Traffic Trace Info
DumpFile: 201010311400.dump
FileSize: 2865.11MB
Id: 201010311400
StartTime: Sun Oct 31 14:00:01 2010
EndTime: Sun Oct 31 14:15:01 2010
TotalTime: 900.04 seconds
TotalCapSize: -1842.18MB CapLen: 96 bytes
# of packets: 40060660 (27010.00MB)
AvgRate: 251.74Mbps stddev:23.89M
IP flow (unique src/dst pair) Information
# of flows: 914471 (avg. 43.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 5.4% 1.5% 1.4% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 564178
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.9% 9.5% 9.2% 7.9% 5.5% 5.5% 4.8% 3.9% 2.4%
# of IPv6 addresses: 3196
Top 10 bandwidth usage (bytes/total in %):
27.9% 27.9% 13.3% 12.2% 10.4% 8.2% 7.7% 7.7% 6.6% 6.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201010311400.pktlen.png)
detailed numbers
[ 32- 63]: 7471697
[ 64- 127]: 10553164
[ 128- 255]: 1980820
[ 256- 511]: 1371470
[ 512- 1023]: 968040
[ 1024- 2047]: 17715469
Protocol Breakdown
![[protocol breakdown chart]](201010311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40060660 (100.00%) 28322039904 (100.00%) 706.98
ip 39918043 ( 99.64%) 28257345019 ( 99.77%) 707.88
tcp 25636192 ( 63.99%) 21410069615 ( 75.60%) 835.15
http(s) 12530972 ( 31.28%) 16674954070 ( 58.88%) 1330.70
http(c) 6047268 ( 15.10%) 955700919 ( 3.37%) 158.04
squid 247682 ( 0.62%) 82729065 ( 0.29%) 334.01
smtp 127147 ( 0.32%) 24718272 ( 0.09%) 194.41
ftp 23400 ( 0.06%) 2512706 ( 0.01%) 107.38
pop3 6320 ( 0.02%) 4722646 ( 0.02%) 747.25
imap 1945 ( 0.00%) 242592 ( 0.00%) 124.73
telnet 1001 ( 0.00%) 63622 ( 0.00%) 63.56
ssh 2226783 ( 5.56%) 308036179 ( 1.09%) 138.33
dns 7117 ( 0.02%) 499780 ( 0.00%) 70.22
bgp 554 ( 0.00%) 95260 ( 0.00%) 171.95
napster 201 ( 0.00%) 15592 ( 0.00%) 77.57
realaud 30 ( 0.00%) 2175 ( 0.00%) 72.50
rtsp 31502 ( 0.08%) 35870710 ( 0.13%) 1138.68
icecast 1000 ( 0.00%) 489681 ( 0.00%) 489.68
other 4383267 ( 10.94%) 3319416166 ( 11.72%) 757.29
udp 9818169 ( 24.51%) 4102923567 ( 14.49%) 417.89
dns 981507 ( 2.45%) 130091117 ( 0.46%) 132.54
realaud 21 ( 0.00%) 2384 ( 0.00%) 113.52
halflif 188 ( 0.00%) 81137 ( 0.00%) 431.58
starcra 24 ( 0.00%) 2770 ( 0.00%) 115.42
everque 138 ( 0.00%) 26425 ( 0.00%) 191.49
unreal 40 ( 0.00%) 4465 ( 0.00%) 111.62
quake 6 ( 0.00%) 548 ( 0.00%) 91.33
cuseeme 3 ( 0.00%) 283 ( 0.00%) 94.33
other 8836105 ( 22.06%) 3972603202 ( 14.03%) 449.59
icmp 529234 ( 1.32%) 40516049 ( 0.14%) 76.56
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 5802 ( 0.01%) 796884 ( 0.00%) 137.35
ip6 3911204 ( 9.76%) 2695576389 ( 9.52%) 689.19
other 17263 ( 0.04%) 7443905 ( 0.03%) 431.21
frag 1039 ( 0.00%) 1259245 ( 0.00%) 1211.98
ip6 142617 ( 0.36%) 64694885 ( 0.23%) 453.63
tcp6 100678 ( 0.25%) 54363150 ( 0.19%) 539.97
http(s) 3080 ( 0.01%) 3715302 ( 0.01%) 1206.27
http(c) 21785 ( 0.05%) 1942214 ( 0.01%) 89.15
smtp 236 ( 0.00%) 53763 ( 0.00%) 227.81
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
ssh 10 ( 0.00%) 1768 ( 0.00%) 176.80
dns 157 ( 0.00%) 25680 ( 0.00%) 163.57
bgp 95 ( 0.00%) 23023 ( 0.00%) 242.35
icecast 57 ( 0.00%) 8169 ( 0.00%) 143.32
other 75198 ( 0.19%) 48587860 ( 0.17%) 646.13
udp6 32719 ( 0.08%) 8627151 ( 0.03%) 263.67
dns 26439 ( 0.07%) 7758016 ( 0.03%) 293.43
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 6279 ( 0.02%) 869019 ( 0.00%) 138.40
icmp6 8760 ( 0.02%) 1320654 ( 0.00%) 150.76
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 347 ( 0.00%) 368556 ( 0.00%) 1062.12
tcpdump file: 201010311400.dump.gz (984.89 MB)