Traffic Trace Info
DumpFile: 201010201400.dump
FileSize: 3064.05MB
Id: 201010201400
StartTime: Wed Oct 20 14:00:01 2010
EndTime: Wed Oct 20 14:15:01 2010
TotalTime: 900.01 seconds
TotalCapSize: -1681.18MB CapLen: 96 bytes
# of packets: 42547221 (29714.37MB)
AvgRate: 276.95Mbps stddev:28.00M
IP flow (unique src/dst pair) Information
# of flows: 849671 (avg. 50.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.3% 1.3% 1.2% 1.0% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 456978
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.9% 6.0% 6.0% 4.8% 4.0% 4.0% 3.4% 1.9% 1.8%
# of IPv6 addresses: 4013
Top 10 bandwidth usage (bytes/total in %):
36.9% 33.7% 31.7% 17.7% 6.2% 5.3% 3.1% 3.1% 3.1% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010201400.pktlen.png)
detailed numbers
[ 32- 63]: 7082120
[ 64- 127]: 11277481
[ 128- 255]: 2029579
[ 256- 511]: 1508031
[ 512- 1023]: 1013452
[ 1024- 2047]: 19636558
Protocol Breakdown
![[protocol breakdown chart]](201010201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42547221 (100.00%) 31157780071 (100.00%) 732.31
ip 42330792 ( 99.49%) 31033154843 ( 99.60%) 733.11
tcp 29519218 ( 69.38%) 23950239301 ( 76.87%) 811.34
http(s) 13900824 ( 32.67%) 18156920353 ( 58.27%) 1306.18
http(c) 10156290 ( 23.87%) 2134681411 ( 6.85%) 210.18
squid 283258 ( 0.67%) 131902426 ( 0.42%) 465.66
smtp 216250 ( 0.51%) 73015102 ( 0.23%) 337.64
nntp 15 ( 0.00%) 1545 ( 0.00%) 103.00
ftp 47242 ( 0.11%) 3562441 ( 0.01%) 75.41
pop3 10888 ( 0.03%) 7703155 ( 0.02%) 707.49
imap 1728 ( 0.00%) 602182 ( 0.00%) 348.48
telnet 604 ( 0.00%) 40960 ( 0.00%) 67.81
ssh 65705 ( 0.15%) 13268682 ( 0.04%) 201.94
dns 8402 ( 0.02%) 733955 ( 0.00%) 87.35
bgp 333 ( 0.00%) 90619 ( 0.00%) 272.13
napster 18 ( 0.00%) 2970 ( 0.00%) 165.00
realaud 61 ( 0.00%) 10402 ( 0.00%) 170.52
rtsp 16470 ( 0.04%) 16123515 ( 0.05%) 978.96
icecast 1263 ( 0.00%) 633860 ( 0.00%) 501.87
hotline 30 ( 0.00%) 3065 ( 0.00%) 102.17
other 4809836 ( 11.30%) 3410942598 ( 10.95%) 709.16
udp 8423272 ( 19.80%) 4138973959 ( 13.28%) 491.37
dns 1292919 ( 3.04%) 167661566 ( 0.54%) 129.68
rip 3 ( 0.00%) 253 ( 0.00%) 84.33
realaud 12 ( 0.00%) 1988 ( 0.00%) 165.67
halflif 21 ( 0.00%) 2851 ( 0.00%) 135.76
starcra 44 ( 0.00%) 7081 ( 0.00%) 160.93
everque 6860 ( 0.02%) 777486 ( 0.00%) 113.34
unreal 94 ( 0.00%) 15473 ( 0.00%) 164.61
quake 34 ( 0.00%) 4428 ( 0.00%) 130.24
cuseeme 2 ( 0.00%) 182 ( 0.00%) 91.00
other 7122833 ( 16.74%) 3970341013 ( 12.74%) 557.41
icmp 487828 ( 1.15%) 98625002 ( 0.32%) 202.17
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5490 ( 0.01%) 726876 ( 0.00%) 132.40
ip6 3855225 ( 9.06%) 2837464664 ( 9.11%) 736.00
other 39579 ( 0.09%) 7106321 ( 0.02%) 179.55
frag 2390 ( 0.01%) 1974854 ( 0.01%) 826.30
ip6 216429 ( 0.51%) 124625228 ( 0.40%) 575.82
tcp6 160455 ( 0.38%) 107967896 ( 0.35%) 672.89
http(s) 48110 ( 0.11%) 63751052 ( 0.20%) 1325.11
http(c) 47306 ( 0.11%) 4132323 ( 0.01%) 87.35
smtp 797 ( 0.00%) 230527 ( 0.00%) 289.24
ftp 91 ( 0.00%) 8583 ( 0.00%) 94.32
ssh 98 ( 0.00%) 37084 ( 0.00%) 378.41
dns 155 ( 0.00%) 33600 ( 0.00%) 216.77
bgp 95 ( 0.00%) 22574 ( 0.00%) 237.62
other 63803 ( 0.15%) 39752153 ( 0.13%) 623.05
udp6 40420 ( 0.10%) 12618967 ( 0.04%) 312.20
dns 33817 ( 0.08%) 10303911 ( 0.03%) 304.70
other 6603 ( 0.02%) 2315056 ( 0.01%) 350.61
icmp6 12394 ( 0.03%) 1761480 ( 0.01%) 142.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3130 ( 0.01%) 2272805 ( 0.01%) 726.14
tcpdump file: 201010201400.dump.gz (1064.87 MB)