Traffic Trace Info
DumpFile: 201010241400.dump
FileSize: 1716.92MB
Id: 201010241400
StartTime: Sun Oct 24 14:00:01 2010
EndTime: Sun Oct 24 14:15:00 2010
TotalTime: 899.64 seconds
TotalCapSize: 1362.01MB CapLen: 96 bytes
# of packets: 23258787 (16011.77MB)
AvgRate: 149.32Mbps stddev:25.10M
IP flow (unique src/dst pair) Information
# of flows: 648988 (avg. 35.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.5% 2.0% 1.8% 1.8% 1.7% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 390342
Top 10 bandwidth usage (bytes/total in %):
18.8% 16.0% 14.0% 6.8% 3.4% 3.3% 3.0% 2.7% 2.6% 2.5%
# of IPv6 addresses: 3552
Top 10 bandwidth usage (bytes/total in %):
22.5% 22.5% 12.9% 12.9% 8.8% 8.8% 8.7% 7.0% 6.8% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010241400.pktlen.png)
detailed numbers
[ 32- 63]: 2624367
[ 64- 127]: 7034508
[ 128- 255]: 1380645
[ 256- 511]: 1122267
[ 512- 1023]: 603096
[ 1024- 2047]: 10493904
Protocol Breakdown
![[protocol breakdown chart]](201010241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23258787 (100.00%) 16789562884 (100.00%) 721.86
ip 23073308 ( 99.20%) 16731471125 ( 99.65%) 725.14
tcp 11815785 ( 50.80%) 10539669649 ( 62.78%) 892.00
http(s) 6395699 ( 27.50%) 8669305793 ( 51.64%) 1355.49
http(c) 2929908 ( 12.60%) 252717583 ( 1.51%) 86.25
squid 142398 ( 0.61%) 61816633 ( 0.37%) 434.11
smtp 192609 ( 0.83%) 65384991 ( 0.39%) 339.47
ftp 116097 ( 0.50%) 74781432 ( 0.45%) 644.13
pop3 718 ( 0.00%) 214623 ( 0.00%) 298.92
imap 3050 ( 0.01%) 271824 ( 0.00%) 89.12
telnet 1454 ( 0.01%) 98700 ( 0.00%) 67.88
ssh 51587 ( 0.22%) 7582514 ( 0.05%) 146.98
dns 6305 ( 0.03%) 532705 ( 0.00%) 84.49
bgp 291 ( 0.00%) 66386 ( 0.00%) 228.13
napster 749 ( 0.00%) 439692 ( 0.00%) 587.04
realaud 18 ( 0.00%) 3618 ( 0.00%) 201.00
icecast 9531 ( 0.04%) 951888 ( 0.01%) 99.87
hotline 4 ( 0.00%) 736 ( 0.00%) 184.00
other 1965366 ( 8.45%) 1405500471 ( 8.37%) 715.13
udp 6546373 ( 28.15%) 2917297564 ( 17.38%) 445.64
dns 820727 ( 3.53%) 103840651 ( 0.62%) 126.52
realaud 7 ( 0.00%) 1209 ( 0.00%) 172.71
halflif 27 ( 0.00%) 3595 ( 0.00%) 133.15
starcra 41 ( 0.00%) 4715 ( 0.00%) 115.00
everque 197 ( 0.00%) 29666 ( 0.00%) 150.59
unreal 4 ( 0.00%) 300 ( 0.00%) 75.00
quake 18 ( 0.00%) 2332 ( 0.00%) 129.56
cuseeme 1 ( 0.00%) 73 ( 0.00%) 73.00
other 5725292 ( 24.62%) 2813362402 ( 16.76%) 491.39
icmp 381699 ( 1.64%) 88948277 ( 0.53%) 233.03
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 1519 ( 0.01%) 235978 ( 0.00%) 155.35
ip6 4313161 ( 18.54%) 3181948878 ( 18.95%) 737.73
other 14591 ( 0.06%) 3352059 ( 0.02%) 229.73
frag 520 ( 0.00%) 591872 ( 0.00%) 1138.22
ip6 185479 ( 0.80%) 58091759 ( 0.35%) 313.20
tcp6 145788 ( 0.63%) 49407550 ( 0.29%) 338.90
http(s) 2697 ( 0.01%) 3252172 ( 0.02%) 1205.85
http(c) 22426 ( 0.10%) 2053993 ( 0.01%) 91.59
smtp 309 ( 0.00%) 47148 ( 0.00%) 152.58
ftp 78 ( 0.00%) 7020 ( 0.00%) 90.00
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 59 ( 0.00%) 11428 ( 0.00%) 193.69
bgp 98 ( 0.00%) 22103 ( 0.00%) 225.54
other 120118 ( 0.52%) 44013356 ( 0.26%) 366.42
udp6 27611 ( 0.12%) 6838153 ( 0.04%) 247.66
dns 24522 ( 0.11%) 6268903 ( 0.04%) 255.64
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
other 3088 ( 0.01%) 569131 ( 0.00%) 184.30
icmp6 11864 ( 0.05%) 1653740 ( 0.01%) 139.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 186 ( 0.00%) 188236 ( 0.00%) 1012.02
tcpdump file: 201010241400.dump.gz (579.92 MB)