Traffic Trace Info
DumpFile: 201010181400.dump
FileSize: 3831.68MB
Id: 201010181400
StartTime: Mon Oct 18 14:00:01 2010
EndTime: Mon Oct 18 14:15:01 2010
TotalTime: 900.07 seconds
TotalCapSize: -1121.68MB CapLen: 96 bytes
# of packets: 56187284 (29806.01MB)
AvgRate: 277.82Mbps stddev:45.77M
IP flow (unique src/dst pair) Information
# of flows: 833674 (avg. 67.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.6% 1.6% 1.4% 1.1% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 444557
Top 10 bandwidth usage (bytes/total in %):
11.5% 11.2% 4.4% 3.5% 2.5% 2.4% 2.3% 2.3% 2.2% 2.1%
# of IPv6 addresses: 3891
Top 10 bandwidth usage (bytes/total in %):
21.1% 18.8% 18.5% 14.0% 13.1% 12.9% 11.6% 11.6% 8.8% 8.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010181400.pktlen.png)
detailed numbers
[ 32- 63]: 19056649
[ 64- 127]: 12609144
[ 128- 255]: 2313799
[ 256- 511]: 1738526
[ 512- 1023]: 1423663
[ 1024- 2047]: 19045503
Protocol Breakdown
![[protocol breakdown chart]](201010181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56187284 (100.00%) 31253867139 (100.00%) 556.24
ip 56020075 ( 99.70%) 31168209292 ( 99.73%) 556.38
tcp 27705397 ( 49.31%) 20289003354 ( 64.92%) 732.31
http(s) 11793373 ( 20.99%) 15211515458 ( 48.67%) 1289.84
http(c) 10199539 ( 18.15%) 2177865028 ( 6.97%) 213.53
squid 323856 ( 0.58%) 100887639 ( 0.32%) 311.52
smtp 256455 ( 0.46%) 74541819 ( 0.24%) 290.66
ftp 12948 ( 0.02%) 1146281 ( 0.00%) 88.53
pop3 20005 ( 0.04%) 8184770 ( 0.03%) 409.14
imap 3339 ( 0.01%) 688316 ( 0.00%) 206.14
telnet 861 ( 0.00%) 62021 ( 0.00%) 72.03
ssh 778036 ( 1.38%) 124447117 ( 0.40%) 159.95
dns 4823 ( 0.01%) 489336 ( 0.00%) 101.46
bgp 297 ( 0.00%) 70704 ( 0.00%) 238.06
napster 60 ( 0.00%) 7433 ( 0.00%) 123.88
realaud 168 ( 0.00%) 12346 ( 0.00%) 73.49
rtsp 15656 ( 0.03%) 14652176 ( 0.05%) 935.88
icecast 4405 ( 0.01%) 790564 ( 0.00%) 179.47
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 4291574 ( 7.64%) 2573642224 ( 8.23%) 599.70
udp 23255707 ( 41.39%) 7191160100 ( 23.01%) 309.22
dns 1279664 ( 2.28%) 167844216 ( 0.54%) 131.16
realaud 25 ( 0.00%) 2435 ( 0.00%) 97.40
halflif 34 ( 0.00%) 3721 ( 0.00%) 109.44
starcra 38 ( 0.00%) 4768 ( 0.00%) 125.47
everque 8191 ( 0.01%) 884693 ( 0.00%) 108.01
unreal 20 ( 0.00%) 2679 ( 0.00%) 133.95
quake 52 ( 0.00%) 5230 ( 0.00%) 100.58
cuseeme 15 ( 0.00%) 2670 ( 0.00%) 178.00
other 21927004 ( 39.02%) 7018492039 ( 22.46%) 320.08
icmp 408950 ( 0.73%) 89021043 ( 0.28%) 217.68
ipip 171 ( 0.00%) 17790 ( 0.00%) 104.04
ipsec 743 ( 0.00%) 101450 ( 0.00%) 136.54
ip6 4638012 ( 8.25%) 3596923724 ( 11.51%) 775.53
other 11095 ( 0.02%) 1981831 ( 0.01%) 178.62
frag 147396 ( 0.26%) 112710541 ( 0.36%) 764.68
ip6 167209 ( 0.30%) 85657847 ( 0.27%) 512.28
tcp6 123218 ( 0.22%) 73930273 ( 0.24%) 600.00
http(s) 5934 ( 0.01%) 6080762 ( 0.02%) 1024.73
http(c) 9975 ( 0.02%) 940658 ( 0.00%) 94.30
squid 12 ( 0.00%) 888 ( 0.00%) 74.00
smtp 527 ( 0.00%) 145513 ( 0.00%) 276.12
ftp 58 ( 0.00%) 5211 ( 0.00%) 89.84
ssh 5670 ( 0.01%) 7503884 ( 0.02%) 1323.44
dns 152 ( 0.00%) 28284 ( 0.00%) 186.08
bgp 92 ( 0.00%) 15340 ( 0.00%) 166.74
icecast 6 ( 0.00%) 444 ( 0.00%) 74.00
other 100792 ( 0.18%) 59209289 ( 0.19%) 587.44
udp6 33106 ( 0.06%) 9787533 ( 0.03%) 295.64
dns 29564 ( 0.05%) 9111161 ( 0.03%) 308.18
other 3542 ( 0.01%) 676372 ( 0.00%) 190.96
icmp6 10353 ( 0.02%) 1510219 ( 0.00%) 145.87
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 503 ( 0.00%) 425878 ( 0.00%) 846.68
tcpdump file: 201010181400.dump.gz (1188.28 MB)