Traffic Trace Info
DumpFile: 201010131400.dump
FileSize: 2895.87MB
Id: 201010131400
StartTime: Wed Oct 13 14:00:01 2010
EndTime: Wed Oct 13 14:15:01 2010
TotalTime: 899.98 seconds
TotalCapSize: -1811.12MB CapLen: 96 bytes
# of packets: 40041083 (25819.13MB)
AvgRate: 240.69Mbps stddev:28.84M
IP flow (unique src/dst pair) Information
# of flows: 1472579 (avg. 27.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.9% 1.8% 1.2% 1.2% 1.2% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 710440
Top 10 bandwidth usage (bytes/total in %):
11.8% 11.7% 6.2% 3.8% 2.8% 2.8% 2.8% 2.4% 2.0% 1.8%
# of IPv6 addresses: 3988
Top 10 bandwidth usage (bytes/total in %):
31.4% 30.7% 22.8% 18.9% 10.7% 5.2% 5.2% 2.6% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010131400.pktlen.png)
detailed numbers
[ 32- 63]: 7384823
[ 64- 127]: 11197692
[ 128- 255]: 1956561
[ 256- 511]: 1614132
[ 512- 1023]: 994618
[ 1024- 2047]: 16893257
Protocol Breakdown
![[protocol breakdown chart]](201010131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40041083 (100.00%) 27073314866 (100.00%) 676.14
ip 39868317 ( 99.57%) 26989509008 ( 99.69%) 676.97
tcp 27035698 ( 67.52%) 19422042385 ( 71.74%) 718.39
http(s) 12537539 ( 31.31%) 15368872204 ( 56.77%) 1225.83
http(c) 9287910 ( 23.20%) 1423395626 ( 5.26%) 153.25
squid 235857 ( 0.59%) 111444574 ( 0.41%) 472.51
smtp 311769 ( 0.78%) 168789662 ( 0.62%) 541.39
ftp 20133 ( 0.05%) 1755704 ( 0.01%) 87.21
pop3 48934 ( 0.12%) 23484084 ( 0.09%) 479.91
imap 4224 ( 0.01%) 1166538 ( 0.00%) 276.17
telnet 439 ( 0.00%) 34772 ( 0.00%) 79.21
ssh 690540 ( 1.72%) 95894644 ( 0.35%) 138.87
dns 6627 ( 0.02%) 545081 ( 0.00%) 82.25
bgp 671 ( 0.00%) 377172 ( 0.00%) 562.10
napster 38 ( 0.00%) 4690 ( 0.00%) 123.42
realaud 767 ( 0.00%) 343373 ( 0.00%) 447.68
rtsp 27521 ( 0.07%) 30862387 ( 0.11%) 1121.41
icecast 8125 ( 0.02%) 2648182 ( 0.01%) 325.93
hotline 270 ( 0.00%) 39723 ( 0.00%) 147.12
other 3854329 ( 9.63%) 2192383669 ( 8.10%) 568.81
udp 8219310 ( 20.53%) 4223945959 ( 15.60%) 513.91
dns 1397601 ( 3.49%) 193580881 ( 0.72%) 138.51
rip 86 ( 0.00%) 57958 ( 0.00%) 673.93
realaud 119 ( 0.00%) 29475 ( 0.00%) 247.69
halflif 47 ( 0.00%) 5782 ( 0.00%) 123.02
starcra 28 ( 0.00%) 3585 ( 0.00%) 128.04
everque 8271 ( 0.02%) 930196 ( 0.00%) 112.46
unreal 26 ( 0.00%) 3769 ( 0.00%) 144.96
quake 29 ( 0.00%) 4034 ( 0.00%) 139.10
cuseeme 5 ( 0.00%) 412 ( 0.00%) 82.40
other 6802377 ( 16.99%) 4027039712 ( 14.87%) 592.00
icmp 462578 ( 1.16%) 109834342 ( 0.41%) 237.44
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 5414 ( 0.01%) 802356 ( 0.00%) 148.20
ip6 4127749 ( 10.31%) 3228577482 ( 11.93%) 782.16
other 17389 ( 0.04%) 4287874 ( 0.02%) 246.59
frag 56289 ( 0.14%) 40363903 ( 0.15%) 717.08
ip6 172766 ( 0.43%) 83805858 ( 0.31%) 485.08
tcp6 99874 ( 0.25%) 64035595 ( 0.24%) 641.16
http(s) 6956 ( 0.02%) 8551959 ( 0.03%) 1229.44
http(c) 11590 ( 0.03%) 1122344 ( 0.00%) 96.84
smtp 887 ( 0.00%) 168157 ( 0.00%) 189.58
ftp 126 ( 0.00%) 11255 ( 0.00%) 89.33
ssh 34 ( 0.00%) 9612 ( 0.00%) 282.71
dns 95 ( 0.00%) 22533 ( 0.00%) 237.19
bgp 91 ( 0.00%) 15508 ( 0.00%) 170.42
other 80095 ( 0.20%) 54134227 ( 0.20%) 675.88
udp6 59778 ( 0.15%) 17309568 ( 0.06%) 289.56
dns 56077 ( 0.14%) 16635448 ( 0.06%) 296.65
realaud 2 ( 0.00%) 208 ( 0.00%) 104.00
other 3699 ( 0.01%) 673912 ( 0.00%) 182.19
icmp6 12803 ( 0.03%) 2195569 ( 0.01%) 171.49
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 280 ( 0.00%) 260910 ( 0.00%) 931.82
tcpdump file: 201010131400.dump.gz (1027.57 MB)