Traffic Trace Info
DumpFile: 201011131400.dump
FileSize: 2264.03MB
Id: 201011131400
StartTime: Sat Nov 13 14:00:01 2010
EndTime: Sat Nov 13 14:15:00 2010
TotalTime: 899.30 seconds
TotalCapSize: 1788.55MB CapLen: 96 bytes
# of packets: 31158830 (21844.59MB)
AvgRate: 203.81Mbps stddev:21.62M
IP flow (unique src/dst pair) Information
# of flows: 785956 (avg. 39.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.5% 1.9% 1.8% 1.7% 1.5% 1.4% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 467761
Top 10 bandwidth usage (bytes/total in %):
13.7% 12.3% 11.3% 11.1% 4.6% 2.6% 2.5% 2.5% 2.3% 2.2%
# of IPv6 addresses: 3877
Top 10 bandwidth usage (bytes/total in %):
27.0% 13.4% 11.9% 11.7% 11.7% 7.5% 7.4% 4.6% 4.4% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011131400.pktlen.png)
detailed numbers
[ 32- 63]: 3965131
[ 64- 127]: 8700846
[ 128- 255]: 1827156
[ 256- 511]: 1408915
[ 512- 1023]: 880393
[ 1024- 2047]: 14376389
Protocol Breakdown
![[protocol breakdown chart]](201011131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31158830 (100.00%) 22905709961 (100.00%) 735.13
ip 31035379 ( 99.60%) 22859114165 ( 99.80%) 736.55
tcp 18522594 ( 59.45%) 15938846067 ( 69.58%) 860.51
http(s) 10089429 ( 32.38%) 13511087949 ( 58.99%) 1339.13
http(c) 4855113 ( 15.58%) 594025047 ( 2.59%) 122.35
squid 150241 ( 0.48%) 83767747 ( 0.37%) 557.56
smtp 165083 ( 0.53%) 51832330 ( 0.23%) 313.98
ftp 74532 ( 0.24%) 23836097 ( 0.10%) 319.81
pop3 5849 ( 0.02%) 3896002 ( 0.02%) 666.10
imap 5291 ( 0.02%) 2928510 ( 0.01%) 553.49
telnet 347 ( 0.00%) 21948 ( 0.00%) 63.25
ssh 485311 ( 1.56%) 71751457 ( 0.31%) 147.85
dns 9489 ( 0.03%) 840206 ( 0.00%) 88.55
bgp 567 ( 0.00%) 98045 ( 0.00%) 172.92
napster 42 ( 0.00%) 4843 ( 0.00%) 115.31
realaud 79 ( 0.00%) 5239 ( 0.00%) 66.32
rtsp 83526 ( 0.27%) 76486417 ( 0.33%) 915.72
icecast 1035 ( 0.00%) 248246 ( 0.00%) 239.85
hotline 98 ( 0.00%) 6333 ( 0.00%) 64.62
other 2596562 ( 8.33%) 1518009651 ( 6.63%) 584.62
udp 7843914 ( 25.17%) 3919648078 ( 17.11%) 499.71
dns 1023508 ( 3.28%) 146354667 ( 0.64%) 142.99
realaud 19 ( 0.00%) 1694 ( 0.00%) 89.16
halflif 32 ( 0.00%) 2686 ( 0.00%) 83.94
starcra 10 ( 0.00%) 1285 ( 0.00%) 128.50
everque 122 ( 0.00%) 24469 ( 0.00%) 200.57
unreal 36 ( 0.00%) 3938 ( 0.00%) 109.39
quake 30 ( 0.00%) 9058 ( 0.00%) 301.93
cuseeme 17 ( 0.00%) 1345 ( 0.00%) 79.12
other 6805956 ( 21.84%) 3770837219 ( 16.46%) 554.05
icmp 407342 ( 1.31%) 41654465 ( 0.18%) 102.26
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 2993 ( 0.01%) 429958 ( 0.00%) 143.65
ip6 4244602 ( 13.62%) 2956098727 ( 12.91%) 696.44
other 13754 ( 0.04%) 2418150 ( 0.01%) 175.81
frag 30042 ( 0.10%) 22344150 ( 0.10%) 743.76
ip6 123451 ( 0.40%) 46595796 ( 0.20%) 377.44
tcp6 64162 ( 0.21%) 31916221 ( 0.14%) 497.43
http(s) 2782 ( 0.01%) 2852763 ( 0.01%) 1025.44
http(c) 11925 ( 0.04%) 1088665 ( 0.00%) 91.29
smtp 515 ( 0.00%) 206265 ( 0.00%) 400.51
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 1080 ( 0.00%) 264596 ( 0.00%) 245.00
bgp 94 ( 0.00%) 19165 ( 0.00%) 203.88
other 47706 ( 0.15%) 27479396 ( 0.12%) 576.02
udp6 39295 ( 0.13%) 11731897 ( 0.05%) 298.56
dns 35733 ( 0.11%) 11120979 ( 0.05%) 311.22
other 3562 ( 0.01%) 610918 ( 0.00%) 171.51
icmp6 18571 ( 0.06%) 1946210 ( 0.01%) 104.80
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1310 ( 0.00%) 986044 ( 0.00%) 752.71
tcpdump file: 201011131400.dump.gz (785.09 MB)