Traffic Trace Info
DumpFile: 201011301400.dump
FileSize: 3469.55MB
Id: 201011301400
StartTime: Tue Nov 30 14:00:00 2010
EndTime: Tue Nov 30 14:15:01 2010
TotalTime: 900.83 seconds
TotalCapSize: -1346.33MB CapLen: 96 bytes
# of packets: 47175489 (32847.65MB)
AvgRate: 305.90Mbps stddev:34.58M
IP flow (unique src/dst pair) Information
# of flows: 913042 (avg. 51.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.6% 1.4% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 463274
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.1% 4.6% 3.7% 3.3% 3.0% 2.8% 2.3% 2.1% 1.7%
# of IPv6 addresses: 4371
Top 10 bandwidth usage (bytes/total in %):
79.3% 75.4% 4.9% 4.8% 3.2% 3.2% 3.2% 2.3% 1.7% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201011301400.pktlen.png)
detailed numbers
[ 32- 63]: 7034164
[ 64- 127]: 12939696
[ 128- 255]: 2466265
[ 256- 511]: 1659479
[ 512- 1023]: 1566253
[ 1024- 2047]: 21509632
Protocol Breakdown
![[protocol breakdown chart]](201011301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47175489 (100.00%) 34443260430 (100.00%) 730.11
ip 46846309 ( 99.30%) 34100724379 ( 99.01%) 727.93
tcp 32484530 ( 68.86%) 24979268262 ( 72.52%) 768.96
http(s) 14207359 ( 30.12%) 19011084544 ( 55.20%) 1338.12
http(c) 9356791 ( 19.83%) 1801446281 ( 5.23%) 192.53
squid 264111 ( 0.56%) 99026088 ( 0.29%) 374.94
smtp 250309 ( 0.53%) 114149790 ( 0.33%) 456.04
ftp 80119 ( 0.17%) 46434042 ( 0.13%) 579.56
pop3 23022 ( 0.05%) 6058679 ( 0.02%) 263.17
imap 6410 ( 0.01%) 3552046 ( 0.01%) 554.14
telnet 42235 ( 0.09%) 3111690 ( 0.01%) 73.68
ssh 3217077 ( 6.82%) 490039355 ( 1.42%) 152.32
dns 12402 ( 0.03%) 1140692 ( 0.00%) 91.98
bgp 588 ( 0.00%) 108900 ( 0.00%) 185.20
napster 9578 ( 0.02%) 828357 ( 0.00%) 86.49
realaud 32 ( 0.00%) 4970 ( 0.00%) 155.31
rtsp 21188 ( 0.04%) 21633228 ( 0.06%) 1021.01
icecast 27827 ( 0.06%) 12691183 ( 0.04%) 456.07
hotline 5 ( 0.00%) 1340 ( 0.00%) 268.00
other 4965474 ( 10.53%) 3367956819 ( 9.78%) 678.27
udp 8516912 ( 18.05%) 4874986090 ( 14.15%) 572.39
dns 978651 ( 2.07%) 154767274 ( 0.45%) 158.14
realaud 528 ( 0.00%) 32628 ( 0.00%) 61.80
halflif 838 ( 0.00%) 359772 ( 0.00%) 429.32
starcra 36 ( 0.00%) 4837 ( 0.00%) 134.36
everque 8901 ( 0.02%) 2063727 ( 0.01%) 231.85
unreal 18 ( 0.00%) 1669 ( 0.00%) 92.72
quake 19 ( 0.00%) 1814 ( 0.00%) 95.47
cuseeme 5 ( 0.00%) 432 ( 0.00%) 86.40
other 7527777 ( 15.96%) 4717655004 ( 13.70%) 626.70
icmp 551122 ( 1.17%) 118135552 ( 0.34%) 214.35
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 3878 ( 0.01%) 2342500 ( 0.01%) 604.05
ip6 5196209 ( 11.01%) 4018483641 ( 11.67%) 773.35
other 93478 ( 0.20%) 107489614 ( 0.31%) 1149.89
frag 669 ( 0.00%) 718175 ( 0.00%) 1073.51
ip6 329180 ( 0.70%) 342536051 ( 0.99%) 1040.57
tcp6 260618 ( 0.55%) 322436778 ( 0.94%) 1237.20
http(s) 12306 ( 0.03%) 10520571 ( 0.03%) 854.91
http(c) 14056 ( 0.03%) 1369108 ( 0.00%) 97.40
smtp 776 ( 0.00%) 584507 ( 0.00%) 753.23
ftp 174 ( 0.00%) 18466 ( 0.00%) 106.13
ssh 13 ( 0.00%) 2862 ( 0.00%) 220.15
dns 1124 ( 0.00%) 281210 ( 0.00%) 250.19
bgp 95 ( 0.00%) 19390 ( 0.00%) 204.11
other 232074 ( 0.49%) 309640664 ( 0.90%) 1334.23
udp6 55228 ( 0.12%) 18108119 ( 0.05%) 327.88
dns 48442 ( 0.10%) 15977384 ( 0.05%) 329.83
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 7 ( 0.00%) 889 ( 0.00%) 127.00
other 6778 ( 0.01%) 2129744 ( 0.01%) 314.21
icmp6 12791 ( 0.03%) 1591156 ( 0.00%) 124.40
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 432 ( 0.00%) 384860 ( 0.00%) 890.88
tcpdump file: 201011301400.dump.gz (1220.01 MB)