Traffic Trace Info
DumpFile: 201011121400.dump
FileSize: 2923.01MB
Id: 201011121400
StartTime: Fri Nov 12 14:00:00 2010
EndTime: Fri Nov 12 14:15:01 2010
TotalTime: 900.58 seconds
TotalCapSize: -1787.11MB CapLen: 96 bytes
# of packets: 40246172 (27602.69MB)
AvgRate: 257.12Mbps stddev:26.82M
IP flow (unique src/dst pair) Information
# of flows: 1041402 (avg. 38.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 1.5% 1.5% 1.4% 1.3% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 599729
Top 10 bandwidth usage (bytes/total in %):
11.6% 10.3% 6.0% 5.6% 4.7% 3.6% 3.1% 2.8% 2.2% 2.0%
# of IPv6 addresses: 3870
Top 10 bandwidth usage (bytes/total in %):
82.4% 82.3% 5.0% 5.0% 1.6% 1.6% 0.9% 0.8% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011121400.pktlen.png)
detailed numbers
[ 32- 63]: 6038967
[ 64- 127]: 11271732
[ 128- 255]: 1871738
[ 256- 511]: 1749808
[ 512- 1023]: 1287235
[ 1024- 2047]: 18026692
Protocol Breakdown
![[protocol breakdown chart]](201011121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40246172 (100.00%) 28943513960 (100.00%) 719.16
ip 39925923 ( 99.20%) 28631274544 ( 98.92%) 717.11
tcp 26012530 ( 64.63%) 20670445327 ( 71.42%) 794.63
http(s) 11859995 ( 29.47%) 15462330667 ( 53.42%) 1303.74
http(c) 6890124 ( 17.12%) 1282510963 ( 4.43%) 186.14
squid 171957 ( 0.43%) 72790227 ( 0.25%) 423.30
smtp 201757 ( 0.50%) 67996749 ( 0.23%) 337.02
nntp 6 ( 0.00%) 2409 ( 0.00%) 401.50
ftp 65520 ( 0.16%) 28807703 ( 0.10%) 439.68
pop3 10566 ( 0.03%) 6249911 ( 0.02%) 591.51
imap 2322 ( 0.01%) 446891 ( 0.00%) 192.46
telnet 1235 ( 0.00%) 155869 ( 0.00%) 126.21
ssh 1782518 ( 4.43%) 305610720 ( 1.06%) 171.45
dns 11638 ( 0.03%) 1075761 ( 0.00%) 92.44
bgp 593 ( 0.00%) 101380 ( 0.00%) 170.96
napster 429 ( 0.00%) 92844 ( 0.00%) 216.42
realaud 107 ( 0.00%) 15147 ( 0.00%) 141.56
rtsp 22473 ( 0.06%) 21429166 ( 0.07%) 953.55
icecast 28732 ( 0.07%) 23401532 ( 0.08%) 814.48
hotline 17 ( 0.00%) 2823 ( 0.00%) 166.06
other 4960375 ( 12.33%) 3397246997 ( 11.74%) 684.88
udp 8900308 ( 22.11%) 4822854514 ( 16.66%) 541.88
dns 1231450 ( 3.06%) 187282611 ( 0.65%) 152.08
realaud 22 ( 0.00%) 1906 ( 0.00%) 86.64
halflif 39 ( 0.00%) 6287 ( 0.00%) 161.21
starcra 38 ( 0.00%) 6037 ( 0.00%) 158.87
everque 7018 ( 0.02%) 797596 ( 0.00%) 113.65
unreal 18 ( 0.00%) 1927 ( 0.00%) 107.06
quake 136 ( 0.00%) 12414 ( 0.00%) 91.28
cuseeme 6 ( 0.00%) 815 ( 0.00%) 135.83
other 7660271 ( 19.03%) 4634610011 ( 16.01%) 605.02
icmp 473506 ( 1.18%) 51127783 ( 0.18%) 107.98
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 4760 ( 0.01%) 643968 ( 0.00%) 135.29
ip6 4517366 ( 11.22%) 3082627799 ( 10.65%) 682.39
other 17273 ( 0.04%) 3556433 ( 0.01%) 205.90
frag 16978 ( 0.04%) 13903228 ( 0.05%) 818.90
ip6 320249 ( 0.80%) 312239416 ( 1.08%) 974.99
tcp6 250912 ( 0.62%) 293748124 ( 1.01%) 1170.72
http(s) 7826 ( 0.02%) 7358100 ( 0.03%) 940.21
http(c) 23123 ( 0.06%) 2130740 ( 0.01%) 92.15
smtp 494 ( 0.00%) 258192 ( 0.00%) 522.66
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
ssh 32 ( 0.00%) 8944 ( 0.00%) 279.50
dns 991 ( 0.00%) 257755 ( 0.00%) 260.10
bgp 98 ( 0.00%) 20304 ( 0.00%) 207.18
other 218288 ( 0.54%) 283708718 ( 0.98%) 1299.70
udp6 53794 ( 0.13%) 16191352 ( 0.06%) 300.99
dns 50448 ( 0.13%) 15453651 ( 0.05%) 306.33
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 3344 ( 0.01%) 737493 ( 0.00%) 220.54
icmp6 14849 ( 0.04%) 1779185 ( 0.01%) 119.82
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 578 ( 0.00%) 504977 ( 0.00%) 873.66
tcpdump file: 201011121400.dump.gz (1029.37 MB)