Traffic Trace Info
DumpFile: 201010141400.dump
FileSize: 3365.89MB
Id: 201010141400
StartTime: Thu Oct 14 14:00:01 2010
EndTime: Thu Oct 14 14:15:00 2010
TotalTime: 899.68 seconds
TotalCapSize: -1438.31MB CapLen: 96 bytes
# of packets: 46412165 (30878.92MB)
AvgRate: 287.94Mbps stddev:28.17M
IP flow (unique src/dst pair) Information
# of flows: 851913 (avg. 54.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.1% 1.6% 1.4% 1.1% 1.1% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 444809
Top 10 bandwidth usage (bytes/total in %):
10.1% 9.0% 5.2% 4.0% 3.5% 3.0% 2.5% 2.3% 2.2% 2.1%
# of IPv6 addresses: 3879
Top 10 bandwidth usage (bytes/total in %):
83.9% 72.5% 12.1% 2.5% 2.5% 1.5% 1.5% 1.4% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010141400.pktlen.png)
detailed numbers
[ 32- 63]: 7870265
[ 64- 127]: 13094807
[ 128- 255]: 2403815
[ 256- 511]: 1654614
[ 512- 1023]: 1294548
[ 1024- 2047]: 20094116
Protocol Breakdown
![[protocol breakdown chart]](201010141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46412165 (100.00%) 32378892413 (100.00%) 697.64
ip 46058351 ( 99.24%) 32036559054 ( 98.94%) 695.56
tcp 32046556 ( 69.05%) 24092832397 ( 74.41%) 751.81
http(s) 13620161 ( 29.35%) 18104046655 ( 55.91%) 1329.21
http(c) 10583802 ( 22.80%) 1608123300 ( 4.97%) 151.94
squid 226294 ( 0.49%) 143568927 ( 0.44%) 634.44
smtp 352062 ( 0.76%) 160312243 ( 0.50%) 455.35
ftp 14082 ( 0.03%) 1242556 ( 0.00%) 88.24
pop3 20231 ( 0.04%) 7294267 ( 0.02%) 360.55
imap 3683 ( 0.01%) 948297 ( 0.00%) 257.48
telnet 200 ( 0.00%) 13331 ( 0.00%) 66.66
ssh 2037907 ( 4.39%) 224409721 ( 0.69%) 110.12
dns 5702 ( 0.01%) 475326 ( 0.00%) 83.36
bgp 327 ( 0.00%) 87004 ( 0.00%) 266.07
napster 66 ( 0.00%) 9921 ( 0.00%) 150.32
realaud 17 ( 0.00%) 2865 ( 0.00%) 168.53
rtsp 88721 ( 0.19%) 98850693 ( 0.31%) 1114.17
icecast 37051 ( 0.08%) 17030117 ( 0.05%) 459.64
hotline 10 ( 0.00%) 964 ( 0.00%) 96.40
other 5056239 ( 10.89%) 3726416144 ( 11.51%) 736.99
udp 9317046 ( 20.07%) 4528637330 ( 13.99%) 486.06
dns 1410111 ( 3.04%) 192692740 ( 0.60%) 136.65
realaud 1006 ( 0.00%) 62045 ( 0.00%) 61.67
halflif 47 ( 0.00%) 3892 ( 0.00%) 82.81
starcra 21 ( 0.00%) 3178 ( 0.00%) 151.33
everque 19218 ( 0.04%) 4291151 ( 0.01%) 223.29
unreal 18 ( 0.00%) 2316 ( 0.00%) 128.67
quake 275 ( 0.00%) 22366 ( 0.00%) 81.33
cuseeme 12 ( 0.00%) 998 ( 0.00%) 83.17
other 7885658 ( 16.99%) 4331431003 ( 13.38%) 549.28
icmp 469969 ( 1.01%) 96972705 ( 0.30%) 206.34
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5794 ( 0.01%) 862684 ( 0.00%) 148.89
ip6 4180684 ( 9.01%) 3309421787 ( 10.22%) 791.60
other 38122 ( 0.08%) 7813431 ( 0.02%) 204.96
frag 2283 ( 0.00%) 1926438 ( 0.01%) 843.82
ip6 353814 ( 0.76%) 342333359 ( 1.06%) 967.55
tcp6 277778 ( 0.60%) 318418343 ( 0.98%) 1146.31
http(s) 9745 ( 0.02%) 9248061 ( 0.03%) 949.01
http(c) 16109 ( 0.03%) 1432159 ( 0.00%) 88.90
smtp 2676 ( 0.01%) 316752 ( 0.00%) 118.37
ftp 101 ( 0.00%) 8958 ( 0.00%) 88.69
dns 92 ( 0.00%) 22441 ( 0.00%) 243.92
bgp 90 ( 0.00%) 21012 ( 0.00%) 233.47
other 248965 ( 0.54%) 307368960 ( 0.95%) 1234.59
udp6 63387 ( 0.14%) 21667339 ( 0.07%) 341.83
dns 57069 ( 0.12%) 16371711 ( 0.05%) 286.88
other 6318 ( 0.01%) 5295628 ( 0.02%) 838.18
icmp6 12373 ( 0.03%) 2021669 ( 0.01%) 163.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 246 ( 0.00%) 221928 ( 0.00%) 902.15
tcpdump file: 201010141400.dump.gz (1173.85 MB)