Traffic Trace Info
DumpFile: 201010191400.dump
FileSize: 2766.86MB
Id: 201010191400
StartTime: Tue Oct 19 14:00:01 2010
EndTime: Tue Oct 19 14:15:01 2010
TotalTime: 900.19 seconds
TotalCapSize: -1911.56MB CapLen: 96 bytes
# of packets: 38168472 (26999.16MB)
AvgRate: 251.59Mbps stddev:26.98M
IP flow (unique src/dst pair) Information
# of flows: 882582 (avg. 43.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.3% 1.3% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 475598
Top 10 bandwidth usage (bytes/total in %):
8.6% 8.6% 6.1% 5.4% 4.4% 3.4% 3.1% 2.1% 2.1% 2.1%
# of IPv6 addresses: 4032
Top 10 bandwidth usage (bytes/total in %):
46.4% 35.2% 19.2% 19.2% 8.7% 2.7% 2.7% 2.7% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010191400.pktlen.png)
detailed numbers
[ 32- 63]: 5969873
[ 64- 127]: 10251380
[ 128- 255]: 1636210
[ 256- 511]: 1443459
[ 512- 1023]: 1088594
[ 1024- 2047]: 17778956
Protocol Breakdown
![[protocol breakdown chart]](201010191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38168472 (100.00%) 28310675091 (100.00%) 741.73
ip 38015506 ( 99.60%) 28233047062 ( 99.73%) 742.67
tcp 26237179 ( 68.74%) 21981622217 ( 77.64%) 837.80
http(s) 13653191 ( 35.77%) 18058474400 ( 63.79%) 1322.66
http(c) 8199623 ( 21.48%) 1105549593 ( 3.91%) 134.83
squid 224450 ( 0.59%) 98393064 ( 0.35%) 438.37
smtp 250589 ( 0.66%) 112232846 ( 0.40%) 447.88
ftp 13051 ( 0.03%) 1301216 ( 0.00%) 99.70
pop3 18175 ( 0.05%) 7653448 ( 0.03%) 421.10
imap 3234 ( 0.01%) 710702 ( 0.00%) 219.76
telnet 912 ( 0.00%) 63404 ( 0.00%) 69.52
ssh 42218 ( 0.11%) 9836354 ( 0.03%) 232.99
dns 6102 ( 0.02%) 578513 ( 0.00%) 94.81
bgp 371 ( 0.00%) 126696 ( 0.00%) 341.50
napster 12 ( 0.00%) 1552 ( 0.00%) 129.33
realaud 165 ( 0.00%) 26301 ( 0.00%) 159.40
rtsp 10700 ( 0.03%) 12611121 ( 0.04%) 1178.61
icecast 11264 ( 0.03%) 8264646 ( 0.03%) 733.72
hotline 11 ( 0.00%) 706 ( 0.00%) 64.18
other 3803109 ( 9.96%) 2565797535 ( 9.06%) 674.66
udp 7834232 ( 20.53%) 3672328317 ( 12.97%) 468.75
dns 1330047 ( 3.48%) 171673658 ( 0.61%) 129.07
realaud 13 ( 0.00%) 1353 ( 0.00%) 104.08
halflif 50 ( 0.00%) 4710 ( 0.00%) 94.20
starcra 60 ( 0.00%) 9729 ( 0.00%) 162.15
everque 34493 ( 0.09%) 7426806 ( 0.03%) 215.31
unreal 11 ( 0.00%) 1773 ( 0.00%) 161.18
quake 160 ( 0.00%) 22232 ( 0.00%) 138.95
cuseeme 16 ( 0.00%) 2019 ( 0.00%) 126.19
other 6465314 ( 16.94%) 3491831515 ( 12.33%) 540.09
icmp 481916 ( 1.26%) 110265470 ( 0.39%) 228.81
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 1855 ( 0.00%) 322378 ( 0.00%) 173.79
ip6 3414149 ( 8.94%) 2453640317 ( 8.67%) 718.67
other 45995 ( 0.12%) 14849643 ( 0.05%) 322.85
frag 22721 ( 0.06%) 16465376 ( 0.06%) 724.68
ip6 152966 ( 0.40%) 77628029 ( 0.27%) 507.49
tcp6 107619 ( 0.28%) 64892677 ( 0.23%) 602.99
http(s) 4228 ( 0.01%) 4373400 ( 0.02%) 1034.39
http(c) 14332 ( 0.04%) 1306085 ( 0.00%) 91.13
smtp 642 ( 0.00%) 146898 ( 0.00%) 228.81
ftp 105 ( 0.00%) 9595 ( 0.00%) 91.38
ssh 34 ( 0.00%) 9916 ( 0.00%) 291.65
dns 137 ( 0.00%) 27550 ( 0.00%) 201.09
bgp 97 ( 0.00%) 20720 ( 0.00%) 213.61
other 88044 ( 0.23%) 58998513 ( 0.21%) 670.10
udp6 33950 ( 0.09%) 10309584 ( 0.04%) 303.67
dns 30251 ( 0.08%) 9574837 ( 0.03%) 316.51
halflif 1 ( 0.00%) 95 ( 0.00%) 95.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 3697 ( 0.01%) 734547 ( 0.00%) 198.69
icmp6 10178 ( 0.03%) 1496860 ( 0.01%) 147.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1189 ( 0.00%) 924828 ( 0.00%) 777.82
tcpdump file: 201010191400.dump.gz (968.53 MB)