Traffic Trace Info
DumpFile: 201010151400.dump
FileSize: 2588.58MB
Id: 201010151400
StartTime: Fri Oct 15 14:00:01 2010
EndTime: Fri Oct 15 14:15:00 2010
TotalTime: 899.29 seconds
TotalCapSize: 2037.28MB CapLen: 96 bytes
# of packets: 36129432 (24357.37MB)
AvgRate: 227.22Mbps stddev:27.67M
IP flow (unique src/dst pair) Information
# of flows: 1146237 (avg. 31.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.5% 1.1% 1.1% 1.1% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 674622
Top 10 bandwidth usage (bytes/total in %):
13.0% 8.3% 7.6% 3.3% 2.7% 2.3% 1.7% 1.7% 1.6% 1.6%
# of IPv6 addresses: 3845
Top 10 bandwidth usage (bytes/total in %):
46.6% 42.2% 22.4% 21.9% 10.3% 8.8% 2.2% 2.1% 2.1% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010151400.pktlen.png)
detailed numbers
[ 32- 63]: 6256513
[ 64- 127]: 9858545
[ 128- 255]: 1547058
[ 256- 511]: 1578552
[ 512- 1023]: 1012028
[ 1024- 2047]: 15876736
Protocol Breakdown
![[protocol breakdown chart]](201010151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36129432 (100.00%) 25540554212 (100.00%) 706.92
ip 35954064 ( 99.51%) 25437758150 ( 99.60%) 707.51
tcp 24397296 ( 67.53%) 18767722165 ( 73.48%) 769.25
http(s) 11083480 ( 30.68%) 14591419095 ( 57.13%) 1316.50
http(c) 8244966 ( 22.82%) 1460004741 ( 5.72%) 177.08
squid 237895 ( 0.66%) 108741532 ( 0.43%) 457.10
smtp 319400 ( 0.88%) 145689016 ( 0.57%) 456.13
ftp 12940 ( 0.04%) 1186099 ( 0.00%) 91.66
pop3 22738 ( 0.06%) 12189134 ( 0.05%) 536.07
imap 11492 ( 0.03%) 2640828 ( 0.01%) 229.80
telnet 399 ( 0.00%) 30418 ( 0.00%) 76.24
ssh 413950 ( 1.15%) 64161895 ( 0.25%) 155.00
dns 4360 ( 0.01%) 393818 ( 0.00%) 90.33
bgp 347 ( 0.00%) 103434 ( 0.00%) 298.08
napster 100 ( 0.00%) 11705 ( 0.00%) 117.05
realaud 55 ( 0.00%) 12513 ( 0.00%) 227.51
rtsp 5546 ( 0.02%) 6391243 ( 0.03%) 1152.41
icecast 19370 ( 0.05%) 1565941 ( 0.01%) 80.84
hotline 9 ( 0.00%) 963 ( 0.00%) 107.00
other 4020248 ( 11.13%) 2373179730 ( 9.29%) 590.31
udp 8079853 ( 22.36%) 4537208877 ( 17.76%) 561.55
dns 1365999 ( 3.78%) 178258807 ( 0.70%) 130.50
realaud 17 ( 0.00%) 1672 ( 0.00%) 98.35
halflif 23 ( 0.00%) 2039 ( 0.00%) 88.65
starcra 12 ( 0.00%) 1828 ( 0.00%) 152.33
everque 7545 ( 0.02%) 1072356 ( 0.00%) 142.13
unreal 19 ( 0.00%) 1984 ( 0.00%) 104.42
quake 51 ( 0.00%) 4850 ( 0.00%) 95.10
cuseeme 5 ( 0.00%) 435 ( 0.00%) 87.00
other 6705346 ( 18.56%) 4357545934 ( 17.06%) 649.86
icmp 527449 ( 1.46%) 114401554 ( 0.45%) 216.90
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5829 ( 0.02%) 803654 ( 0.00%) 137.87
ip6 2901773 ( 8.03%) 2008764364 ( 7.86%) 692.25
other 41684 ( 0.12%) 8838816 ( 0.03%) 212.04
frag 5162 ( 0.01%) 3130823 ( 0.01%) 606.51
ip6 175368 ( 0.49%) 102796062 ( 0.40%) 586.17
tcp6 135076 ( 0.37%) 92093951 ( 0.36%) 681.79
http(s) 4039 ( 0.01%) 5102884 ( 0.02%) 1263.40
http(c) 21113 ( 0.06%) 1826818 ( 0.01%) 86.53
smtp 415 ( 0.00%) 113474 ( 0.00%) 273.43
ftp 103 ( 0.00%) 9106 ( 0.00%) 88.41
ssh 1920 ( 0.01%) 2125040 ( 0.01%) 1106.79
dns 51 ( 0.00%) 10896 ( 0.00%) 213.65
bgp 95 ( 0.00%) 20409 ( 0.00%) 214.83
other 107340 ( 0.30%) 82885324 ( 0.32%) 772.18
udp6 30901 ( 0.09%) 8543564 ( 0.03%) 276.48
dns 28988 ( 0.08%) 8204814 ( 0.03%) 283.04
other 1913 ( 0.01%) 338750 ( 0.00%) 177.08
icmp6 8643 ( 0.02%) 1580647 ( 0.01%) 182.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 718 ( 0.00%) 573820 ( 0.00%) 799.19
tcpdump file: 201010151400.dump.gz (918.87 MB)