Traffic Trace Info
DumpFile: 201010281400.dump
FileSize: 3045.73MB
Id: 201010281400
StartTime: Thu Oct 28 14:00:00 2010
EndTime: Thu Oct 28 14:15:01 2010
TotalTime: 900.43 seconds
TotalCapSize: -1686.54MB CapLen: 96 bytes
# of packets: 41697836 (29978.91MB)
AvgRate: 279.31Mbps stddev:59.64M
IP flow (unique src/dst pair) Information
# of flows: 775693 (avg. 53.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.1% 3.0% 2.2% 1.3% 1.2% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 405456
Top 10 bandwidth usage (bytes/total in %):
11.4% 10.4% 6.7% 5.5% 4.9% 3.5% 3.2% 3.2% 3.1% 2.6%
# of IPv6 addresses: 3645
Top 10 bandwidth usage (bytes/total in %):
41.6% 21.8% 13.3% 13.3% 10.5% 10.2% 10.2% 5.9% 5.9% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010281400.pktlen.png)
detailed numbers
[ 32- 63]: 5815781
[ 64- 127]: 11291271
[ 128- 255]: 2108618
[ 256- 511]: 1504414
[ 512- 1023]: 1004717
[ 1024- 2047]: 19973035
Protocol Breakdown
![[protocol breakdown chart]](201010281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41697836 (100.00%) 31435168935 (100.00%) 753.88
ip 41529559 ( 99.60%) 31343462017 ( 99.71%) 754.73
tcp 27123058 ( 65.05%) 22695703826 ( 72.20%) 836.77
http(s) 12938178 ( 31.03%) 17358240818 ( 55.22%) 1341.63
http(c) 8633817 ( 20.71%) 1181391812 ( 3.76%) 136.83
squid 344969 ( 0.83%) 254849939 ( 0.81%) 738.76
smtp 288167 ( 0.69%) 136438810 ( 0.43%) 473.47
ftp 20484 ( 0.05%) 7283628 ( 0.02%) 355.58
pop3 80295 ( 0.19%) 71952555 ( 0.23%) 896.10
imap 2819 ( 0.01%) 659508 ( 0.00%) 233.95
telnet 1626 ( 0.00%) 117614 ( 0.00%) 72.33
ssh 90108 ( 0.22%) 13806700 ( 0.04%) 153.22
dns 6165 ( 0.01%) 582026 ( 0.00%) 94.41
bgp 555 ( 0.00%) 97338 ( 0.00%) 175.38
napster 233 ( 0.00%) 18118 ( 0.00%) 77.76
realaud 13 ( 0.00%) 2466 ( 0.00%) 189.69
rtsp 71551 ( 0.17%) 74181894 ( 0.24%) 1036.77
icecast 1054 ( 0.00%) 490463 ( 0.00%) 465.33
other 4642975 ( 11.13%) 3595586603 ( 11.44%) 774.41
udp 9157179 ( 21.96%) 4886301685 ( 15.54%) 533.60
dns 1162201 ( 2.79%) 165962324 ( 0.53%) 142.80
realaud 15 ( 0.00%) 1671 ( 0.00%) 111.40
halflif 27 ( 0.00%) 1954 ( 0.00%) 72.37
starcra 64 ( 0.00%) 9348 ( 0.00%) 146.06
everque 6534 ( 0.02%) 751578 ( 0.00%) 115.03
unreal 13 ( 0.00%) 1656 ( 0.00%) 127.38
quake 33 ( 0.00%) 3459 ( 0.00%) 104.82
cuseeme 4 ( 0.00%) 735 ( 0.00%) 183.75
other 7987014 ( 19.15%) 4719391181 ( 15.01%) 590.88
icmp 421964 ( 1.01%) 32387128 ( 0.10%) 76.75
ipip 179 ( 0.00%) 18622 ( 0.00%) 104.03
ipsec 18955 ( 0.05%) 10263210 ( 0.03%) 541.45
ip6 4794792 ( 11.50%) 3716487694 ( 11.82%) 775.11
other 13432 ( 0.03%) 2299852 ( 0.01%) 171.22
frag 3024 ( 0.01%) 2493469 ( 0.01%) 824.56
ip6 168277 ( 0.40%) 91706918 ( 0.29%) 544.98
tcp6 112879 ( 0.27%) 77231088 ( 0.25%) 684.19
http(s) 19018 ( 0.05%) 22891716 ( 0.07%) 1203.69
http(c) 33806 ( 0.08%) 2978426 ( 0.01%) 88.10
smtp 603 ( 0.00%) 104957 ( 0.00%) 174.06
ftp 83 ( 0.00%) 7507 ( 0.00%) 90.45
ssh 9 ( 0.00%) 1706 ( 0.00%) 189.56
dns 234 ( 0.00%) 43678 ( 0.00%) 186.66
bgp 97 ( 0.00%) 23549 ( 0.00%) 242.77
other 59029 ( 0.14%) 51179549 ( 0.16%) 867.02
udp6 42922 ( 0.10%) 12413487 ( 0.04%) 289.21
dns 40202 ( 0.10%) 11895649 ( 0.04%) 295.90
starcra 1 ( 0.00%) 91 ( 0.00%) 91.00
other 2719 ( 0.01%) 517747 ( 0.00%) 190.42
icmp6 12075 ( 0.03%) 1694842 ( 0.01%) 140.36
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 370 ( 0.00%) 363285 ( 0.00%) 981.85
tcpdump file: 201010281400.dump.gz (1029.13 MB)