Traffic Trace Info
DumpFile: 201011181400.dump
FileSize: 3145.03MB
Id: 201011181400
StartTime: Thu Nov 18 14:00:00 2010
EndTime: Thu Nov 18 14:15:01 2010
TotalTime: 900.43 seconds
TotalCapSize: -1605.08MB CapLen: 96 bytes
# of packets: 42864095 (29179.53MB)
AvgRate: 271.86Mbps stddev:30.62M
IP flow (unique src/dst pair) Information
# of flows: 1182956 (avg. 36.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.6% 1.4% 1.2% 1.2% 1.1% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 632105
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.3% 6.3% 6.1% 6.0% 3.7% 3.5% 1.8% 1.6% 1.6%
# of IPv6 addresses: 4074
Top 10 bandwidth usage (bytes/total in %):
80.5% 73.6% 7.3% 3.1% 3.1% 1.7% 1.7% 1.6% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011181400.pktlen.png)
detailed numbers
[ 32- 63]: 6953555
[ 64- 127]: 12287119
[ 128- 255]: 1940453
[ 256- 511]: 1482112
[ 512- 1023]: 1009115
[ 1024- 2047]: 19191741
Protocol Breakdown
![[protocol breakdown chart]](201011181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42864095 (100.00%) 30596956553 (100.00%) 713.81
ip 42513287 ( 99.18%) 30247145216 ( 98.86%) 711.48
tcp 28553652 ( 66.61%) 22286747508 ( 72.84%) 780.52
http(s) 13857355 ( 32.33%) 18206479996 ( 59.50%) 1313.85
http(c) 8601153 ( 20.07%) 1077782527 ( 3.52%) 125.31
squid 409896 ( 0.96%) 250659560 ( 0.82%) 611.52
smtp 259981 ( 0.61%) 124969610 ( 0.41%) 480.69
ftp 80656 ( 0.19%) 14831453 ( 0.05%) 183.89
pop3 50258 ( 0.12%) 23577050 ( 0.08%) 469.12
imap 4555 ( 0.01%) 1562152 ( 0.01%) 342.95
telnet 1629 ( 0.00%) 112930 ( 0.00%) 69.32
ssh 869216 ( 2.03%) 132687727 ( 0.43%) 152.65
dns 16105 ( 0.04%) 1442666 ( 0.00%) 89.58
bgp 570 ( 0.00%) 98030 ( 0.00%) 171.98
napster 54 ( 0.00%) 8493 ( 0.00%) 157.28
realaud 111 ( 0.00%) 16706 ( 0.00%) 150.50
rtsp 3621 ( 0.01%) 2290291 ( 0.01%) 632.50
icecast 14045 ( 0.03%) 11984480 ( 0.04%) 853.29
other 4384445 ( 10.23%) 2438243717 ( 7.97%) 556.11
udp 8351916 ( 19.48%) 4138101461 ( 13.52%) 495.47
dns 1274006 ( 2.97%) 188534735 ( 0.62%) 147.99
realaud 15 ( 0.00%) 1525 ( 0.00%) 101.67
halflif 248 ( 0.00%) 16103 ( 0.00%) 64.93
starcra 38 ( 0.00%) 8826 ( 0.00%) 232.26
everque 8420 ( 0.02%) 949262 ( 0.00%) 112.74
unreal 9 ( 0.00%) 1357 ( 0.00%) 150.78
quake 24 ( 0.00%) 2606 ( 0.00%) 108.58
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 7068143 ( 16.49%) 3948360201 ( 12.90%) 558.61
icmp 924805 ( 2.16%) 144549540 ( 0.47%) 156.30
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 23095 ( 0.05%) 11221906 ( 0.04%) 485.90
ip6 4646537 ( 10.84%) 3664585624 ( 11.98%) 788.67
other 13102 ( 0.03%) 1920457 ( 0.01%) 146.58
frag 5543 ( 0.01%) 4283047 ( 0.01%) 772.69
ip6 350808 ( 0.82%) 349811337 ( 1.14%) 997.16
tcp6 271143 ( 0.63%) 326620841 ( 1.07%) 1204.61
http(s) 9894 ( 0.02%) 9658447 ( 0.03%) 976.19
http(c) 7732 ( 0.02%) 749671 ( 0.00%) 96.96
smtp 352 ( 0.00%) 47029 ( 0.00%) 133.61
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 1390 ( 0.00%) 355207 ( 0.00%) 255.54
bgp 90 ( 0.00%) 18297 ( 0.00%) 203.30
other 251625 ( 0.59%) 315786819 ( 1.03%) 1254.99
udp6 62377 ( 0.15%) 20924195 ( 0.07%) 335.45
dns 58977 ( 0.14%) 20442565 ( 0.07%) 346.62
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 3398 ( 0.01%) 481400 ( 0.00%) 141.67
icmp6 16844 ( 0.04%) 1967048 ( 0.01%) 116.78
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 330 ( 0.00%) 283743 ( 0.00%) 859.83
tcpdump file: 201011181400.dump.gz (1088.17 MB)