Traffic Trace Info
DumpFile: 201011241400.dump
FileSize: 3534.17MB
Id: 201011241400
StartTime: Wed Nov 24 14:00:01 2010
EndTime: Wed Nov 24 14:15:01 2010
TotalTime: 900.13 seconds
TotalCapSize: -1295.92MB CapLen: 96 bytes
# of packets: 48105307 (33742.32MB)
AvgRate: 314.43Mbps stddev:38.14M
IP flow (unique src/dst pair) Information
# of flows: 942051 (avg. 51.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.5% 1.9% 1.3% 1.3% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 516080
Top 10 bandwidth usage (bytes/total in %):
15.0% 15.0% 10.2% 6.4% 6.3% 4.7% 3.1% 3.0% 2.6% 2.0%
# of IPv6 addresses: 4452
Top 10 bandwidth usage (bytes/total in %):
21.3% 20.6% 11.0% 7.9% 7.9% 7.6% 7.6% 7.1% 6.9% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011241400.pktlen.png)
detailed numbers
[ 32- 63]: 6688202
[ 64- 127]: 14705647
[ 128- 255]: 1888324
[ 256- 511]: 1469299
[ 512- 1023]: 973131
[ 1024- 2047]: 22380704
Protocol Breakdown
![[protocol breakdown chart]](201011241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48105307 (100.00%) 35381391768 (100.00%) 735.50
ip 47889845 ( 99.55%) 35260005286 ( 99.66%) 736.27
tcp 36145485 ( 75.14%) 29371452271 ( 83.01%) 812.59
http(s) 13868819 ( 28.83%) 18295134920 ( 51.71%) 1319.16
http(c) 10481849 ( 21.79%) 1723116187 ( 4.87%) 164.39
squid 212873 ( 0.44%) 110394752 ( 0.31%) 518.59
smtp 285583 ( 0.59%) 134093003 ( 0.38%) 469.54
ftp 70899 ( 0.15%) 40425090 ( 0.11%) 570.18
pop3 27363 ( 0.06%) 7027500 ( 0.02%) 256.82
imap 5826 ( 0.01%) 2318088 ( 0.01%) 397.89
telnet 735 ( 0.00%) 49428 ( 0.00%) 67.25
ssh 368539 ( 0.77%) 240965514 ( 0.68%) 653.84
dns 12358 ( 0.03%) 1105050 ( 0.00%) 89.42
bgp 588 ( 0.00%) 117474 ( 0.00%) 199.79
napster 71 ( 0.00%) 7863 ( 0.00%) 110.75
realaud 23 ( 0.00%) 3949 ( 0.00%) 171.70
rtsp 93494 ( 0.19%) 76815643 ( 0.22%) 821.61
icecast 1624 ( 0.00%) 526853 ( 0.00%) 324.42
hotline 49 ( 0.00%) 3176 ( 0.00%) 64.82
other 10714791 ( 22.27%) 8739347721 ( 24.70%) 815.63
udp 7638407 ( 15.88%) 3429030977 ( 9.69%) 448.92
dns 1333152 ( 2.77%) 203126174 ( 0.57%) 152.37
realaud 36 ( 0.00%) 4684 ( 0.00%) 130.11
halflif 123999 ( 0.26%) 27674653 ( 0.08%) 223.18
starcra 21 ( 0.00%) 3166 ( 0.00%) 150.76
everque 7373 ( 0.02%) 811127 ( 0.00%) 110.01
unreal 21 ( 0.00%) 2516 ( 0.00%) 119.81
quake 42 ( 0.00%) 4870 ( 0.00%) 115.95
cuseeme 7 ( 0.00%) 650 ( 0.00%) 92.86
other 6173598 ( 12.83%) 3197285604 ( 9.04%) 517.90
icmp 548449 ( 1.14%) 117561012 ( 0.33%) 214.35
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 8604 ( 0.02%) 3234488 ( 0.01%) 375.93
ip6 3537567 ( 7.35%) 2337055207 ( 6.61%) 660.64
other 11153 ( 0.02%) 1652611 ( 0.00%) 148.18
frag 869 ( 0.00%) 960238 ( 0.00%) 1104.99
ip6 215462 ( 0.45%) 121386482 ( 0.34%) 563.38
tcp6 120496 ( 0.25%) 86458433 ( 0.24%) 717.52
http(s) 9103 ( 0.02%) 8377481 ( 0.02%) 920.30
http(c) 7204 ( 0.01%) 722735 ( 0.00%) 100.32
smtp 1210 ( 0.00%) 117424 ( 0.00%) 97.04
ftp 58 ( 0.00%) 5162 ( 0.00%) 89.00
dns 1440 ( 0.00%) 362031 ( 0.00%) 251.41
bgp 92 ( 0.00%) 18224 ( 0.00%) 198.09
other 101389 ( 0.21%) 76855376 ( 0.22%) 758.02
udp6 58860 ( 0.12%) 19557084 ( 0.06%) 332.26
dns 53133 ( 0.11%) 18767282 ( 0.05%) 353.21
everque 1 ( 0.00%) 168 ( 0.00%) 168.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 5725 ( 0.01%) 789530 ( 0.00%) 137.91
icmp6 16997 ( 0.04%) 1940433 ( 0.01%) 114.16
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
rtopt6 21 ( 0.00%) 3024 ( 0.00%) 144.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 18975 ( 0.04%) 13412116 ( 0.04%) 706.83
tcpdump file: 201011241400.dump.gz (1195.95 MB)