Traffic Trace Info
DumpFile: 201011221400.dump
FileSize: 3939.93MB
Id: 201011221400
StartTime: Mon Nov 22 14:00:00 2010
EndTime: Mon Nov 22 14:15:00 2010
TotalTime: 900.03 seconds
TotalCapSize: -976.19MB CapLen: 96 bytes
# of packets: 53745119 (39750.10MB)
AvgRate: 370.56Mbps stddev:42.16M
IP flow (unique src/dst pair) Information
# of flows: 1039469 (avg. 51.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
24.3% 1.6% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 614117
Top 10 bandwidth usage (bytes/total in %):
25.1% 25.1% 7.4% 5.3% 4.7% 3.2% 2.2% 2.1% 1.8% 1.7%
# of IPv6 addresses: 4097
Top 10 bandwidth usage (bytes/total in %):
56.6% 39.8% 19.1% 18.6% 18.6% 4.4% 4.4% 3.4% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011221400.pktlen.png)
detailed numbers
[ 32- 63]: 6756879
[ 64- 127]: 15755261
[ 128- 255]: 1941829
[ 256- 511]: 1592031
[ 512- 1023]: 990785
[ 1024- 2047]: 26708334
Protocol Breakdown
![[protocol breakdown chart]](201011221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53745119 (100.00%) 41681005415 (100.00%) 775.53
ip 53384137 ( 99.33%) 41352456509 ( 99.21%) 774.62
tcp 39658929 ( 73.79%) 34081603019 ( 81.77%) 859.37
http(s) 13632382 ( 25.36%) 18194908275 ( 43.65%) 1334.68
http(c) 8195188 ( 15.25%) 1300839201 ( 3.12%) 158.73
squid 243395 ( 0.45%) 133160966 ( 0.32%) 547.10
smtp 271634 ( 0.51%) 159709939 ( 0.38%) 587.96
ftp 406122 ( 0.76%) 366457344 ( 0.88%) 902.33
pop3 16201 ( 0.03%) 6831064 ( 0.02%) 421.64
imap 16934 ( 0.03%) 10791940 ( 0.03%) 637.29
telnet 1387 ( 0.00%) 95372 ( 0.00%) 68.76
ssh 69190 ( 0.13%) 9935317 ( 0.02%) 143.59
dns 12784 ( 0.02%) 1190035 ( 0.00%) 93.09
bgp 560 ( 0.00%) 108364 ( 0.00%) 193.51
napster 57 ( 0.00%) 13540 ( 0.00%) 237.54
realaud 75 ( 0.00%) 7199 ( 0.00%) 95.99
rtsp 11732 ( 0.02%) 13534632 ( 0.03%) 1153.65
icecast 1935 ( 0.00%) 656544 ( 0.00%) 339.30
hotline 18 ( 0.00%) 5456 ( 0.00%) 303.11
other 16779335 ( 31.22%) 13883357831 ( 33.31%) 827.41
udp 9145366 ( 17.02%) 4681943125 ( 11.23%) 511.95
dns 1221017 ( 2.27%) 179630277 ( 0.43%) 147.12
realaud 38 ( 0.00%) 3933 ( 0.00%) 103.50
halflif 698 ( 0.00%) 255778 ( 0.00%) 366.44
starcra 49 ( 0.00%) 7430 ( 0.00%) 151.63
everque 8905 ( 0.02%) 1004528 ( 0.00%) 112.80
unreal 3 ( 0.00%) 199 ( 0.00%) 66.33
quake 85 ( 0.00%) 7414 ( 0.00%) 87.22
cuseeme 10 ( 0.00%) 976 ( 0.00%) 97.60
other 7909622 ( 14.72%) 4500579406 ( 10.80%) 569.00
icmp 583535 ( 1.09%) 121776166 ( 0.29%) 208.69
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 89207 ( 0.17%) 15857546 ( 0.04%) 177.76
ip6 3849650 ( 7.16%) 2384470281 ( 5.72%) 619.40
other 57270 ( 0.11%) 66787652 ( 0.16%) 1166.19
frag 26476 ( 0.05%) 20492092 ( 0.05%) 773.99
ip6 360982 ( 0.67%) 328548906 ( 0.79%) 910.15
tcp6 287817 ( 0.54%) 306456469 ( 0.74%) 1064.76
http(s) 8043 ( 0.01%) 9450684 ( 0.02%) 1175.02
http(c) 16708 ( 0.03%) 1546164 ( 0.00%) 92.54
squid 65 ( 0.00%) 5502 ( 0.00%) 84.65
smtp 1136 ( 0.00%) 125794 ( 0.00%) 110.73
ftp 601 ( 0.00%) 291542 ( 0.00%) 485.09
ssh 5 ( 0.00%) 558 ( 0.00%) 111.60
dns 1380 ( 0.00%) 364230 ( 0.00%) 263.93
bgp 93 ( 0.00%) 21793 ( 0.00%) 234.33
other 259786 ( 0.48%) 294650202 ( 0.71%) 1134.20
udp6 55906 ( 0.10%) 18643570 ( 0.04%) 333.48
dns 43848 ( 0.08%) 15470100 ( 0.04%) 352.81
other 12058 ( 0.02%) 3173470 ( 0.01%) 263.18
icmp6 15036 ( 0.03%) 1830304 ( 0.00%) 121.73
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2110 ( 0.00%) 1603189 ( 0.00%) 759.81
tcpdump file: 201011221400.dump.gz (1297.74 MB)