Traffic Trace Info
DumpFile: 201011161400.dump
FileSize: 3154.67MB
Id: 201011161400
StartTime: Tue Nov 16 14:00:00 2010
EndTime: Tue Nov 16 14:15:01 2010
TotalTime: 900.14 seconds
TotalCapSize: -1609.87MB CapLen: 96 bytes
# of packets: 43811738 (30320.03MB)
AvgRate: 282.56Mbps stddev:29.27M
IP flow (unique src/dst pair) Information
# of flows: 874583 (avg. 50.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.6% 1.3% 1.1% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 454655
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.9% 9.7% 8.3% 3.2% 3.1% 2.3% 2.0% 2.0% 1.9%
# of IPv6 addresses: 4063
Top 10 bandwidth usage (bytes/total in %):
74.0% 68.3% 8.1% 7.4% 7.0% 3.4% 1.9% 1.9% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011161400.pktlen.png)
detailed numbers
[ 32- 63]: 7082527
[ 64- 127]: 11665048
[ 128- 255]: 2243080
[ 256- 511]: 1611944
[ 512- 1023]: 1261439
[ 1024- 2047]: 19947700
Protocol Breakdown
![[protocol breakdown chart]](201011161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43811738 (100.00%) 31792856656 (100.00%) 725.67
ip 43395349 ( 99.05%) 31415060286 ( 98.81%) 723.93
tcp 28623456 ( 65.33%) 23540403936 ( 74.04%) 822.42
http(s) 14623564 ( 33.38%) 19401742217 ( 61.03%) 1326.75
http(c) 8697276 ( 19.85%) 1411593400 ( 4.44%) 162.30
squid 247810 ( 0.57%) 113490135 ( 0.36%) 457.97
smtp 395613 ( 0.90%) 289230629 ( 0.91%) 731.09
ftp 194801 ( 0.44%) 149037585 ( 0.47%) 765.08
pop3 29461 ( 0.07%) 7991629 ( 0.03%) 271.26
imap 3726 ( 0.01%) 599863 ( 0.00%) 160.99
telnet 42141 ( 0.10%) 3094618 ( 0.01%) 73.43
ssh 983578 ( 2.25%) 149618468 ( 0.47%) 152.12
dns 13791 ( 0.03%) 1303672 ( 0.00%) 94.53
bgp 559 ( 0.00%) 88790 ( 0.00%) 158.84
napster 2076 ( 0.00%) 1621656 ( 0.01%) 781.14
realaud 55 ( 0.00%) 11517 ( 0.00%) 209.40
rtsp 8424 ( 0.02%) 7373770 ( 0.02%) 875.33
icecast 4720 ( 0.01%) 935513 ( 0.00%) 198.20
hotline 170 ( 0.00%) 11366 ( 0.00%) 66.86
other 3375687 ( 7.70%) 2002658868 ( 6.30%) 593.26
udp 9833994 ( 22.45%) 5123181815 ( 16.11%) 520.97
dns 1224015 ( 2.79%) 181737974 ( 0.57%) 148.48
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 299 ( 0.00%) 27300 ( 0.00%) 91.30
halflif 32 ( 0.00%) 3333 ( 0.00%) 104.16
starcra 68 ( 0.00%) 9189 ( 0.00%) 135.13
everque 7423 ( 0.02%) 839437 ( 0.00%) 113.09
unreal 13 ( 0.00%) 2038 ( 0.00%) 156.77
quake 24 ( 0.00%) 2613 ( 0.00%) 108.88
cuseeme 5 ( 0.00%) 463 ( 0.00%) 92.60
other 8602028 ( 19.63%) 4940491792 ( 15.54%) 574.34
icmp 573526 ( 1.31%) 43591606 ( 0.14%) 76.01
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5808 ( 0.01%) 866448 ( 0.00%) 149.18
ip6 4343461 ( 9.91%) 2704783917 ( 8.51%) 622.73
other 14924 ( 0.03%) 2213844 ( 0.01%) 148.34
frag 906 ( 0.00%) 925374 ( 0.00%) 1021.38
ip6 416387 ( 0.95%) 377796250 ( 1.19%) 907.32
tcp6 334631 ( 0.76%) 351189097 ( 1.10%) 1049.48
http(s) 13798 ( 0.03%) 17548210 ( 0.06%) 1271.79
http(c) 15289 ( 0.03%) 1316827 ( 0.00%) 86.13
smtp 713 ( 0.00%) 138191 ( 0.00%) 193.82
ftp 153 ( 0.00%) 14067 ( 0.00%) 91.94
ssh 236 ( 0.00%) 28379 ( 0.00%) 120.25
dns 1756 ( 0.00%) 434639 ( 0.00%) 247.52
bgp 101 ( 0.00%) 22566 ( 0.00%) 223.43
other 302585 ( 0.69%) 331686218 ( 1.04%) 1096.18
udp6 61323 ( 0.14%) 20224760 ( 0.06%) 329.81
dns 58115 ( 0.13%) 19717459 ( 0.06%) 339.28
unreal 3 ( 0.00%) 978 ( 0.00%) 326.00
other 3205 ( 0.01%) 506323 ( 0.00%) 157.98
icmp6 13774 ( 0.03%) 1661396 ( 0.01%) 120.62
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6545 ( 0.01%) 4705505 ( 0.01%) 718.95
tcpdump file: 201011161400.dump.gz (1105.55 MB)