Traffic Trace Info
DumpFile: 201011021400.dump
FileSize: 2471.41MB
Id: 201011021400
StartTime: Tue Nov 2 14:00:00 2010
EndTime: Tue Nov 2 14:15:01 2010
TotalTime: 900.28 seconds
TotalCapSize: 1950.88MB CapLen: 96 bytes
# of packets: 34112668 (24331.52MB)
AvgRate: 229.02Mbps stddev:33.65M
IP flow (unique src/dst pair) Information
# of flows: 824060 (avg. 41.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.7% 1.6% 1.5% 1.3% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 439720
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.8% 5.8% 3.8% 3.7% 3.2% 2.9% 2.8% 2.8% 2.8%
# of IPv6 addresses: 4182
Top 10 bandwidth usage (bytes/total in %):
88.2% 86.8% 1.3% 1.3% 1.3% 1.3% 1.2% 1.2% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011021400.pktlen.png)
detailed numbers
[ 32- 63]: 5973099
[ 64- 127]: 9187110
[ 128- 255]: 1359878
[ 256- 511]: 824561
[ 512- 1023]: 863512
[ 1024- 2047]: 15904508
Protocol Breakdown
![[protocol breakdown chart]](201011021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34112668 (100.00%) 25513446853 (100.00%) 747.92
ip 33726949 ( 98.87%) 25075459890 ( 98.28%) 743.48
tcp 27462999 ( 80.51%) 22843001073 ( 89.53%) 831.77
http(s) 13183360 ( 38.65%) 17624365005 ( 69.08%) 1336.86
http(c) 7992614 ( 23.43%) 1242247563 ( 4.87%) 155.42
squid 208796 ( 0.61%) 73414522 ( 0.29%) 351.61
smtp 261908 ( 0.77%) 116584931 ( 0.46%) 445.14
nntp 42 ( 0.00%) 2955 ( 0.00%) 70.36
ftp 44779 ( 0.13%) 4760163 ( 0.02%) 106.30
pop3 33328 ( 0.10%) 21079141 ( 0.08%) 632.48
imap 1434 ( 0.00%) 303865 ( 0.00%) 211.90
telnet 586 ( 0.00%) 40567 ( 0.00%) 69.23
ssh 904675 ( 2.65%) 142621735 ( 0.56%) 157.65
dns 8265 ( 0.02%) 647978 ( 0.00%) 78.40
bgp 575 ( 0.00%) 104282 ( 0.00%) 181.36
napster 8 ( 0.00%) 868 ( 0.00%) 108.50
realaud 148 ( 0.00%) 45644 ( 0.00%) 308.41
rtsp 80962 ( 0.24%) 90193862 ( 0.35%) 1114.03
icecast 1844 ( 0.01%) 690695 ( 0.00%) 374.56
hotline 6 ( 0.00%) 1188 ( 0.00%) 198.00
other 4739667 ( 13.89%) 3525895989 ( 13.82%) 743.91
udp 4370352 ( 12.81%) 1425445275 ( 5.59%) 326.16
dns 1197674 ( 3.51%) 168804377 ( 0.66%) 140.94
realaud 19 ( 0.00%) 2466 ( 0.00%) 129.79
halflif 10 ( 0.00%) 1063 ( 0.00%) 106.30
starcra 36 ( 0.00%) 4629 ( 0.00%) 128.58
everque 304 ( 0.00%) 47461 ( 0.00%) 156.12
unreal 8 ( 0.00%) 1312 ( 0.00%) 164.00
quake 62 ( 0.00%) 4632 ( 0.00%) 74.71
cuseeme 11 ( 0.00%) 990 ( 0.00%) 90.00
other 3171167 ( 9.30%) 1256348016 ( 4.92%) 396.18
icmp 617847 ( 1.81%) 90655270 ( 0.36%) 146.73
ipip 176 ( 0.00%) 18304 ( 0.00%) 104.00
ipsec 1377 ( 0.00%) 224070 ( 0.00%) 162.72
ip6 1261686 ( 3.70%) 713876525 ( 2.80%) 565.81
other 12512 ( 0.04%) 2239373 ( 0.01%) 178.98
frag 3567 ( 0.01%) 2867863 ( 0.01%) 804.00
ip6 385719 ( 1.13%) 437986963 ( 1.72%) 1135.51
tcp6 324461 ( 0.95%) 421373657 ( 1.65%) 1298.69
http(s) 8291 ( 0.02%) 8172786 ( 0.03%) 985.74
http(c) 22052 ( 0.06%) 1971726 ( 0.01%) 89.41
smtp 210 ( 0.00%) 57008 ( 0.00%) 271.47
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
ssh 1317 ( 0.00%) 1695438 ( 0.01%) 1287.35
dns 241 ( 0.00%) 53438 ( 0.00%) 221.73
bgp 86 ( 0.00%) 21572 ( 0.00%) 250.84
other 292204 ( 0.86%) 409396318 ( 1.60%) 1401.06
udp6 48667 ( 0.14%) 14009327 ( 0.05%) 287.86
dns 42828 ( 0.13%) 12973245 ( 0.05%) 302.92
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
starcra 4 ( 0.00%) 647 ( 0.00%) 161.75
other 5834 ( 0.02%) 1035332 ( 0.00%) 177.47
icmp6 11339 ( 0.03%) 1436321 ( 0.01%) 126.67
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1140 ( 0.00%) 1152402 ( 0.00%) 1010.88
tcpdump file: 201011021400.dump.gz (831.03 MB)