Traffic Trace Info
DumpFile: 201011251400.dump
FileSize: 4019.14MB
Id: 201011251400
StartTime: Thu Nov 25 14:00:01 2010
EndTime: Thu Nov 25 14:15:00 2010
TotalTime: 899.52 seconds
TotalCapSize: -910.64MB CapLen: 96 bytes
# of packets: 54638634 (38689.62MB)
AvgRate: 360.83Mbps stddev:30.60M
IP flow (unique src/dst pair) Information
# of flows: 984185 (avg. 55.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.3% 1.3% 1.3% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 530051
Top 10 bandwidth usage (bytes/total in %):
21.0% 21.0% 7.7% 6.4% 5.2% 5.0% 2.0% 1.7% 1.4% 1.4%
# of IPv6 addresses: 4082
Top 10 bandwidth usage (bytes/total in %):
34.9% 28.6% 28.6% 28.1% 14.7% 8.7% 5.1% 4.1% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011251400.pktlen.png)
detailed numbers
[ 32- 63]: 7854234
[ 64- 127]: 15760338
[ 128- 255]: 2092161
[ 256- 511]: 1852131
[ 512- 1023]: 1340782
[ 1024- 2047]: 25738988
Protocol Breakdown
![[protocol breakdown chart]](201011251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54638634 (100.00%) 40569008699 (100.00%) 742.50
ip 54407543 ( 99.58%) 40384528108 ( 99.55%) 742.26
tcp 40704808 ( 74.50%) 32911129187 ( 81.12%) 808.53
http(s) 14151815 ( 25.90%) 18636035553 ( 45.94%) 1316.87
http(c) 11739575 ( 21.49%) 2515103479 ( 6.20%) 214.24
squid 272338 ( 0.50%) 120061795 ( 0.30%) 440.86
smtp 378496 ( 0.69%) 241695715 ( 0.60%) 638.57
ftp 50765 ( 0.09%) 29714109 ( 0.07%) 585.33
pop3 23447 ( 0.04%) 13115842 ( 0.03%) 559.38
imap 14934 ( 0.03%) 4448192 ( 0.01%) 297.86
telnet 978 ( 0.00%) 90181 ( 0.00%) 92.21
ssh 869119 ( 1.59%) 148497502 ( 0.37%) 170.86
dns 12243 ( 0.02%) 1137633 ( 0.00%) 92.92
bgp 561 ( 0.00%) 97351 ( 0.00%) 173.53
napster 35 ( 0.00%) 4686 ( 0.00%) 133.89
realaud 18 ( 0.00%) 2562 ( 0.00%) 142.33
rtsp 53852 ( 0.10%) 58301282 ( 0.14%) 1082.62
icecast 1336 ( 0.00%) 571533 ( 0.00%) 427.79
other 13135294 ( 24.04%) 11142251652 ( 27.46%) 848.27
udp 8823355 ( 16.15%) 4141289038 ( 10.21%) 469.36
dns 1115322 ( 2.04%) 163000428 ( 0.40%) 146.15
realaud 60 ( 0.00%) 10141 ( 0.00%) 169.02
halflif 181817 ( 0.33%) 46774434 ( 0.12%) 257.26
starcra 22 ( 0.00%) 3087 ( 0.00%) 140.32
everque 2243 ( 0.00%) 311921 ( 0.00%) 139.06
unreal 4 ( 0.00%) 431 ( 0.00%) 107.75
quake 99 ( 0.00%) 9051 ( 0.00%) 91.42
cuseeme 9 ( 0.00%) 992 ( 0.00%) 110.22
other 7522054 ( 13.77%) 3930904657 ( 9.69%) 522.58
icmp 531297 ( 0.97%) 115097147 ( 0.28%) 216.63
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 9855 ( 0.02%) 2529546 ( 0.01%) 256.68
ip6 4319233 ( 7.91%) 3211749378 ( 7.92%) 743.59
other 18815 ( 0.03%) 2715092 ( 0.01%) 144.30
frag 8808 ( 0.02%) 6893051 ( 0.02%) 782.59
ip6 231091 ( 0.42%) 184480591 ( 0.45%) 798.30
tcp6 161345 ( 0.30%) 162302768 ( 0.40%) 1005.94
http(s) 24728 ( 0.05%) 34245587 ( 0.08%) 1384.89
http(c) 25804 ( 0.05%) 2331630 ( 0.01%) 90.36
smtp 448 ( 0.00%) 77739 ( 0.00%) 173.52
ftp 115 ( 0.00%) 10413 ( 0.00%) 90.55
dns 1243 ( 0.00%) 315264 ( 0.00%) 253.63
bgp 89 ( 0.00%) 18811 ( 0.00%) 211.36
other 108918 ( 0.20%) 125303324 ( 0.31%) 1150.44
udp6 49727 ( 0.09%) 16295216 ( 0.04%) 327.69
dns 46527 ( 0.09%) 15745743 ( 0.04%) 338.42
everque 2 ( 0.00%) 295 ( 0.00%) 147.50
other 3198 ( 0.01%) 549178 ( 0.00%) 171.73
icmp6 14227 ( 0.03%) 1776374 ( 0.00%) 124.86
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5682 ( 0.01%) 4091213 ( 0.01%) 720.03
tcpdump file: 201011251400.dump.gz (1349.67 MB)