Traffic Trace Info
DumpFile: 201010101400.dump
FileSize: 2300.91MB
Id: 201010101400
StartTime: Sun Oct 10 14:00:00 2010
EndTime: Sun Oct 10 14:15:00 2010
TotalTime: 899.97 seconds
TotalCapSize: 1817.60MB CapLen: 96 bytes
# of packets: 31673257 (20196.69MB)
AvgRate: 188.26Mbps stddev:22.38M
IP flow (unique src/dst pair) Information
# of flows: 1677254 (avg. 18.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.8% 1.8% 1.6% 1.4% 1.1% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 773108
Top 10 bandwidth usage (bytes/total in %):
14.3% 13.0% 10.2% 6.3% 4.0% 4.0% 2.0% 2.0% 1.9% 1.9%
# of IPv6 addresses: 3671
Top 10 bandwidth usage (bytes/total in %):
36.5% 36.5% 23.9% 23.9% 8.7% 3.2% 2.9% 2.3% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010101400.pktlen.png)
detailed numbers
[ 32- 63]: 4782034
[ 64- 127]: 9807972
[ 128- 255]: 1673883
[ 256- 511]: 1454664
[ 512- 1023]: 785357
[ 1024- 2047]: 13169347
Protocol Breakdown
![[protocol breakdown chart]](201010101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31673257 (100.00%) 21177761363 (100.00%) 668.63
ip 31465387 ( 99.34%) 21074371238 ( 99.51%) 669.76
tcp 18967749 ( 59.89%) 13998209242 ( 66.10%) 738.00
http(s) 8832312 ( 27.89%) 10788335314 ( 50.94%) 1221.46
http(c) 5399284 ( 17.05%) 572445896 ( 2.70%) 106.02
squid 321241 ( 1.01%) 129564456 ( 0.61%) 403.32
smtp 224173 ( 0.71%) 39646667 ( 0.19%) 176.86
ftp 11984 ( 0.04%) 1128820 ( 0.01%) 94.19
pop3 6420 ( 0.02%) 3867149 ( 0.02%) 602.36
imap 2379 ( 0.01%) 828060 ( 0.00%) 348.07
telnet 1308 ( 0.00%) 89246 ( 0.00%) 68.23
ssh 57451 ( 0.18%) 8287632 ( 0.04%) 144.26
dns 5336 ( 0.02%) 441960 ( 0.00%) 82.83
bgp 292 ( 0.00%) 59527 ( 0.00%) 203.86
napster 56 ( 0.00%) 4900 ( 0.00%) 87.50
realaud 79 ( 0.00%) 13912 ( 0.00%) 176.10
rtsp 12438 ( 0.04%) 15223150 ( 0.07%) 1223.92
icecast 11380 ( 0.04%) 1177509 ( 0.01%) 103.47
hotline 12 ( 0.00%) 856 ( 0.00%) 71.33
other 4081602 ( 12.89%) 2437094068 ( 11.51%) 597.09
udp 7990521 ( 25.23%) 3881956167 ( 18.33%) 485.82
dns 993816 ( 3.14%) 140152619 ( 0.66%) 141.02
realaud 13 ( 0.00%) 2267 ( 0.00%) 174.38
halflif 180 ( 0.00%) 56643 ( 0.00%) 314.68
starcra 39 ( 0.00%) 6884 ( 0.00%) 176.51
everque 562 ( 0.00%) 193366 ( 0.00%) 344.07
unreal 20 ( 0.00%) 3876 ( 0.00%) 193.80
quake 16 ( 0.00%) 1967 ( 0.00%) 122.94
cuseeme 8 ( 0.00%) 1358 ( 0.00%) 169.75
other 6993825 ( 22.08%) 3740698112 ( 17.66%) 534.86
icmp 487094 ( 1.54%) 114662351 ( 0.54%) 235.40
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 1251 ( 0.00%) 231890 ( 0.00%) 185.36
ip6 4008545 ( 12.66%) 3077210066 ( 14.53%) 767.66
other 10047 ( 0.03%) 2082802 ( 0.01%) 207.31
frag 5266 ( 0.02%) 2836896 ( 0.01%) 538.72
ip6 207870 ( 0.66%) 103390125 ( 0.49%) 497.38
tcp6 147105 ( 0.46%) 86520583 ( 0.41%) 588.16
http(s) 6408 ( 0.02%) 6949013 ( 0.03%) 1084.43
http(c) 18732 ( 0.06%) 1697453 ( 0.01%) 90.62
smtp 1979 ( 0.01%) 187173 ( 0.00%) 94.58
ftp 94 ( 0.00%) 8357 ( 0.00%) 88.90
dns 41 ( 0.00%) 11818 ( 0.00%) 288.24
bgp 91 ( 0.00%) 15668 ( 0.00%) 172.18
other 119760 ( 0.38%) 77651101 ( 0.37%) 648.39
udp6 49464 ( 0.16%) 14715487 ( 0.07%) 297.50
dns 43887 ( 0.14%) 13321012 ( 0.06%) 303.53
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 5576 ( 0.02%) 1394370 ( 0.01%) 250.07
icmp6 10722 ( 0.03%) 1739435 ( 0.01%) 162.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 549 ( 0.00%) 410540 ( 0.00%) 747.80
tcpdump file: 201010101400.dump.gz (810.91 MB)