061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44462955 (100.00%) 28077463854 (100.00%) 631.48
ip 43437541 ( 97.69%) 27850687483 ( 99.19%) 641.17
tcp 29148613 ( 65.56%) 21010155463 ( 74.83%) 720.79
http(s) 12529479 ( 28.18%) 15671399244 ( 55.81%) 1250.76
http(c) 9811569 ( 22.07%) 1190170464 ( 4.24%) 121.30
squid 290408 ( 0.65%) 113819969 ( 0.41%) 391.93
smtp 230849 ( 0.52%) 102228994 ( 0.36%) 442.84
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 50748 ( 0.11%) 4430215 ( 0.02%) 87.30
pop3 38170 ( 0.09%) 22943973 ( 0.08%) 601.10
imap 2880 ( 0.01%) 479422 ( 0.00%) 166.47
telnet 1362 ( 0.00%) 92462 ( 0.00%) 67.89
ssh 736385 ( 1.66%) 580166052 ( 2.07%) 787.86
dns 14381 ( 0.03%) 989976 ( 0.00%) 68.84
bgp 337 ( 0.00%) 90365 ( 0.00%) 268.15
napster 57 ( 0.00%) 20482 ( 0.00%) 359.33
realaud 38 ( 0.00%) 2754 ( 0.00%) 72.47
rtsp 40940 ( 0.09%) 37194385 ( 0.13%) 908.51
icecast 44260 ( 0.10%) 39207532 ( 0.14%) 885.85
other 5356749 ( 12.05%) 3246919114 ( 11.56%) 606.14
udp 8367664 ( 18.82%) 3769028504 ( 13.42%) 450.43
dns 1255841 ( 2.82%) 184318682 ( 0.66%) 146.77
realaud 191 ( 0.00%) 36182 ( 0.00%) 189.43
halflif 35 ( 0.00%) 4474 ( 0.00%) 127.83
starcra 73 ( 0.00%) 11444 ( 0.00%) 156.77
everque 7951 ( 0.02%) 888726 ( 0.00%) 111.78
unreal 21 ( 0.00%) 3511 ( 0.00%) 167.19
quake 31 ( 0.00%) 4507 ( 0.00%) 145.39
cuseeme 10 ( 0.00%) 1178 ( 0.00%) 117.80
other 7103317 ( 15.98%) 3583654303 ( 12.76%) 504.50
icmp 1171150 ( 2.63%) 86741152 ( 0.31%) 74.06
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 4988 ( 0.01%) 711480 ( 0.00%) 142.64
ip6 4728551 ( 10.63%) 2981141739 ( 10.62%) 630.46
other 16395 ( 0.04%) 2890425 ( 0.01%) 176.30
frag 1513 ( 0.00%) 1159168 ( 0.00%) 766.14
ip6 1025414 ( 2.31%) 226776371 ( 0.81%) 221.16
tcp6 956405 ( 2.15%) 208071049 ( 0.74%) 217.56
http(s) 27717 ( 0.06%) 34876818 ( 0.12%) 1258.32
http(c) 20754 ( 0.05%) 1989607 ( 0.01%) 95.87
smtp 372 ( 0.00%) 77584 ( 0.00%) 208.56
ftp 75 ( 0.00%) 6678 ( 0.00%) 89.04
ssh 33 ( 0.00%) 9734 ( 0.00%) 294.97
dns 96 ( 0.00%) 29210 ( 0.00%) 304.27
bgp 91 ( 0.00%) 14552 ( 0.00%) 159.91
other 907267 ( 2.04%) 171066866 ( 0.61%) 188.55
udp6 53972 ( 0.12%) 16040714 ( 0.06%) 297.20
dns 50651 ( 0.11%) 15472625 ( 0.06%) 305.48
everque 1 ( 0.00%) 120 ( 0.00%) 120.00
other 3320 ( 0.01%) 567969 ( 0.00%) 171.07
icmp6 14502 ( 0.03%) 2226299 ( 0.01%) 153.52
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 423 ( 0.00%) 423053 ( 0.00%) 1000.13
tcpdump file: 201010061400.dump.gz (1165.19 MB)