Traffic Trace Info
DumpFile: 201010121400.dump
FileSize: 3107.39MB
Id: 201010121400
StartTime: Tue Oct 12 14:00:01 2010
EndTime: Tue Oct 12 14:15:01 2010
TotalTime: 899.78 seconds
TotalCapSize: -1637.62MB CapLen: 96 bytes
# of packets: 42533095 (27613.49MB)
AvgRate: 257.44Mbps stddev:25.78M
IP flow (unique src/dst pair) Information
# of flows: 1513635 (avg. 28.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.4% 1.4% 1.4% 1.4% 1.1% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 709108
Top 10 bandwidth usage (bytes/total in %):
12.4% 9.6% 4.6% 3.7% 2.8% 2.6% 2.5% 1.8% 1.6% 1.6%
# of IPv6 addresses: 4257
Top 10 bandwidth usage (bytes/total in %):
25.1% 22.4% 20.7% 19.2% 13.3% 13.3% 11.0% 10.2% 6.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010121400.pktlen.png)
detailed numbers
[ 32- 63]: 7118989
[ 64- 127]: 12346567
[ 128- 255]: 2259800
[ 256- 511]: 1749781
[ 512- 1023]: 1145065
[ 1024- 2047]: 17912893
Protocol Breakdown
![[protocol breakdown chart]](201010121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42533095 (100.00%) 28954840475 (100.00%) 680.76
ip 42021508 ( 98.80%) 28814121968 ( 99.51%) 685.70
tcp 28540575 ( 67.10%) 20913654192 ( 72.23%) 732.77
http(s) 13318498 ( 31.31%) 16486069621 ( 56.94%) 1237.83
http(c) 9713916 ( 22.84%) 1432099773 ( 4.95%) 147.43
squid 440971 ( 1.04%) 244316148 ( 0.84%) 554.04
smtp 267409 ( 0.63%) 72206444 ( 0.25%) 270.02
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 38719 ( 0.09%) 3497170 ( 0.01%) 90.32
pop3 24174 ( 0.06%) 9203718 ( 0.03%) 380.73
imap 2395 ( 0.01%) 698840 ( 0.00%) 291.79
telnet 1044 ( 0.00%) 70450 ( 0.00%) 67.48
ssh 681930 ( 1.60%) 116664429 ( 0.40%) 171.08
dns 7127 ( 0.02%) 551935 ( 0.00%) 77.44
bgp 321 ( 0.00%) 77092 ( 0.00%) 240.16
napster 121 ( 0.00%) 12009 ( 0.00%) 99.25
realaud 359 ( 0.00%) 69903 ( 0.00%) 194.72
rtsp 39270 ( 0.09%) 42247026 ( 0.15%) 1075.81
icecast 30378 ( 0.07%) 20085641 ( 0.07%) 661.19
hotline 14 ( 0.00%) 2042 ( 0.00%) 145.86
other 3973917 ( 9.34%) 2485781217 ( 8.59%) 625.52
udp 8309543 ( 19.54%) 4179578614 ( 14.43%) 502.99
dns 1343592 ( 3.16%) 194548807 ( 0.67%) 144.80
realaud 13 ( 0.00%) 1677 ( 0.00%) 129.00
halflif 201 ( 0.00%) 70117 ( 0.00%) 348.84
starcra 276 ( 0.00%) 28346 ( 0.00%) 102.70
everque 28339 ( 0.07%) 11428990 ( 0.04%) 403.30
unreal 23 ( 0.00%) 3299 ( 0.00%) 143.43
quake 69 ( 0.00%) 6584 ( 0.00%) 95.42
cuseeme 3 ( 0.00%) 478 ( 0.00%) 159.33
other 6933291 ( 16.30%) 3972818487 ( 13.72%) 573.01
icmp 499318 ( 1.17%) 115772228 ( 0.40%) 231.86
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5647 ( 0.01%) 892490 ( 0.00%) 158.05
ip6 4649544 ( 10.93%) 3601009112 ( 12.44%) 774.49
other 16701 ( 0.04%) 3196612 ( 0.01%) 191.40
frag 19254 ( 0.05%) 14590489 ( 0.05%) 757.79
ip6 511587 ( 1.20%) 140718507 ( 0.49%) 275.06
tcp6 433046 ( 1.02%) 119382170 ( 0.41%) 275.68
http(s) 21052 ( 0.05%) 20599302 ( 0.07%) 978.50
http(c) 40164 ( 0.09%) 3639791 ( 0.01%) 90.62
smtp 1082 ( 0.00%) 151887 ( 0.00%) 140.38
ftp 88 ( 0.00%) 7754 ( 0.00%) 88.11
dns 77 ( 0.00%) 15982 ( 0.00%) 207.56
bgp 93 ( 0.00%) 15763 ( 0.00%) 169.49
other 370490 ( 0.87%) 94951691 ( 0.33%) 256.29
udp6 64735 ( 0.15%) 18929055 ( 0.07%) 292.41
dns 57736 ( 0.14%) 16824985 ( 0.06%) 291.41
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
other 6998 ( 0.02%) 2103961 ( 0.01%) 300.65
icmp6 13439 ( 0.03%) 2120526 ( 0.01%) 157.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 337 ( 0.00%) 282676 ( 0.00%) 838.80
tcpdump file: 201010121400.dump.gz (1100.39 MB)