Traffic Trace Info
DumpFile: 201010221400.dump
FileSize: 3324.50MB
Id: 201010221400
StartTime: Fri Oct 22 14:00:01 2010
EndTime: Fri Oct 22 14:15:00 2010
TotalTime: 899.68 seconds
TotalCapSize: -1471.87MB CapLen: 96 bytes
# of packets: 45898823 (32934.69MB)
AvgRate: 307.12Mbps stddev:24.55M
IP flow (unique src/dst pair) Information
# of flows: 959851 (avg. 47.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 2.7% 2.3% 2.2% 1.6% 1.5% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 523188
Top 10 bandwidth usage (bytes/total in %):
8.3% 7.6% 6.9% 6.9% 6.8% 3.9% 2.9% 2.7% 2.6% 2.4%
# of IPv6 addresses: 3701
Top 10 bandwidth usage (bytes/total in %):
32.4% 21.0% 21.0% 8.3% 4.2% 4.2% 3.5% 3.5% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010221400.pktlen.png)
detailed numbers
[ 32- 63]: 7656984
[ 64- 127]: 11537978
[ 128- 255]: 2101200
[ 256- 511]: 1552141
[ 512- 1023]: 1358917
[ 1024- 2047]: 21691603
Protocol Breakdown
![[protocol breakdown chart]](201010221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45898823 (100.00%) 34534523390 (100.00%) 752.41
ip 45724395 ( 99.62%) 34475634208 ( 99.83%) 753.99
tcp 34178335 ( 74.46%) 27809347010 ( 80.53%) 813.65
http(s) 14914119 ( 32.49%) 19768084031 ( 57.24%) 1325.46
http(c) 8964921 ( 19.53%) 1010066690 ( 2.92%) 112.67
squid 199140 ( 0.43%) 90222714 ( 0.26%) 453.06
smtp 192013 ( 0.42%) 63730456 ( 0.18%) 331.91
ftp 16722 ( 0.04%) 1900290 ( 0.01%) 113.64
pop3 11644 ( 0.03%) 7351381 ( 0.02%) 631.34
imap 4850 ( 0.01%) 2150388 ( 0.01%) 443.38
telnet 330 ( 0.00%) 23496 ( 0.00%) 71.20
ssh 2023063 ( 4.41%) 314875110 ( 0.91%) 155.64
dns 9222 ( 0.02%) 903046 ( 0.00%) 97.92
bgp 391 ( 0.00%) 144854 ( 0.00%) 370.47
napster 2522 ( 0.01%) 169104 ( 0.00%) 67.05
realaud 9 ( 0.00%) 568 ( 0.00%) 63.11
rtsp 62672 ( 0.14%) 56964904 ( 0.16%) 908.94
icecast 1829 ( 0.00%) 281486 ( 0.00%) 153.90
hotline 7 ( 0.00%) 515 ( 0.00%) 73.57
other 7774872 ( 16.94%) 6492477437 ( 18.80%) 835.06
udp 7148724 ( 15.57%) 3630253525 ( 10.51%) 507.82
dns 1081802 ( 2.36%) 149279941 ( 0.43%) 137.99
realaud 67 ( 0.00%) 5680 ( 0.00%) 84.78
halflif 322 ( 0.00%) 199281 ( 0.00%) 618.89
starcra 56 ( 0.00%) 7529 ( 0.00%) 134.45
everque 992 ( 0.00%) 178641 ( 0.00%) 180.08
unreal 4 ( 0.00%) 371 ( 0.00%) 92.75
quake 15 ( 0.00%) 2171 ( 0.00%) 144.73
cuseeme 6 ( 0.00%) 692 ( 0.00%) 115.33
other 6065352 ( 13.21%) 3480503278 ( 10.08%) 573.83
icmp 514347 ( 1.12%) 113524660 ( 0.33%) 220.72
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 1266 ( 0.00%) 240484 ( 0.00%) 189.96
ip6 3865029 ( 8.42%) 2919407080 ( 8.45%) 755.34
other 16515 ( 0.04%) 2842839 ( 0.01%) 172.14
frag 792 ( 0.00%) 841795 ( 0.00%) 1062.87
ip6 174428 ( 0.38%) 58889182 ( 0.17%) 337.61
tcp6 97278 ( 0.21%) 31804983 ( 0.09%) 326.95
http(s) 10795 ( 0.02%) 14209969 ( 0.04%) 1316.35
http(c) 34509 ( 0.08%) 2950206 ( 0.01%) 85.49
smtp 901 ( 0.00%) 152837 ( 0.00%) 169.63
ftp 70 ( 0.00%) 6239 ( 0.00%) 89.13
ssh 39 ( 0.00%) 11826 ( 0.00%) 303.23
dns 82 ( 0.00%) 18925 ( 0.00%) 230.79
bgp 93 ( 0.00%) 23821 ( 0.00%) 256.14
other 50789 ( 0.11%) 14431160 ( 0.04%) 284.14
udp6 47191 ( 0.10%) 11570086 ( 0.03%) 245.18
dns 40535 ( 0.09%) 10657786 ( 0.03%) 262.93
rip 2 ( 0.00%) 154 ( 0.00%) 77.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
other 6653 ( 0.01%) 912041 ( 0.00%) 137.09
icmp6 10068 ( 0.02%) 1501743 ( 0.00%) 149.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19861 ( 0.04%) 14008290 ( 0.04%) 705.32
tcpdump file: 201010221400.dump.gz (1146.65 MB)