Traffic Trace Info
DumpFile: 201010111400.dump
FileSize: 2626.57MB
Id: 201010111400
StartTime: Mon Oct 11 14:00:01 2010
EndTime: Mon Oct 11 14:15:01 2010
TotalTime: 900.41 seconds
TotalCapSize: -2021.19MB CapLen: 96 bytes
# of packets: 36159804 (24346.18MB)
AvgRate: 226.78Mbps stddev:26.64M
IP flow (unique src/dst pair) Information
# of flows: 1374056 (avg. 26.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.3% 1.9% 1.7% 1.1% 1.1% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 546351
Top 10 bandwidth usage (bytes/total in %):
10.4% 10.3% 5.5% 4.8% 4.4% 4.4% 3.9% 3.4% 3.4% 2.5%
# of IPv6 addresses: 3845
Top 10 bandwidth usage (bytes/total in %):
42.9% 29.2% 17.1% 14.2% 13.7% 13.4% 11.4% 8.2% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010111400.pktlen.png)
detailed numbers
[ 32- 63]: 5247108
[ 64- 127]: 11014899
[ 128- 255]: 1622749
[ 256- 511]: 1390867
[ 512- 1023]: 765963
[ 1024- 2047]: 16118218
Protocol Breakdown
![[protocol breakdown chart]](201010111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36159804 (100.00%) 25528822914 (100.00%) 706.00
ip 35936317 ( 99.38%) 25419108941 ( 99.57%) 707.34
tcp 23709251 ( 65.57%) 18643930598 ( 73.03%) 786.36
http(s) 11596880 ( 32.07%) 14405273182 ( 56.43%) 1242.17
http(c) 7264402 ( 20.09%) 773753819 ( 3.03%) 106.51
squid 232174 ( 0.64%) 88499922 ( 0.35%) 381.18
smtp 119355 ( 0.33%) 55262723 ( 0.22%) 463.01
ftp 1186931 ( 3.28%) 1129003732 ( 4.42%) 951.20
pop3 6683 ( 0.02%) 2711656 ( 0.01%) 405.75
imap 1961 ( 0.01%) 435642 ( 0.00%) 222.15
telnet 366 ( 0.00%) 26123 ( 0.00%) 71.37
ssh 32047 ( 0.09%) 4852324 ( 0.02%) 151.41
dns 6326 ( 0.02%) 496383 ( 0.00%) 78.47
bgp 301 ( 0.00%) 69074 ( 0.00%) 229.48
napster 18 ( 0.00%) 4890 ( 0.00%) 271.67
realaud 119 ( 0.00%) 20318 ( 0.00%) 170.74
rtsp 39297 ( 0.11%) 40813104 ( 0.16%) 1038.58
icecast 3030 ( 0.01%) 2692872 ( 0.01%) 888.74
other 3219358 ( 8.90%) 2140014654 ( 8.38%) 664.73
udp 8050263 ( 22.26%) 3994380655 ( 15.65%) 496.18
dns 1030567 ( 2.85%) 143302930 ( 0.56%) 139.05
realaud 12 ( 0.00%) 4318 ( 0.00%) 359.83
halflif 27 ( 0.00%) 1928 ( 0.00%) 71.41
starcra 13 ( 0.00%) 2134 ( 0.00%) 164.15
everque 303 ( 0.00%) 56451 ( 0.00%) 186.31
unreal 15 ( 0.00%) 2221 ( 0.00%) 148.07
quake 23 ( 0.00%) 2179 ( 0.00%) 94.74
cuseeme 4 ( 0.00%) 350 ( 0.00%) 87.50
other 7016809 ( 19.40%) 3850095931 ( 15.08%) 548.70
icmp 462078 ( 1.28%) 96146395 ( 0.38%) 208.07
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 1020 ( 0.00%) 144824 ( 0.00%) 141.98
ip6 3703613 ( 10.24%) 2682581183 ( 10.51%) 724.31
other 9913 ( 0.03%) 1906676 ( 0.01%) 192.34
frag 6480 ( 0.02%) 3783616 ( 0.01%) 583.89
ip6 223487 ( 0.62%) 109713973 ( 0.43%) 490.92
tcp6 164832 ( 0.46%) 93576233 ( 0.37%) 567.71
http(s) 30379 ( 0.08%) 32643438 ( 0.13%) 1074.54
http(c) 29956 ( 0.08%) 2659381 ( 0.01%) 88.78
smtp 563 ( 0.00%) 127656 ( 0.00%) 226.74
ftp 91 ( 0.00%) 8111 ( 0.00%) 89.13
dns 122 ( 0.00%) 28981 ( 0.00%) 237.55
bgp 94 ( 0.00%) 19868 ( 0.00%) 211.36
other 103627 ( 0.29%) 58088798 ( 0.23%) 560.56
udp6 48230 ( 0.13%) 14257295 ( 0.06%) 295.61
dns 45228 ( 0.13%) 13699367 ( 0.05%) 302.90
other 3002 ( 0.01%) 557928 ( 0.00%) 185.85
icmp6 10210 ( 0.03%) 1698438 ( 0.01%) 166.35
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 185 ( 0.00%) 177927 ( 0.00%) 961.77
tcpdump file: 201010111400.dump.gz (923.58 MB)