Traffic Trace Info
DumpFile: 201011171400.dump
FileSize: 3124.98MB
Id: 201011171400
StartTime: Wed Nov 17 14:00:00 2010
EndTime: Wed Nov 17 14:15:00 2010
TotalTime: 900.01 seconds
TotalCapSize: -1628.97MB CapLen: 96 bytes
# of packets: 43116727 (30642.36MB)
AvgRate: 285.60Mbps stddev:51.65M
IP flow (unique src/dst pair) Information
# of flows: 1120346 (avg. 38.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.5% 1.9% 1.7% 1.3% 1.3% 1.2% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 644890
Top 10 bandwidth usage (bytes/total in %):
14.2% 9.5% 9.2% 8.1% 3.9% 3.0% 2.6% 2.4% 2.3% 1.9%
# of IPv6 addresses: 4017
Top 10 bandwidth usage (bytes/total in %):
62.7% 58.6% 13.8% 13.8% 6.9% 3.7% 3.3% 3.2% 2.7% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011171400.pktlen.png)
detailed numbers
[ 32- 63]: 7505791
[ 64- 127]: 11056834
[ 128- 255]: 1860438
[ 256- 511]: 1512017
[ 512- 1023]: 1057907
[ 1024- 2047]: 20123740
Protocol Breakdown
![[protocol breakdown chart]](201011171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43116727 (100.00%) 32130838363 (100.00%) 745.21
ip 42652559 ( 98.92%) 31695371246 ( 98.64%) 743.11
tcp 30108179 ( 69.83%) 24768281362 ( 77.09%) 822.64
http(s) 15088488 ( 34.99%) 20293181873 ( 63.16%) 1344.94
http(c) 10439758 ( 24.21%) 1607821103 ( 5.00%) 154.01
squid 169824 ( 0.39%) 100038749 ( 0.31%) 589.07
smtp 234863 ( 0.54%) 113265889 ( 0.35%) 482.26
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 91711 ( 0.21%) 9501347 ( 0.03%) 103.60
pop3 21648 ( 0.05%) 6371061 ( 0.02%) 294.30
imap 5822 ( 0.01%) 1753444 ( 0.01%) 301.18
telnet 2001 ( 0.00%) 140740 ( 0.00%) 70.33
ssh 217737 ( 0.50%) 44844641 ( 0.14%) 205.96
dns 15972 ( 0.04%) 1426628 ( 0.00%) 89.32
bgp 594 ( 0.00%) 115966 ( 0.00%) 195.23
napster 83 ( 0.00%) 6413 ( 0.00%) 77.27
realaud 46 ( 0.00%) 8628 ( 0.00%) 187.57
rtsp 165695 ( 0.38%) 150914439 ( 0.47%) 910.80
icecast 1804 ( 0.00%) 595744 ( 0.00%) 330.24
hotline 18 ( 0.00%) 2924 ( 0.00%) 162.44
other 3652106 ( 8.47%) 2438291219 ( 7.59%) 667.64
udp 7768479 ( 18.02%) 3725121380 ( 11.59%) 479.52
dns 1291503 ( 3.00%) 188169725 ( 0.59%) 145.70
realaud 920 ( 0.00%) 56145 ( 0.00%) 61.03
halflif 34 ( 0.00%) 3655 ( 0.00%) 107.50
starcra 25 ( 0.00%) 3613 ( 0.00%) 144.52
everque 7782 ( 0.02%) 871406 ( 0.00%) 111.98
unreal 20 ( 0.00%) 1719 ( 0.00%) 85.95
quake 32 ( 0.00%) 5466 ( 0.00%) 170.81
cuseeme 11 ( 0.00%) 1480 ( 0.00%) 134.55
other 6467332 ( 15.00%) 3535822443 ( 11.00%) 546.72
icmp 547379 ( 1.27%) 42212889 ( 0.13%) 77.12
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 3311 ( 0.01%) 599378 ( 0.00%) 181.03
ip6 4207800 ( 9.76%) 3146099340 ( 9.79%) 747.68
other 17231 ( 0.04%) 13038177 ( 0.04%) 756.67
frag 5245 ( 0.01%) 4215123 ( 0.01%) 803.65
ip6 464166 ( 1.08%) 435466997 ( 1.36%) 938.17
tcp6 385896 ( 0.90%) 410842318 ( 1.28%) 1064.65
http(s) 9447 ( 0.02%) 13087620 ( 0.04%) 1385.37
http(c) 37647 ( 0.09%) 3225504 ( 0.01%) 85.68
smtp 355 ( 0.00%) 103836 ( 0.00%) 292.50
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 1275 ( 0.00%) 320264 ( 0.00%) 251.19
bgp 94 ( 0.00%) 23207 ( 0.00%) 246.88
other 337018 ( 0.78%) 394076516 ( 1.23%) 1169.30
udp6 58678 ( 0.14%) 20445399 ( 0.06%) 348.43
dns 55636 ( 0.13%) 19969114 ( 0.06%) 358.92
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 3040 ( 0.01%) 476066 ( 0.00%) 156.60
icmp6 16534 ( 0.04%) 1926891 ( 0.01%) 116.54
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2945 ( 0.01%) 2237015 ( 0.01%) 759.60
tcpdump file: 201011171400.dump.gz (1074.65 MB)