Traffic Trace Info
DumpFile: 201010071400.dump
FileSize: 3149.30MB
Id: 201010071400
StartTime: Thu Oct 7 14:00:01 2010
EndTime: Thu Oct 7 14:15:01 2010
TotalTime: 900.24 seconds
TotalCapSize: -1600.78MB CapLen: 96 bytes
# of packets: 42863209 (27382.17MB)
AvgRate: 255.12Mbps stddev:26.86M
IP flow (unique src/dst pair) Information
# of flows: 1862663 (avg. 23.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.6% 1.5% 1.4% 1.3% 1.1% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 743142
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.5% 6.5% 3.0% 2.8% 2.8% 2.3% 2.2% 2.2% 2.1%
# of IPv6 addresses: 4110
Top 10 bandwidth usage (bytes/total in %):
30.4% 30.4% 29.2% 8.4% 8.0% 7.5% 6.0% 5.2% 4.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010071400.pktlen.png)
detailed numbers
[ 32- 63]: 6439133
[ 64- 127]: 13667031
[ 128- 255]: 2304968
[ 256- 511]: 1561218
[ 512- 1023]: 968105
[ 1024- 2047]: 17922754
Protocol Breakdown
![[protocol breakdown chart]](201010071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42863209 (100.00%) 28712286012 (100.00%) 669.86
ip 41608803 ( 97.07%) 28430958211 ( 99.02%) 683.29
tcp 26823560 ( 62.58%) 20111661140 ( 70.05%) 749.78
http(s) 12067599 ( 28.15%) 14736060318 ( 51.32%) 1221.13
http(c) 9082938 ( 21.19%) 1729912442 ( 6.02%) 190.46
squid 277131 ( 0.65%) 114605143 ( 0.40%) 413.54
smtp 284723 ( 0.66%) 128721592 ( 0.45%) 452.09
ftp 43977 ( 0.10%) 3828722 ( 0.01%) 87.06
pop3 17681 ( 0.04%) 6181787 ( 0.02%) 349.63
imap 4543 ( 0.01%) 2988269 ( 0.01%) 657.77
telnet 47793 ( 0.11%) 3501552 ( 0.01%) 73.26
ssh 55338 ( 0.13%) 8439684 ( 0.03%) 152.51
dns 4913 ( 0.01%) 415683 ( 0.00%) 84.61
bgp 332 ( 0.00%) 84101 ( 0.00%) 253.32
napster 40 ( 0.00%) 4332 ( 0.00%) 108.30
realaud 99 ( 0.00%) 16809 ( 0.00%) 169.79
rtsp 20898 ( 0.05%) 23031212 ( 0.08%) 1102.08
icecast 21187 ( 0.05%) 16058134 ( 0.06%) 757.92
hotline 9 ( 0.00%) 1015 ( 0.00%) 112.78
other 4894358 ( 11.42%) 3337810285 ( 11.63%) 681.97
udp 9356583 ( 21.83%) 5120735260 ( 17.83%) 547.29
dns 1297396 ( 3.03%) 189130501 ( 0.66%) 145.78
realaud 105 ( 0.00%) 14266 ( 0.00%) 135.87
halflif 49 ( 0.00%) 6076 ( 0.00%) 124.00
starcra 23 ( 0.00%) 3793 ( 0.00%) 164.91
everque 10967 ( 0.03%) 1260859 ( 0.00%) 114.97
unreal 26 ( 0.00%) 4592 ( 0.00%) 176.62
quake 17 ( 0.00%) 1457 ( 0.00%) 85.71
cuseeme 3 ( 0.00%) 351 ( 0.00%) 117.00
other 8045641 ( 18.77%) 4929980061 ( 17.17%) 612.75
icmp 473946 ( 1.11%) 37159733 ( 0.13%) 78.40
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5092 ( 0.01%) 751880 ( 0.00%) 147.66
ip6 4880791 ( 11.39%) 3150728677 ( 10.97%) 645.54
other 68651 ( 0.16%) 9902801 ( 0.03%) 144.25
frag 9313 ( 0.02%) 7287928 ( 0.03%) 782.55
ip6 1254404 ( 2.93%) 281327681 ( 0.98%) 224.27
tcp6 1058660 ( 2.47%) 175863932 ( 0.61%) 166.12
http(s) 28266 ( 0.07%) 29170231 ( 0.10%) 1031.99
http(c) 55680 ( 0.13%) 4972538 ( 0.02%) 89.31
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 1434 ( 0.00%) 1340712 ( 0.00%) 934.95
ftp 102 ( 0.00%) 8991 ( 0.00%) 88.15
imap 120 ( 0.00%) 10416 ( 0.00%) 86.80
dns 148 ( 0.00%) 34981 ( 0.00%) 236.36
bgp 90 ( 0.00%) 14686 ( 0.00%) 163.18
other 972817 ( 2.27%) 140311123 ( 0.49%) 144.23
udp6 59443 ( 0.14%) 16793786 ( 0.06%) 282.52
dns 50875 ( 0.12%) 15717057 ( 0.05%) 308.93
other 8568 ( 0.02%) 1076729 ( 0.00%) 125.67
icmp6 13338 ( 0.03%) 2107859 ( 0.01%) 158.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 122933 ( 0.29%) 86558024 ( 0.30%) 704.11
tcpdump file: 201010071400.dump.gz (1119.20 MB)