Traffic Trace Info
DumpFile: 201010161400.dump
FileSize: 2179.64MB
Id: 201010161400
StartTime: Sat Oct 16 14:00:01 2010
EndTime: Sat Oct 16 14:15:01 2010
TotalTime: 900.53 seconds
TotalCapSize: 1715.57MB CapLen: 96 bytes
# of packets: 30412330 (20528.26MB)
AvgRate: 191.24Mbps stddev:27.09M
IP flow (unique src/dst pair) Information
# of flows: 799243 (avg. 38.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.3% 1.7% 1.7% 1.7% 1.5% 1.3% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 453872
Top 10 bandwidth usage (bytes/total in %):
16.9% 11.0% 8.6% 2.8% 2.8% 2.5% 2.4% 2.3% 1.8% 1.8%
# of IPv6 addresses: 3587
Top 10 bandwidth usage (bytes/total in %):
65.4% 65.0% 20.3% 18.9% 2.6% 2.6% 2.1% 2.1% 1.1% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010161400.pktlen.png)
detailed numbers
[ 32- 63]: 3885934
[ 64- 127]: 9155944
[ 128- 255]: 1653603
[ 256- 511]: 1443868
[ 512- 1023]: 772178
[ 1024- 2047]: 13500803
Protocol Breakdown
![[protocol breakdown chart]](201010161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30412330 (100.00%) 21525441927 (100.00%) 707.79
ip 30139075 ( 99.10%) 21320855913 ( 99.05%) 707.42
tcp 16661073 ( 54.78%) 13911948664 ( 64.63%) 835.00
http(s) 7876885 ( 25.90%) 10494351380 ( 48.75%) 1332.30
http(c) 3970975 ( 13.06%) 566118014 ( 2.63%) 142.56
squid 264722 ( 0.87%) 122888425 ( 0.57%) 464.22
smtp 216638 ( 0.71%) 48143973 ( 0.22%) 222.23
ftp 51814 ( 0.17%) 4272596 ( 0.02%) 82.46
pop3 13097 ( 0.04%) 4549953 ( 0.02%) 347.40
imap 2135 ( 0.01%) 786218 ( 0.00%) 368.25
telnet 628 ( 0.00%) 51738 ( 0.00%) 82.39
ssh 1163218 ( 3.82%) 490314319 ( 2.28%) 421.52
dns 4566 ( 0.02%) 419483 ( 0.00%) 91.87
bgp 294 ( 0.00%) 57923 ( 0.00%) 197.02
napster 13 ( 0.00%) 1766 ( 0.00%) 135.85
realaud 10 ( 0.00%) 1042 ( 0.00%) 104.20
rtsp 8487 ( 0.03%) 7458657 ( 0.03%) 878.83
icecast 11795 ( 0.04%) 928142 ( 0.00%) 78.69
hotline 130 ( 0.00%) 8769 ( 0.00%) 67.45
other 3075662 ( 10.11%) 2171596026 ( 10.09%) 706.06
udp 9446472 ( 31.06%) 4922034085 ( 22.87%) 521.04
dns 1779117 ( 5.85%) 199100370 ( 0.92%) 111.91
realaud 2787 ( 0.01%) 169974 ( 0.00%) 60.99
halflif 45 ( 0.00%) 4966 ( 0.00%) 110.36
starcra 127 ( 0.00%) 19025 ( 0.00%) 149.80
everque 212 ( 0.00%) 35211 ( 0.00%) 166.09
unreal 18 ( 0.00%) 1790 ( 0.00%) 99.44
quake 151 ( 0.00%) 15744 ( 0.00%) 104.26
cuseeme 18 ( 0.00%) 1950 ( 0.00%) 108.33
other 7663591 ( 25.20%) 4722429315 ( 21.94%) 616.22
icmp 508934 ( 1.67%) 120298244 ( 0.56%) 236.37
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 2575 ( 0.01%) 331090 ( 0.00%) 128.58
ip6 3505999 ( 11.53%) 2362298153 ( 10.97%) 673.79
other 13842 ( 0.05%) 3926957 ( 0.02%) 283.70
frag 3180 ( 0.01%) 1798994 ( 0.01%) 565.72
ip6 273255 ( 0.90%) 204586014 ( 0.95%) 748.70
tcp6 228666 ( 0.75%) 191551332 ( 0.89%) 837.69
http(s) 27910 ( 0.09%) 40390003 ( 0.19%) 1447.15
http(c) 20394 ( 0.07%) 1663632 ( 0.01%) 81.57
smtp 297 ( 0.00%) 48284 ( 0.00%) 162.57
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
dns 48 ( 0.00%) 10536 ( 0.00%) 219.50
bgp 98 ( 0.00%) 15378 ( 0.00%) 156.92
other 179835 ( 0.59%) 149416005 ( 0.69%) 830.85
udp6 32365 ( 0.11%) 10596086 ( 0.05%) 327.39
dns 21762 ( 0.07%) 5911176 ( 0.03%) 271.63
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 2 ( 0.00%) 219 ( 0.00%) 109.50
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 10599 ( 0.03%) 4684468 ( 0.02%) 441.97
icmp6 11540 ( 0.04%) 1901353 ( 0.01%) 164.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 654 ( 0.00%) 533163 ( 0.00%) 815.23
tcpdump file: 201010161400.dump.gz (767.06 MB)