Traffic Trace Info
DumpFile: 201010291400.dump
FileSize: 2927.90MB
Id: 201010291400
StartTime: Fri Oct 29 14:00:01 2010
EndTime: Fri Oct 29 14:15:01 2010
TotalTime: 900.14 seconds
TotalCapSize: -1781.02MB CapLen: 96 bytes
# of packets: 40166291 (29434.46MB)
AvgRate: 274.33Mbps stddev:27.71M
IP flow (unique src/dst pair) Information
# of flows: 971733 (avg. 41.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.9% 1.9% 1.8% 1.6% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 538015
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.7% 7.8% 5.9% 4.4% 3.7% 3.4% 2.4% 2.3% 2.0%
# of IPv6 addresses: 3749
Top 10 bandwidth usage (bytes/total in %):
78.1% 71.3% 4.2% 4.2% 3.9% 3.6% 1.4% 1.0% 1.0% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010291400.pktlen.png)
detailed numbers
[ 32- 63]: 6100066
[ 64- 127]: 10154647
[ 128- 255]: 1991529
[ 256- 511]: 1492098
[ 512- 1023]: 976306
[ 1024- 2047]: 19451645
Protocol Breakdown
![[protocol breakdown chart]](201010291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40166291 (100.00%) 30864271778 (100.00%) 768.41
ip 39955189 ( 99.47%) 30696253935 ( 99.46%) 768.27
tcp 26061649 ( 64.88%) 22597168728 ( 73.21%) 867.07
http(s) 13668301 ( 34.03%) 18275628017 ( 59.21%) 1337.08
http(c) 7861138 ( 19.57%) 1595526682 ( 5.17%) 202.96
squid 158621 ( 0.39%) 59195155 ( 0.19%) 373.19
smtp 200748 ( 0.50%) 65119094 ( 0.21%) 324.38
ftp 18317 ( 0.05%) 3368274 ( 0.01%) 183.89
pop3 129945 ( 0.32%) 13050689 ( 0.04%) 100.43
imap 3114 ( 0.01%) 1157675 ( 0.00%) 371.76
telnet 1052 ( 0.00%) 72631 ( 0.00%) 69.04
ssh 327036 ( 0.81%) 37647420 ( 0.12%) 115.12
dns 8008 ( 0.02%) 591383 ( 0.00%) 73.85
bgp 571 ( 0.00%) 104405 ( 0.00%) 182.85
napster 17 ( 0.00%) 1652 ( 0.00%) 97.18
realaud 19 ( 0.00%) 4390 ( 0.00%) 231.05
rtsp 33276 ( 0.08%) 35678780 ( 0.12%) 1072.21
icecast 9918 ( 0.02%) 1120610 ( 0.00%) 112.99
hotline 2 ( 0.00%) 156 ( 0.00%) 78.00
other 3641566 ( 9.07%) 2508901715 ( 8.13%) 688.96
udp 8760193 ( 21.81%) 4671060789 ( 15.13%) 533.21
dns 1202869 ( 2.99%) 169553068 ( 0.55%) 140.96
realaud 15 ( 0.00%) 1464 ( 0.00%) 97.60
halflif 21 ( 0.00%) 2094 ( 0.00%) 99.71
starcra 26 ( 0.00%) 4017 ( 0.00%) 154.50
everque 264 ( 0.00%) 42724 ( 0.00%) 161.83
unreal 57 ( 0.00%) 7595 ( 0.00%) 133.25
quake 7 ( 0.00%) 581 ( 0.00%) 83.00
cuseeme 8 ( 0.00%) 1222 ( 0.00%) 152.75
other 7554369 ( 18.81%) 4501103750 ( 14.58%) 595.83
icmp 505837 ( 1.26%) 61701060 ( 0.20%) 121.98
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5582 ( 0.01%) 761732 ( 0.00%) 136.46
ip6 4576586 ( 11.39%) 3354580426 ( 10.87%) 732.99
other 45162 ( 0.11%) 10962480 ( 0.04%) 242.74
frag 9208 ( 0.02%) 7124084 ( 0.02%) 773.68
ip6 211102 ( 0.53%) 168017843 ( 0.54%) 795.91
tcp6 151573 ( 0.38%) 152048792 ( 0.49%) 1003.14
http(s) 17438 ( 0.04%) 20710081 ( 0.07%) 1187.64
http(c) 20126 ( 0.05%) 1755940 ( 0.01%) 87.25
smtp 691 ( 0.00%) 247362 ( 0.00%) 357.98
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
ssh 8 ( 0.00%) 1596 ( 0.00%) 199.50
dns 208 ( 0.00%) 31782 ( 0.00%) 152.80
bgp 89 ( 0.00%) 21363 ( 0.00%) 240.03
other 112953 ( 0.28%) 129275297 ( 0.42%) 1144.51
udp6 49343 ( 0.12%) 13991611 ( 0.05%) 283.56
dns 43772 ( 0.11%) 12994212 ( 0.04%) 296.86
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
other 5570 ( 0.01%) 997294 ( 0.00%) 179.05
icmp6 9660 ( 0.02%) 1469498 ( 0.00%) 152.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 496 ( 0.00%) 503862 ( 0.00%) 1015.85
tcpdump file: 201010291400.dump.gz (986.65 MB)