Traffic Trace Info
DumpFile: 201011291400.dump
FileSize: 2968.43MB
Id: 201011291400
StartTime: Mon Nov 29 14:00:01 2010
EndTime: Mon Nov 29 14:15:01 2010
TotalTime: 899.98 seconds
TotalCapSize: -1757.42MB CapLen: 96 bytes
# of packets: 41275391 (28890.46MB)
AvgRate: 269.28Mbps stddev:25.71M
IP flow (unique src/dst pair) Information
# of flows: 986302 (avg. 41.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.3% 1.3% 1.2% 1.0% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 517317
Top 10 bandwidth usage (bytes/total in %):
6.7% 6.0% 4.2% 2.9% 2.8% 2.6% 2.3% 2.2% 2.1% 2.1%
# of IPv6 addresses: 4401
Top 10 bandwidth usage (bytes/total in %):
40.6% 28.7% 12.2% 11.5% 11.5% 9.6% 9.3% 6.9% 6.9% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011291400.pktlen.png)
detailed numbers
[ 32- 63]: 8324212
[ 64- 127]: 9890011
[ 128- 255]: 1626719
[ 256- 511]: 1430014
[ 512- 1023]: 1015509
[ 1024- 2047]: 18988926
Protocol Breakdown
![[protocol breakdown chart]](201011291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41275391 (100.00%) 30293840420 (100.00%) 733.94
ip 41005362 ( 99.35%) 30072796270 ( 99.27%) 733.39
tcp 30724516 ( 74.44%) 24802581996 ( 81.87%) 807.26
http(s) 13836513 ( 33.52%) 18249686472 ( 60.24%) 1318.95
http(c) 9968623 ( 24.15%) 1901307875 ( 6.28%) 190.73
squid 316732 ( 0.77%) 144364538 ( 0.48%) 455.79
smtp 329252 ( 0.80%) 218384206 ( 0.72%) 663.27
ftp 78045 ( 0.19%) 45086626 ( 0.15%) 577.70
pop3 33295 ( 0.08%) 12210095 ( 0.04%) 366.72
imap 392796 ( 0.95%) 564947499 ( 1.86%) 1438.27
telnet 762 ( 0.00%) 62272 ( 0.00%) 81.72
ssh 116407 ( 0.28%) 34396841 ( 0.11%) 295.49
dns 11487 ( 0.03%) 1058826 ( 0.00%) 92.18
bgp 809 ( 0.00%) 287694 ( 0.00%) 355.62
napster 46 ( 0.00%) 6087 ( 0.00%) 132.33
realaud 350 ( 0.00%) 52190 ( 0.00%) 149.11
rtsp 27203 ( 0.07%) 26895146 ( 0.09%) 988.68
icecast 1362 ( 0.00%) 299770 ( 0.00%) 220.10
hotline 16 ( 0.00%) 2499 ( 0.00%) 156.19
other 5610810 ( 13.59%) 3603532880 ( 11.90%) 642.25
udp 6954147 ( 16.85%) 3301630901 ( 10.90%) 474.77
dns 998904 ( 2.42%) 156432112 ( 0.52%) 156.60
realaud 24 ( 0.00%) 3890 ( 0.00%) 162.08
halflif 1055 ( 0.00%) 375390 ( 0.00%) 355.82
starcra 43 ( 0.00%) 7736 ( 0.00%) 179.91
everque 7952 ( 0.02%) 908831 ( 0.00%) 114.29
unreal 8 ( 0.00%) 3407 ( 0.00%) 425.88
quake 30 ( 0.00%) 2486 ( 0.00%) 82.87
cuseeme 7 ( 0.00%) 1033 ( 0.00%) 147.57
other 5942664 ( 14.40%) 3143569482 ( 10.38%) 528.98
icmp 547089 ( 1.33%) 104087104 ( 0.34%) 190.26
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ip6 2767992 ( 6.71%) 1862700004 ( 6.15%) 672.94
other 11438 ( 0.03%) 1777545 ( 0.01%) 155.41
frag 14952 ( 0.04%) 11711513 ( 0.04%) 783.27
ip6 270029 ( 0.65%) 221044150 ( 0.73%) 818.59
tcp6 192902 ( 0.47%) 193253307 ( 0.64%) 1001.82
http(s) 7592 ( 0.02%) 7420477 ( 0.02%) 977.41
http(c) 8246 ( 0.02%) 880366 ( 0.00%) 106.76
smtp 310 ( 0.00%) 60443 ( 0.00%) 194.98
ftp 106 ( 0.00%) 9428 ( 0.00%) 88.94
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 1092 ( 0.00%) 282510 ( 0.00%) 258.71
bgp 90 ( 0.00%) 18212 ( 0.00%) 202.36
other 175464 ( 0.43%) 184581699 ( 0.61%) 1051.96
udp6 47766 ( 0.12%) 15697109 ( 0.05%) 328.63
dns 43278 ( 0.10%) 14980596 ( 0.05%) 346.15
starcra 101 ( 0.00%) 11459 ( 0.00%) 113.46
everque 2 ( 0.00%) 279 ( 0.00%) 139.50
other 4385 ( 0.01%) 704775 ( 0.00%) 160.72
icmp6 14587 ( 0.04%) 1709360 ( 0.01%) 117.18
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14659 ( 0.04%) 10368714 ( 0.03%) 707.33
tcpdump file: 201011291400.dump.gz (1040.06 MB)