Traffic Trace Info
DumpFile: 201011211400.dump
FileSize: 3032.59MB
Id: 201011211400
StartTime: Sun Nov 21 14:00:00 2010
EndTime: Sun Nov 21 14:15:00 2010
TotalTime: 900.19 seconds
TotalCapSize: -1694.89MB CapLen: 96 bytes
# of packets: 41382602 (30266.65MB)
AvgRate: 282.05Mbps stddev:32.23M
IP flow (unique src/dst pair) Information
# of flows: 1018928 (avg. 40.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.1% 2.8% 2.7% 2.3% 1.9% 1.7% 1.6% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 619194
Top 10 bandwidth usage (bytes/total in %):
11.5% 11.5% 10.8% 10.1% 8.5% 8.1% 4.9% 2.9% 2.8% 2.3%
# of IPv6 addresses: 3680
Top 10 bandwidth usage (bytes/total in %):
41.3% 39.8% 13.4% 13.4% 9.5% 9.5% 6.5% 6.5% 5.5% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011211400.pktlen.png)
detailed numbers
[ 32- 63]: 5330046
[ 64- 127]: 11626156
[ 128- 255]: 1835933
[ 256- 511]: 1505153
[ 512- 1023]: 953843
[ 1024- 2047]: 20131471
Protocol Breakdown
![[protocol breakdown chart]](201011211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41382602 (100.00%) 31736882347 (100.00%) 766.91
ip 41154535 ( 99.45%) 31592401183 ( 99.54%) 767.65
tcp 27636009 ( 66.78%) 24444114846 ( 77.02%) 884.50
http(s) 11556323 ( 27.93%) 15513174116 ( 48.88%) 1342.40
http(c) 5749099 ( 13.89%) 880190758 ( 2.77%) 153.10
squid 276720 ( 0.67%) 147116507 ( 0.46%) 531.64
smtp 179876 ( 0.43%) 58933622 ( 0.19%) 327.63
ftp 69580 ( 0.17%) 41765622 ( 0.13%) 600.25
pop3 11015 ( 0.03%) 4433585 ( 0.01%) 402.50
imap 3972 ( 0.01%) 2096056 ( 0.01%) 527.71
telnet 1486 ( 0.00%) 104647 ( 0.00%) 70.42
ssh 344603 ( 0.83%) 32950445 ( 0.10%) 95.62
dns 196882 ( 0.48%) 185523736 ( 0.58%) 942.31
bgp 536 ( 0.00%) 84130 ( 0.00%) 156.96
napster 14 ( 0.00%) 1278 ( 0.00%) 91.29
realaud 126 ( 0.00%) 17904 ( 0.00%) 142.10
rtsp 15346 ( 0.04%) 15825624 ( 0.05%) 1031.25
icecast 1794 ( 0.00%) 263666 ( 0.00%) 146.97
hotline 25 ( 0.00%) 1907 ( 0.00%) 76.28
other 9228608 ( 22.30%) 7561631003 ( 23.83%) 819.37
udp 8462917 ( 20.45%) 3616521707 ( 11.40%) 427.34
dns 1022092 ( 2.47%) 141039962 ( 0.44%) 137.99
realaud 16 ( 0.00%) 1947 ( 0.00%) 121.69
halflif 169569 ( 0.41%) 40795858 ( 0.13%) 240.59
starcra 41 ( 0.00%) 4617 ( 0.00%) 112.61
everque 43938 ( 0.11%) 12592454 ( 0.04%) 286.60
unreal 21 ( 0.00%) 3049 ( 0.00%) 145.19
quake 60 ( 0.00%) 5339 ( 0.00%) 88.98
cuseeme 2 ( 0.00%) 154 ( 0.00%) 77.00
other 7227049 ( 17.46%) 3421974411 ( 10.78%) 473.50
icmp 503242 ( 1.22%) 116591720 ( 0.37%) 231.68
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 5112 ( 0.01%) 732752 ( 0.00%) 143.34
ip6 4534341 ( 10.96%) 3412428189 ( 10.75%) 752.57
other 12734 ( 0.03%) 1993249 ( 0.01%) 156.53
frag 741 ( 0.00%) 822297 ( 0.00%) 1109.71
ip6 228067 ( 0.55%) 144481164 ( 0.46%) 633.50
tcp6 145563 ( 0.35%) 109589806 ( 0.35%) 752.87
http(s) 6286 ( 0.02%) 8049461 ( 0.03%) 1280.54
http(c) 11190 ( 0.03%) 1041288 ( 0.00%) 93.06
squid 67 ( 0.00%) 5658 ( 0.00%) 84.45
smtp 149 ( 0.00%) 17651 ( 0.00%) 118.46
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
dns 818 ( 0.00%) 209922 ( 0.00%) 256.63
bgp 136 ( 0.00%) 57966 ( 0.00%) 426.22
other 126857 ( 0.31%) 100202489 ( 0.32%) 789.89
udp6 38366 ( 0.09%) 12180943 ( 0.04%) 317.49
dns 33973 ( 0.08%) 11420727 ( 0.04%) 336.17
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
other 4392 ( 0.01%) 760116 ( 0.00%) 173.07
icmp6 14213 ( 0.03%) 1696469 ( 0.01%) 119.36
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 29813 ( 0.07%) 20998690 ( 0.07%) 704.35
tcpdump file: 201011211400.dump.gz (1009.79 MB)