Traffic Trace Info
DumpFile: 201011151400.dump
FileSize: 2958.30MB
Id: 201011151400
StartTime: Mon Nov 15 14:00:00 2010
EndTime: Mon Nov 15 14:15:00 2010
TotalTime: 900.39 seconds
TotalCapSize: -1755.66MB CapLen: 96 bytes
# of packets: 40497876 (27546.94MB)
AvgRate: 256.65Mbps stddev:27.84M
IP flow (unique src/dst pair) Information
# of flows: 992631 (avg. 40.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 513561
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.1% 8.3% 4.1% 3.4% 2.9% 2.1% 2.0% 2.0% 1.7%
# of IPv6 addresses: 4808
Top 10 bandwidth usage (bytes/total in %):
67.4% 67.4% 13.6% 13.6% 3.7% 2.3% 2.3% 1.5% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011151400.pktlen.png)
detailed numbers
[ 32- 63]: 7067026
[ 64- 127]: 10873519
[ 128- 255]: 2012980
[ 256- 511]: 1493735
[ 512- 1023]: 987731
[ 1024- 2047]: 18062885
Protocol Breakdown
![[protocol breakdown chart]](201011151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40497876 (100.00%) 28885060650 (100.00%) 713.25
ip 40123950 ( 99.08%) 28512661971 ( 98.71%) 710.61
tcp 28492264 ( 70.35%) 22341546174 ( 77.35%) 784.13
http(s) 13343128 ( 32.95%) 17721917855 ( 61.35%) 1328.17
http(c) 8588632 ( 21.21%) 1180766523 ( 4.09%) 137.48
squid 292104 ( 0.72%) 143496864 ( 0.50%) 491.25
smtp 234139 ( 0.58%) 99183335 ( 0.34%) 423.61
nntp 3 ( 0.00%) 184 ( 0.00%) 61.33
ftp 40009 ( 0.10%) 4843951 ( 0.02%) 121.07
pop3 19423 ( 0.05%) 6317828 ( 0.02%) 325.28
imap 4724 ( 0.01%) 1937438 ( 0.01%) 410.13
telnet 96723 ( 0.24%) 7083883 ( 0.02%) 73.24
ssh 1037563 ( 2.56%) 149344063 ( 0.52%) 143.94
dns 14096 ( 0.03%) 1233157 ( 0.00%) 87.48
bgp 1209 ( 0.00%) 694861 ( 0.00%) 574.74
napster 90 ( 0.00%) 8487 ( 0.00%) 94.30
realaud 3973 ( 0.01%) 2082972 ( 0.01%) 524.28
rtsp 24522 ( 0.06%) 22811259 ( 0.08%) 930.24
icecast 1405 ( 0.00%) 440181 ( 0.00%) 313.30
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 4790501 ( 11.83%) 2999361668 ( 10.38%) 626.11
udp 6869377 ( 16.96%) 3105999679 ( 10.75%) 452.15
dns 1179576 ( 2.91%) 171968840 ( 0.60%) 145.79
realaud 50 ( 0.00%) 5614 ( 0.00%) 112.28
halflif 43 ( 0.00%) 4342 ( 0.00%) 100.98
starcra 34 ( 0.00%) 4297 ( 0.00%) 126.38
everque 6742 ( 0.02%) 1407981 ( 0.00%) 208.84
unreal 6 ( 0.00%) 790 ( 0.00%) 131.67
quake 26 ( 0.00%) 3199 ( 0.00%) 123.04
cuseeme 4 ( 0.00%) 376 ( 0.00%) 94.00
other 5682731 ( 14.03%) 2932520076 ( 10.15%) 516.04
icmp 374257 ( 0.92%) 29703016 ( 0.10%) 79.37
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 6018 ( 0.01%) 914500 ( 0.00%) 151.96
ip6 4369521 ( 10.79%) 3032462070 ( 10.50%) 694.00
other 12333 ( 0.03%) 2017812 ( 0.01%) 163.61
frag 1593 ( 0.00%) 1531684 ( 0.01%) 961.51
ip6 373926 ( 0.92%) 372398679 ( 1.29%) 995.92
tcp6 297880 ( 0.74%) 352079369 ( 1.22%) 1181.95
http(s) 6565 ( 0.02%) 6103282 ( 0.02%) 929.67
http(c) 10508 ( 0.03%) 1211363 ( 0.00%) 115.28
smtp 494 ( 0.00%) 139268 ( 0.00%) 281.92
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 1189 ( 0.00%) 317742 ( 0.00%) 267.23
bgp 100 ( 0.00%) 19198 ( 0.00%) 191.98
other 278964 ( 0.69%) 344283145 ( 1.19%) 1234.15
udp6 56234 ( 0.14%) 17807253 ( 0.06%) 316.66
dns 53144 ( 0.13%) 17317588 ( 0.06%) 325.86
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
other 3089 ( 0.01%) 489555 ( 0.00%) 158.48
icmp6 19276 ( 0.05%) 2089926 ( 0.01%) 108.42
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 422 ( 0.00%) 406639 ( 0.00%) 963.60
tcpdump file: 201011151400.dump.gz (1052.00 MB)