Traffic Trace Info
DumpFile: 201011231400.dump
FileSize: 3025.90MB
Id: 201011231400
StartTime: Tue Nov 23 14:00:00 2010
EndTime: Tue Nov 23 14:15:00 2010
TotalTime: 899.93 seconds
TotalCapSize: -1693.70MB CapLen: 96 bytes
# of packets: 40866579 (31103.29MB)
AvgRate: 289.96Mbps stddev:39.30M
IP flow (unique src/dst pair) Information
# of flows: 838623 (avg. 48.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.4% 2.8% 2.2% 1.9% 1.6% 1.6% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 485208
Top 10 bandwidth usage (bytes/total in %):
14.9% 14.9% 10.1% 8.3% 6.1% 4.8% 4.6% 2.8% 2.8% 2.3%
# of IPv6 addresses: 4051
Top 10 bandwidth usage (bytes/total in %):
60.7% 50.7% 10.9% 6.7% 5.9% 5.6% 5.5% 4.7% 3.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011231400.pktlen.png)
detailed numbers
[ 32- 63]: 5868582
[ 64- 127]: 10557829
[ 128- 255]: 1397773
[ 256- 511]: 1171908
[ 512- 1023]: 1002793
[ 1024- 2047]: 20867694
Protocol Breakdown
![[protocol breakdown chart]](201011231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40866579 (100.00%) 32614159551 (100.00%) 798.06
ip 40557628 ( 99.24%) 32332210759 ( 99.14%) 797.19
tcp 30910935 ( 75.64%) 26842809201 ( 82.30%) 868.39
http(s) 13158240 ( 32.20%) 17826253384 ( 54.66%) 1354.76
http(c) 7278127 ( 17.81%) 835931475 ( 2.56%) 114.86
squid 193039 ( 0.47%) 81178281 ( 0.25%) 420.53
smtp 235499 ( 0.58%) 122454049 ( 0.38%) 519.98
ftp 119360 ( 0.29%) 90546765 ( 0.28%) 758.60
pop3 14669 ( 0.04%) 10823988 ( 0.03%) 737.88
imap 8769 ( 0.02%) 3130156 ( 0.01%) 356.96
telnet 1521 ( 0.00%) 114222 ( 0.00%) 75.10
ssh 73569 ( 0.18%) 11624430 ( 0.04%) 158.01
dns 8679 ( 0.02%) 688420 ( 0.00%) 79.32
bgp 617 ( 0.00%) 124059 ( 0.00%) 201.07
napster 56 ( 0.00%) 26042 ( 0.00%) 465.04
realaud 55 ( 0.00%) 4675 ( 0.00%) 85.00
rtsp 11941 ( 0.03%) 13531096 ( 0.04%) 1133.16
icecast 1853 ( 0.00%) 597930 ( 0.00%) 322.68
other 9804939 ( 23.99%) 7845780109 ( 24.06%) 800.19
udp 5762319 ( 14.10%) 2600980553 ( 7.98%) 451.38
dns 1117732 ( 2.74%) 163932868 ( 0.50%) 146.67
realaud 29 ( 0.00%) 4022 ( 0.00%) 138.69
halflif 57578 ( 0.14%) 13436520 ( 0.04%) 233.36
starcra 21 ( 0.00%) 4104 ( 0.00%) 195.43
everque 158 ( 0.00%) 30377 ( 0.00%) 192.26
unreal 15 ( 0.00%) 2450 ( 0.00%) 163.33
quake 34 ( 0.00%) 3545 ( 0.00%) 104.26
cuseeme 2 ( 0.00%) 168 ( 0.00%) 84.00
other 4586637 ( 11.22%) 2423476182 ( 7.43%) 528.38
icmp 461190 ( 1.13%) 112206087 ( 0.34%) 243.30
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 9377 ( 0.02%) 2226878 ( 0.01%) 237.48
ip6 3392254 ( 8.30%) 2770487833 ( 8.49%) 816.71
other 21373 ( 0.05%) 3481487 ( 0.01%) 162.89
frag 905 ( 0.00%) 988720 ( 0.00%) 1092.51
ip6 308951 ( 0.76%) 281948792 ( 0.86%) 912.60
tcp6 229593 ( 0.56%) 252708479 ( 0.77%) 1100.68
http(s) 6788 ( 0.02%) 6229137 ( 0.02%) 917.67
http(c) 22865 ( 0.06%) 2018177 ( 0.01%) 88.26
smtp 283 ( 0.00%) 110856 ( 0.00%) 391.72
ftp 85 ( 0.00%) 7707 ( 0.00%) 90.67
ssh 1518 ( 0.00%) 2227092 ( 0.01%) 1467.12
dns 1992 ( 0.00%) 509817 ( 0.00%) 255.93
bgp 96 ( 0.00%) 19612 ( 0.00%) 204.29
other 195966 ( 0.48%) 241586081 ( 0.74%) 1232.80
udp6 48393 ( 0.12%) 14989348 ( 0.05%) 309.74
dns 39666 ( 0.10%) 12824471 ( 0.04%) 323.31
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 8725 ( 0.02%) 2164670 ( 0.01%) 248.10
icmp6 12898 ( 0.03%) 1567528 ( 0.00%) 121.53
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17955 ( 0.04%) 12668131 ( 0.04%) 705.55
tcpdump file: 201011231400.dump.gz (983.73 MB)