Traffic Trace Info
DumpFile: 201011191400.dump
FileSize: 3042.60MB
Id: 201011191400
StartTime: Fri Nov 19 14:00:00 2010
EndTime: Fri Nov 19 14:15:00 2010
TotalTime: 899.87 seconds
TotalCapSize: -1686.83MB CapLen: 96 bytes
# of packets: 41509590 (30178.49MB)
AvgRate: 281.31Mbps stddev:26.87M
IP flow (unique src/dst pair) Information
# of flows: 1144902 (avg. 36.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 1.2% 1.2% 0.9% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 663572
Top 10 bandwidth usage (bytes/total in %):
10.7% 10.0% 5.3% 5.2% 4.7% 3.2% 2.4% 2.2% 2.1% 1.8%
# of IPv6 addresses: 3978
Top 10 bandwidth usage (bytes/total in %):
94.9% 75.7% 19.3% 0.9% 0.9% 0.9% 0.6% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011191400.pktlen.png)
detailed numbers
[ 32- 63]: 6147296
[ 64- 127]: 10728058
[ 128- 255]: 1844964
[ 256- 511]: 1614239
[ 512- 1023]: 1111333
[ 1024- 2047]: 20063700
Protocol Breakdown
![[protocol breakdown chart]](201011191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41509590 (100.00%) 31644443172 (100.00%) 762.34
ip 40496381 ( 97.56%) 30317424374 ( 95.81%) 748.65
tcp 26931601 ( 64.88%) 22714341673 ( 71.78%) 843.41
http(s) 13817094 ( 33.29%) 18399565468 ( 58.14%) 1331.65
http(c) 8588549 ( 20.69%) 1512387767 ( 4.78%) 176.09
squid 320112 ( 0.77%) 154545223 ( 0.49%) 482.78
smtp 302025 ( 0.73%) 129007890 ( 0.41%) 427.14
ftp 30132 ( 0.07%) 5267405 ( 0.02%) 174.81
pop3 18164 ( 0.04%) 5480551 ( 0.02%) 301.73
imap 4336 ( 0.01%) 1316497 ( 0.00%) 303.62
telnet 5937 ( 0.01%) 424550 ( 0.00%) 71.51
ssh 27353 ( 0.07%) 8968809 ( 0.03%) 327.89
dns 11543 ( 0.03%) 1022437 ( 0.00%) 88.58
bgp 566 ( 0.00%) 93534 ( 0.00%) 165.25
napster 6 ( 0.00%) 718 ( 0.00%) 119.67
realaud 13 ( 0.00%) 1015 ( 0.00%) 78.08
rtsp 9201 ( 0.02%) 7867815 ( 0.02%) 855.10
icecast 1179 ( 0.00%) 391048 ( 0.00%) 331.68
hotline 17 ( 0.00%) 1062 ( 0.00%) 62.47
other 3795373 ( 9.14%) 2487999824 ( 7.86%) 655.53
udp 8347347 ( 20.11%) 4291433333 ( 13.56%) 514.11
dns 1300100 ( 3.13%) 192869240 ( 0.61%) 148.35
realaud 15 ( 0.00%) 1548 ( 0.00%) 103.20
halflif 28 ( 0.00%) 3390 ( 0.00%) 121.07
starcra 28 ( 0.00%) 4721 ( 0.00%) 168.61
everque 218 ( 0.00%) 31301 ( 0.00%) 143.58
unreal 12 ( 0.00%) 4716 ( 0.00%) 393.00
quake 15 ( 0.00%) 2030 ( 0.00%) 135.33
cuseeme 8 ( 0.00%) 684 ( 0.00%) 85.50
other 7045703 ( 16.97%) 4098280243 ( 12.95%) 581.67
icmp 657854 ( 1.58%) 138310385 ( 0.44%) 210.24
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 15378 ( 0.04%) 4763276 ( 0.02%) 309.75
ip6 4526795 ( 10.91%) 3163073763 ( 10.00%) 698.74
other 17226 ( 0.04%) 5483224 ( 0.02%) 318.31
frag 7887 ( 0.02%) 6010644 ( 0.02%) 762.10
ip6 1013209 ( 2.44%) 1327018798 ( 4.19%) 1309.72
tcp6 944250 ( 2.27%) 1308129001 ( 4.13%) 1385.36
http(s) 6089 ( 0.01%) 5616372 ( 0.02%) 922.38
http(c) 16421 ( 0.04%) 9188536 ( 0.03%) 559.56
squid 12 ( 0.00%) 8583 ( 0.00%) 715.25
smtp 280 ( 0.00%) 126684 ( 0.00%) 452.44
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 1059 ( 0.00%) 276434 ( 0.00%) 261.03
bgp 100 ( 0.00%) 20550 ( 0.00%) 205.50
other 920229 ( 2.22%) 1292886471 ( 4.09%) 1404.96
udp6 52259 ( 0.13%) 16114502 ( 0.05%) 308.36
dns 48725 ( 0.12%) 15430706 ( 0.05%) 316.69
halflif 2 ( 0.00%) 211 ( 0.00%) 105.50
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 3531 ( 0.01%) 683480 ( 0.00%) 193.57
icmp6 15358 ( 0.04%) 1840830 ( 0.01%) 119.86
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1227 ( 0.00%) 918805 ( 0.00%) 748.82
tcpdump file: 201011191400.dump.gz (1020.23 MB)