Traffic Trace Info
DumpFile: 201010171400.dump
FileSize: 2332.85MB
Id: 201010171400
StartTime: Sun Oct 17 14:00:01 2010
EndTime: Sun Oct 17 14:15:00 2010
TotalTime: 898.96 seconds
TotalCapSize: 1840.44MB CapLen: 96 bytes
# of packets: 32269487 (21143.26MB)
AvgRate: 197.32Mbps stddev:22.91M
IP flow (unique src/dst pair) Information
# of flows: 1040505 (avg. 31.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.9% 1.8% 1.7% 1.6% 1.2% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 591335
Top 10 bandwidth usage (bytes/total in %):
14.7% 12.9% 8.2% 6.9% 3.4% 3.4% 2.5% 2.1% 2.0% 2.0%
# of IPv6 addresses: 3617
Top 10 bandwidth usage (bytes/total in %):
44.8% 40.2% 9.7% 9.7% 5.3% 4.4% 4.4% 3.8% 3.8% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010171400.pktlen.png)
detailed numbers
[ 32- 63]: 4388152
[ 64- 127]: 9941275
[ 128- 255]: 1883921
[ 256- 511]: 1473910
[ 512- 1023]: 790228
[ 1024- 2047]: 13792001
Protocol Breakdown
![[protocol breakdown chart]](201010171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32269487 (100.00%) 22170312038 (100.00%) 687.04
ip 32123292 ( 99.55%) 22127243853 ( 99.81%) 688.82
tcp 18183557 ( 56.35%) 14618652494 ( 65.94%) 803.95
http(s) 8383225 ( 25.98%) 10732796551 ( 48.41%) 1280.27
http(c) 4158241 ( 12.89%) 525114526 ( 2.37%) 126.28
squid 316626 ( 0.98%) 130123749 ( 0.59%) 410.97
smtp 162221 ( 0.50%) 24072278 ( 0.11%) 148.39
ftp 16751 ( 0.05%) 1476368 ( 0.01%) 88.14
pop3 13714 ( 0.04%) 13922053 ( 0.06%) 1015.17
imap 3795 ( 0.01%) 2124630 ( 0.01%) 559.85
telnet 21606 ( 0.07%) 1579903 ( 0.01%) 73.12
ssh 981650 ( 3.04%) 459716686 ( 2.07%) 468.31
dns 5219 ( 0.02%) 436326 ( 0.00%) 83.60
bgp 320 ( 0.00%) 84911 ( 0.00%) 265.35
napster 26 ( 0.00%) 3231 ( 0.00%) 124.27
rtsp 15982 ( 0.05%) 16060640 ( 0.07%) 1004.92
icecast 1253 ( 0.00%) 577649 ( 0.00%) 461.01
other 4102928 ( 12.71%) 2710562993 ( 12.23%) 660.64
udp 9400296 ( 29.13%) 4463686780 ( 20.13%) 474.85
dns 1224375 ( 3.79%) 146088724 ( 0.66%) 119.32
realaud 15 ( 0.00%) 1844 ( 0.00%) 122.93
halflif 31 ( 0.00%) 2811 ( 0.00%) 90.68
starcra 15 ( 0.00%) 1861 ( 0.00%) 124.07
everque 8230 ( 0.03%) 7171917 ( 0.03%) 871.44
unreal 14 ( 0.00%) 1773 ( 0.00%) 126.64
quake 10 ( 0.00%) 1318 ( 0.00%) 131.80
cuseeme 10 ( 0.00%) 864 ( 0.00%) 86.40
other 8167471 ( 25.31%) 4310304436 ( 19.44%) 527.74
icmp 527775 ( 1.64%) 114196443 ( 0.52%) 216.37
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 1205 ( 0.00%) 171726 ( 0.00%) 142.51
ip6 3998049 ( 12.39%) 2928356988 ( 13.21%) 732.45
other 12231 ( 0.04%) 2160812 ( 0.01%) 176.67
frag 1161 ( 0.00%) 1280466 ( 0.01%) 1102.90
ip6 146195 ( 0.45%) 43068185 ( 0.19%) 294.59
tcp6 112975 ( 0.35%) 35475576 ( 0.16%) 314.01
http(s) 1218 ( 0.00%) 1117737 ( 0.01%) 917.68
http(c) 19738 ( 0.06%) 1783215 ( 0.01%) 90.34
smtp 155 ( 0.00%) 36935 ( 0.00%) 238.29
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 63 ( 0.00%) 11941 ( 0.00%) 189.54
bgp 93 ( 0.00%) 19567 ( 0.00%) 210.40
other 91648 ( 0.28%) 32500810 ( 0.15%) 354.63
udp6 22908 ( 0.07%) 5921551 ( 0.03%) 258.49
dns 18952 ( 0.06%) 5024529 ( 0.02%) 265.12
everque 1 ( 0.00%) 114 ( 0.00%) 114.00
other 3955 ( 0.01%) 896908 ( 0.00%) 226.78
icmp6 10110 ( 0.03%) 1505523 ( 0.01%) 148.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 172 ( 0.00%) 161455 ( 0.00%) 938.69
tcpdump file: 201010171400.dump.gz (803.63 MB)