Traffic Trace Info
DumpFile: 201010301400.dump
FileSize: 2411.18MB
Id: 201010301400
StartTime: Sat Oct 30 14:00:01 2010
EndTime: Sat Oct 30 14:15:00 2010
TotalTime: 899.42 seconds
TotalCapSize: 1906.64MB CapLen: 96 bytes
# of packets: 33064864 (22995.14MB)
AvgRate: 214.43Mbps stddev:25.85M
IP flow (unique src/dst pair) Information
# of flows: 752670 (avg. 43.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.3% 2.0% 1.8% 1.7% 1.5% 1.4% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 432569
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.2% 10.5% 6.9% 4.6% 4.6% 2.9% 2.8% 2.4% 2.4%
# of IPv6 addresses: 3351
Top 10 bandwidth usage (bytes/total in %):
23.6% 19.6% 14.4% 14.4% 13.1% 10.9% 7.3% 5.7% 5.7% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010301400.pktlen.png)
detailed numbers
[ 32- 63]: 4542127
[ 64- 127]: 9087192
[ 128- 255]: 1904268
[ 256- 511]: 1415151
[ 512- 1023]: 916376
[ 1024- 2047]: 15199750
Protocol Breakdown
![[protocol breakdown chart]](201010301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33064864 (100.00%) 24112156276 (100.00%) 729.24
ip 32884074 ( 99.45%) 24033695181 ( 99.67%) 730.86
tcp 18542223 ( 56.08%) 16063780092 ( 66.62%) 866.34
http(s) 9321157 ( 28.19%) 12478493143 ( 51.75%) 1338.73
http(c) 4801157 ( 14.52%) 707993839 ( 2.94%) 147.46
squid 294566 ( 0.89%) 104367262 ( 0.43%) 354.31
smtp 147743 ( 0.45%) 23610563 ( 0.10%) 159.81
ftp 17424 ( 0.05%) 4913159 ( 0.02%) 281.98
pop3 7240 ( 0.02%) 3582393 ( 0.01%) 494.81
imap 1873 ( 0.01%) 232775 ( 0.00%) 124.28
telnet 760 ( 0.00%) 51725 ( 0.00%) 68.06
ssh 291107 ( 0.88%) 41987633 ( 0.17%) 144.23
dns 7343 ( 0.02%) 522164 ( 0.00%) 71.11
bgp 588 ( 0.00%) 111194 ( 0.00%) 189.11
napster 2321 ( 0.01%) 156454 ( 0.00%) 67.41
realaud 31 ( 0.00%) 3534 ( 0.00%) 114.00
rtsp 22449 ( 0.07%) 26577614 ( 0.11%) 1183.91
icecast 24419 ( 0.07%) 14502464 ( 0.06%) 593.90
other 3602040 ( 10.89%) 2656673876 ( 11.02%) 737.55
udp 8662174 ( 26.20%) 4133465721 ( 17.14%) 477.19
dns 1068762 ( 3.23%) 147021102 ( 0.61%) 137.56
realaud 171 ( 0.00%) 11369 ( 0.00%) 66.49
halflif 36 ( 0.00%) 3754 ( 0.00%) 104.28
starcra 43 ( 0.00%) 7683 ( 0.00%) 178.67
everque 1165 ( 0.00%) 142918 ( 0.00%) 122.68
unreal 5 ( 0.00%) 478 ( 0.00%) 95.60
quake 13 ( 0.00%) 1065 ( 0.00%) 81.92
cuseeme 4 ( 0.00%) 306 ( 0.00%) 76.50
other 7591625 ( 22.96%) 3986110020 ( 16.53%) 525.07
icmp 851845 ( 2.58%) 67520542 ( 0.28%) 79.26
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 1903 ( 0.01%) 395594 ( 0.00%) 207.88
ip6 4806482 ( 14.54%) 3765277861 ( 15.62%) 783.38
other 19267 ( 0.06%) 3236651 ( 0.01%) 167.99
frag 17022 ( 0.05%) 13213866 ( 0.05%) 776.28
ip6 180790 ( 0.55%) 78461095 ( 0.33%) 433.99
tcp6 135774 ( 0.41%) 66541929 ( 0.28%) 490.09
http(s) 9216 ( 0.03%) 13087390 ( 0.05%) 1420.07
http(c) 36877 ( 0.11%) 3162540 ( 0.01%) 85.76
smtp 550 ( 0.00%) 120456 ( 0.00%) 219.01
ftp 85 ( 0.00%) 7707 ( 0.00%) 90.67
ssh 11 ( 0.00%) 1878 ( 0.00%) 170.73
dns 217 ( 0.00%) 37224 ( 0.00%) 171.54
bgp 90 ( 0.00%) 25054 ( 0.00%) 278.38
other 88728 ( 0.27%) 50099680 ( 0.21%) 564.64
udp6 36108 ( 0.11%) 9990733 ( 0.04%) 276.69
dns 32152 ( 0.10%) 9169767 ( 0.04%) 285.20
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
other 3954 ( 0.01%) 820731 ( 0.00%) 207.57
icmp6 8089 ( 0.02%) 1296186 ( 0.01%) 160.24
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 704 ( 0.00%) 616637 ( 0.00%) 875.90
tcpdump file: 201010301400.dump.gz (820.92 MB)