Traffic Trace Info
DumpFile: 201011201400.dump
FileSize: 2567.04MB
Id: 201011201400
StartTime: Sat Nov 20 14:00:00 2010
EndTime: Sat Nov 20 14:15:01 2010
TotalTime: 900.78 seconds
TotalCapSize: 2027.47MB CapLen: 96 bytes
# of packets: 35358651 (25236.38MB)
AvgRate: 235.04Mbps stddev:27.73M
IP flow (unique src/dst pair) Information
# of flows: 793625 (avg. 44.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 2.9% 1.7% 1.5% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 466554
Top 10 bandwidth usage (bytes/total in %):
10.6% 10.5% 10.5% 8.0% 7.9% 5.8% 2.9% 2.9% 2.7% 2.5%
# of IPv6 addresses: 3595
Top 10 bandwidth usage (bytes/total in %):
31.6% 30.2% 11.9% 11.8% 10.2% 10.2% 8.8% 5.4% 4.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011201400.pktlen.png)
detailed numbers
[ 32- 63]: 5057210
[ 64- 127]: 9680112
[ 128- 255]: 1611495
[ 256- 511]: 1444742
[ 512- 1023]: 801328
[ 1024- 2047]: 16763764
Protocol Breakdown
![[protocol breakdown chart]](201011201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35358651 (100.00%) 26462262792 (100.00%) 748.40
ip 35172004 ( 99.47%) 26375381449 ( 99.67%) 749.90
tcp 22566186 ( 63.82%) 19782955497 ( 74.76%) 876.66
http(s) 10466965 ( 29.60%) 14083902547 ( 53.22%) 1345.56
http(c) 5615999 ( 15.88%) 595829411 ( 2.25%) 106.09
squid 245862 ( 0.70%) 105136684 ( 0.40%) 427.62
smtp 154360 ( 0.44%) 28781137 ( 0.11%) 186.45
ftp 54267 ( 0.15%) 11847491 ( 0.04%) 218.32
pop3 14687 ( 0.04%) 7584741 ( 0.03%) 516.43
imap 4960 ( 0.01%) 3271510 ( 0.01%) 659.58
telnet 1469 ( 0.00%) 107550 ( 0.00%) 73.21
ssh 50565 ( 0.14%) 28670730 ( 0.11%) 567.01
dns 10715 ( 0.03%) 932255 ( 0.00%) 87.00
bgp 559 ( 0.00%) 98626 ( 0.00%) 176.43
napster 98 ( 0.00%) 114262 ( 0.00%) 1165.94
realaud 75 ( 0.00%) 10836 ( 0.00%) 144.48
rtsp 1728 ( 0.00%) 119342 ( 0.00%) 69.06
icecast 1340 ( 0.00%) 325895 ( 0.00%) 243.21
hotline 10 ( 0.00%) 2640 ( 0.00%) 264.00
other 5942527 ( 16.81%) 4916219840 ( 18.58%) 827.29
udp 7879475 ( 22.28%) 3589042417 ( 13.56%) 455.49
dns 1142683 ( 3.23%) 164057895 ( 0.62%) 143.57
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 24 ( 0.00%) 1858 ( 0.00%) 77.42
halflif 91256 ( 0.26%) 21576623 ( 0.08%) 236.44
starcra 34933 ( 0.10%) 2342426 ( 0.01%) 67.05
everque 100 ( 0.00%) 22288 ( 0.00%) 222.88
unreal 8 ( 0.00%) 943 ( 0.00%) 117.88
quake 3265 ( 0.01%) 2613689 ( 0.01%) 800.52
cuseeme 4 ( 0.00%) 331 ( 0.00%) 82.75
other 6607036 ( 18.69%) 3398301162 ( 12.84%) 514.35
icmp 683622 ( 1.93%) 132500768 ( 0.50%) 193.82
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5330 ( 0.02%) 825348 ( 0.00%) 154.85
ip6 4024590 ( 11.38%) 2868119789 ( 10.84%) 712.65
other 12621 ( 0.04%) 1918910 ( 0.01%) 152.04
frag 1856 ( 0.01%) 1981832 ( 0.01%) 1067.80
ip6 186647 ( 0.53%) 86881343 ( 0.33%) 465.48
tcp6 113242 ( 0.32%) 60767155 ( 0.23%) 536.61
http(s) 19182 ( 0.05%) 27783106 ( 0.10%) 1448.39
http(c) 28876 ( 0.08%) 9564791 ( 0.04%) 331.24
smtp 372 ( 0.00%) 51307 ( 0.00%) 137.92
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 1063 ( 0.00%) 267873 ( 0.00%) 252.00
bgp 92 ( 0.00%) 24787 ( 0.00%) 269.42
other 63597 ( 0.18%) 23069920 ( 0.09%) 362.75
udp6 45382 ( 0.13%) 13673765 ( 0.05%) 301.30
dns 41515 ( 0.12%) 12660898 ( 0.05%) 304.97
everque 6 ( 0.00%) 512 ( 0.00%) 85.33
other 3861 ( 0.01%) 1012355 ( 0.00%) 262.20
icmp6 12636 ( 0.04%) 1607304 ( 0.01%) 127.20
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15274 ( 0.04%) 10817695 ( 0.04%) 708.24
tcpdump file: 201011201400.dump.gz (889.66 MB)