Traffic Trace Info
DumpFile: 201011261400.dump
FileSize: 3157.56MB
Id: 201011261400
StartTime: Fri Nov 26 14:00:01 2010
EndTime: Fri Nov 26 14:15:00 2010
TotalTime: 899.27 seconds
TotalCapSize: -1606.68MB CapLen: 96 bytes
# of packets: 43781921 (29858.39MB)
AvgRate: 278.53Mbps stddev:21.72M
IP flow (unique src/dst pair) Information
# of flows: 980067 (avg. 44.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.3% 1.3% 1.1% 1.1% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 541781
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.3% 7.4% 6.8% 3.2% 2.5% 1.9% 1.7% 1.7% 1.7%
# of IPv6 addresses: 4818
Top 10 bandwidth usage (bytes/total in %):
16.2% 12.0% 12.0% 10.8% 10.0% 9.9% 9.1% 9.0% 9.0% 8.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011261400.pktlen.png)
detailed numbers
[ 32- 63]: 7729226
[ 64- 127]: 11205091
[ 128- 255]: 2130403
[ 256- 511]: 1802709
[ 512- 1023]: 1396720
[ 1024- 2047]: 19517772
Protocol Breakdown
![[protocol breakdown chart]](201011261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43781921 (100.00%) 31308788638 (100.00%) 715.11
ip 43525983 ( 99.42%) 31139659313 ( 99.46%) 715.43
tcp 28421532 ( 64.92%) 22596104563 ( 72.17%) 795.03
http(s) 13652875 ( 31.18%) 17756989014 ( 56.72%) 1300.60
http(c) 8822688 ( 20.15%) 1283756795 ( 4.10%) 145.51
squid 349452 ( 0.80%) 144073749 ( 0.46%) 412.28
smtp 244771 ( 0.56%) 99908277 ( 0.32%) 408.17
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 74531 ( 0.17%) 45972986 ( 0.15%) 616.83
pop3 24421 ( 0.06%) 14457093 ( 0.05%) 591.99
imap 4909 ( 0.01%) 1788404 ( 0.01%) 364.31
telnet 2164 ( 0.00%) 148777 ( 0.00%) 68.75
ssh 37836 ( 0.09%) 7885567 ( 0.03%) 208.41
dns 13252 ( 0.03%) 1202461 ( 0.00%) 90.74
bgp 561 ( 0.00%) 96938 ( 0.00%) 172.80
napster 116 ( 0.00%) 13648 ( 0.00%) 117.66
realaud 12 ( 0.00%) 2647 ( 0.00%) 220.58
rtsp 22136 ( 0.05%) 21487291 ( 0.07%) 970.69
icecast 5927 ( 0.01%) 817728 ( 0.00%) 137.97
other 5165545 ( 11.80%) 3217457204 ( 10.28%) 622.87
udp 9326547 ( 21.30%) 4696786128 ( 15.00%) 503.59
dns 975444 ( 2.23%) 152848974 ( 0.49%) 156.70
realaud 24 ( 0.00%) 2465 ( 0.00%) 102.71
halflif 70769 ( 0.16%) 19255645 ( 0.06%) 272.09
starcra 19 ( 0.00%) 3513 ( 0.00%) 184.89
everque 1967 ( 0.00%) 239343 ( 0.00%) 121.68
unreal 6 ( 0.00%) 979 ( 0.00%) 163.17
quake 18 ( 0.00%) 2400 ( 0.00%) 133.33
cuseeme 16 ( 0.00%) 1437 ( 0.00%) 89.81
other 8241694 ( 18.82%) 4518328700 ( 14.43%) 548.23
icmp 756796 ( 1.73%) 142818394 ( 0.46%) 188.71
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ip6 4696827 ( 10.73%) 3666055659 ( 11.71%) 780.54
other 324102 ( 0.74%) 37875959 ( 0.12%) 116.86
frag 223154 ( 0.51%) 165826711 ( 0.53%) 743.10
ip6 255938 ( 0.58%) 169129325 ( 0.54%) 660.82
tcp6 183266 ( 0.42%) 150718123 ( 0.48%) 822.40
http(s) 15928 ( 0.04%) 22398782 ( 0.07%) 1406.25
http(c) 14509 ( 0.03%) 1328018 ( 0.00%) 91.53
smtp 168 ( 0.00%) 37028 ( 0.00%) 220.40
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
dns 999 ( 0.00%) 260819 ( 0.00%) 261.08
bgp 95 ( 0.00%) 19697 ( 0.00%) 207.34
other 151483 ( 0.35%) 126666285 ( 0.40%) 836.17
udp6 50664 ( 0.12%) 15822664 ( 0.05%) 312.31
dns 45564 ( 0.10%) 15001268 ( 0.05%) 329.24
starcra 97 ( 0.00%) 10404 ( 0.00%) 107.26
unreal 2 ( 0.00%) 240 ( 0.00%) 120.00
other 5001 ( 0.01%) 810752 ( 0.00%) 162.12
icmp6 21553 ( 0.05%) 2292140 ( 0.01%) 106.35
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
rtopt6 53 ( 0.00%) 7632 ( 0.00%) 144.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 290 ( 0.00%) 273492 ( 0.00%) 943.08
tcpdump file: 201011261400.dump.gz (1122.41 MB)