Traffic Trace Info
DumpFile: 201010251400.dump
FileSize: 3083.77MB
Id: 201010251400
StartTime: Mon Oct 25 14:00:01 2010
EndTime: Mon Oct 25 14:15:01 2010
TotalTime: 900.04 seconds
TotalCapSize: -1659.50MB CapLen: 96 bytes
# of packets: 42419050 (31572.48MB)
AvgRate: 294.31Mbps stddev:29.85M
IP flow (unique src/dst pair) Information
# of flows: 878014 (avg. 48.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 500560
Top 10 bandwidth usage (bytes/total in %):
12.5% 9.6% 6.8% 5.6% 4.0% 2.1% 2.1% 1.9% 1.9% 1.6%
# of IPv6 addresses: 3742
Top 10 bandwidth usage (bytes/total in %):
30.6% 29.8% 17.4% 14.3% 12.0% 10.9% 9.7% 9.7% 6.7% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010251400.pktlen.png)
detailed numbers
[ 32- 63]: 5828947
[ 64- 127]: 11502615
[ 128- 255]: 1732952
[ 256- 511]: 1527781
[ 512- 1023]: 926877
[ 1024- 2047]: 20899878
Protocol Breakdown
![[protocol breakdown chart]](201010251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42419050 (100.00%) 33106140186 (100.00%) 780.45
ip 42238931 ( 99.58%) 32983097268 ( 99.63%) 780.87
tcp 30389287 ( 71.64%) 26090175767 ( 78.81%) 858.53
http(s) 15888229 ( 37.46%) 21767876450 ( 65.75%) 1370.06
http(c) 10372825 ( 24.45%) 1792280407 ( 5.41%) 172.79
squid 126334 ( 0.30%) 48997324 ( 0.15%) 387.84
smtp 203968 ( 0.48%) 58477906 ( 0.18%) 286.70
ftp 18141 ( 0.04%) 1525086 ( 0.00%) 84.07
pop3 8502 ( 0.02%) 4745437 ( 0.01%) 558.16
imap 3881 ( 0.01%) 1982782 ( 0.01%) 510.89
telnet 1013 ( 0.00%) 70072 ( 0.00%) 69.17
ssh 70526 ( 0.17%) 8743021 ( 0.03%) 123.97
dns 6821 ( 0.02%) 882348 ( 0.00%) 129.36
bgp 318 ( 0.00%) 64237 ( 0.00%) 202.00
napster 15 ( 0.00%) 3367 ( 0.00%) 224.47
realaud 10 ( 0.00%) 1099 ( 0.00%) 109.90
rtsp 11832 ( 0.03%) 12660035 ( 0.04%) 1069.98
icecast 14935 ( 0.04%) 5206684 ( 0.02%) 348.62
other 3661934 ( 8.63%) 2386659332 ( 7.21%) 651.75
udp 7825200 ( 18.45%) 4304702952 ( 13.00%) 550.11
dns 1113936 ( 2.63%) 160920719 ( 0.49%) 144.46
realaud 18 ( 0.00%) 1760 ( 0.00%) 97.78
halflif 49 ( 0.00%) 5116 ( 0.00%) 104.41
starcra 31 ( 0.00%) 3985 ( 0.00%) 128.55
everque 245 ( 0.00%) 35000 ( 0.00%) 142.86
unreal 12 ( 0.00%) 927 ( 0.00%) 77.25
quake 145 ( 0.00%) 20704 ( 0.00%) 142.79
cuseeme 11 ( 0.00%) 1241 ( 0.00%) 112.82
other 6709282 ( 15.82%) 4143571462 ( 12.52%) 617.59
icmp 417676 ( 0.98%) 77469222 ( 0.23%) 185.48
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5775 ( 0.01%) 800066 ( 0.00%) 138.54
ip6 3470405 ( 8.18%) 2491502998 ( 7.53%) 717.93
other 130408 ( 0.31%) 18427543 ( 0.06%) 141.31
frag 6669 ( 0.02%) 5154193 ( 0.02%) 772.86
ip6 180119 ( 0.42%) 123042918 ( 0.37%) 683.12
tcp6 127232 ( 0.30%) 110338540 ( 0.33%) 867.22
http(s) 35411 ( 0.08%) 46170363 ( 0.14%) 1303.84
http(c) 17675 ( 0.04%) 1592398 ( 0.00%) 90.09
squid 25 ( 0.00%) 2250 ( 0.00%) 90.00
smtp 305 ( 0.00%) 82900 ( 0.00%) 271.80
ftp 82 ( 0.00%) 7425 ( 0.00%) 90.55
ssh 3 ( 0.00%) 330 ( 0.00%) 110.00
dns 187 ( 0.00%) 42411 ( 0.00%) 226.80
bgp 94 ( 0.00%) 21577 ( 0.00%) 229.54
other 73450 ( 0.17%) 62418886 ( 0.19%) 849.81
udp6 40662 ( 0.10%) 10666069 ( 0.03%) 262.31
dns 36507 ( 0.09%) 9996775 ( 0.03%) 273.83
halflif 2 ( 0.00%) 209 ( 0.00%) 104.50
other 4153 ( 0.01%) 669085 ( 0.00%) 161.11
icmp6 11839 ( 0.03%) 1711878 ( 0.01%) 144.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 356 ( 0.00%) 322351 ( 0.00%) 905.48
tcpdump file: 201010251400.dump.gz (1058.57 MB)