Traffic Trace Info
DumpFile: 201010231400.dump
FileSize: 2559.49MB
Id: 201010231400
StartTime: Sat Oct 23 14:00:01 2010
EndTime: Sat Oct 23 14:15:01 2010
TotalTime: 900.00 seconds
TotalCapSize: 2025.89MB CapLen: 96 bytes
# of packets: 34969701 (25442.74MB)
AvgRate: 237.17Mbps stddev:29.19M
IP flow (unique src/dst pair) Information
# of flows: 918953 (avg. 38.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.7% 1.8% 1.7% 1.6% 1.5% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 552984
Top 10 bandwidth usage (bytes/total in %):
13.0% 11.5% 8.8% 5.2% 4.2% 3.0% 3.0% 2.9% 2.7% 2.2%
# of IPv6 addresses: 3403
Top 10 bandwidth usage (bytes/total in %):
88.7% 87.7% 2.9% 2.9% 1.4% 1.3% 1.2% 1.2% 1.0% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010231400.pktlen.png)
detailed numbers
[ 32- 63]: 4634899
[ 64- 127]: 9583378
[ 128- 255]: 1500221
[ 256- 511]: 1521776
[ 512- 1023]: 832138
[ 1024- 2047]: 16897289
Protocol Breakdown
![[protocol breakdown chart]](201010231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34969701 (100.00%) 26678645264 (100.00%) 762.91
ip 34540856 ( 98.77%) 26221541754 ( 98.29%) 759.15
tcp 22078259 ( 63.14%) 18917557906 ( 70.91%) 856.84
http(s) 10693361 ( 30.58%) 14316927873 ( 53.66%) 1338.86
http(c) 6369534 ( 18.21%) 989126767 ( 3.71%) 155.29
squid 176700 ( 0.51%) 75895441 ( 0.28%) 429.52
smtp 312625 ( 0.89%) 199636173 ( 0.75%) 638.58
ftp 79965 ( 0.23%) 7470218 ( 0.03%) 93.42
pop3 2785 ( 0.01%) 1577121 ( 0.01%) 566.29
imap 1250 ( 0.00%) 185650 ( 0.00%) 148.52
telnet 458 ( 0.00%) 30542 ( 0.00%) 66.69
ssh 263046 ( 0.75%) 39421830 ( 0.15%) 149.87
dns 7420 ( 0.02%) 627845 ( 0.00%) 84.62
bgp 314 ( 0.00%) 69975 ( 0.00%) 222.85
napster 154 ( 0.00%) 11085 ( 0.00%) 71.98
realaud 41 ( 0.00%) 4071 ( 0.00%) 99.29
rtsp 331 ( 0.00%) 69383 ( 0.00%) 209.62
icecast 727 ( 0.00%) 203381 ( 0.00%) 279.75
hotline 332 ( 0.00%) 21057 ( 0.00%) 63.42
other 4169212 ( 11.92%) 3286279254 ( 12.32%) 788.23
udp 7842162 ( 22.43%) 4150231204 ( 15.56%) 529.22
dns 901946 ( 2.58%) 121310852 ( 0.45%) 134.50
realaud 1826 ( 0.01%) 110889 ( 0.00%) 60.73
halflif 28 ( 0.00%) 2908 ( 0.00%) 103.86
starcra 35 ( 0.00%) 4433 ( 0.00%) 126.66
everque 231 ( 0.00%) 95521 ( 0.00%) 413.51
unreal 74 ( 0.00%) 5978 ( 0.00%) 80.78
quake 19 ( 0.00%) 4523 ( 0.00%) 238.05
cuseeme 2 ( 0.00%) 181 ( 0.00%) 90.50
other 6937898 ( 19.84%) 4028631447 ( 15.10%) 580.67
icmp 539612 ( 1.54%) 119482299 ( 0.45%) 221.42
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 1554 ( 0.00%) 241364 ( 0.00%) 155.32
ip6 4060463 ( 11.61%) 3030178047 ( 11.36%) 746.26
other 18626 ( 0.05%) 3832214 ( 0.01%) 205.75
frag 1225 ( 0.00%) 1181849 ( 0.00%) 964.77
ip6 428845 ( 1.23%) 457103510 ( 1.71%) 1065.89
tcp6 384387 ( 1.10%) 442632543 ( 1.66%) 1151.53
http(s) 3686 ( 0.01%) 4811046 ( 0.02%) 1305.22
http(c) 19067 ( 0.05%) 1799014 ( 0.01%) 94.35
smtp 465 ( 0.00%) 49462 ( 0.00%) 106.37
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 119 ( 0.00%) 21811 ( 0.00%) 183.29
bgp 95 ( 0.00%) 23788 ( 0.00%) 250.40
other 360892 ( 1.03%) 435921721 ( 1.63%) 1207.90
udp6 26275 ( 0.08%) 6974540 ( 0.03%) 265.44
dns 22231 ( 0.06%) 6210127 ( 0.02%) 279.35
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
other 4043 ( 0.01%) 764306 ( 0.00%) 189.04
icmp6 9626 ( 0.03%) 1441197 ( 0.01%) 149.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8527 ( 0.02%) 6051150 ( 0.02%) 709.65
tcpdump file: 201010231400.dump.gz (873.02 MB)