Traffic Trace Info
DumpFile: 201012011400.dump
FileSize: 3481.88MB
Id: 201012011400
StartTime: Wed Dec 1 14:00:00 2010
EndTime: Wed Dec 1 14:15:00 2010
TotalTime: 899.86 seconds
TotalCapSize: -1337.44MB CapLen: 96 bytes
# of packets: 47402527 (34917.30MB)
AvgRate: 325.41Mbps stddev:40.96M
IP flow (unique src/dst pair) Information
# of flows: 961511 (avg. 49.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.5% 1.2% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 499048
Top 10 bandwidth usage (bytes/total in %):
9.5% 8.3% 4.4% 4.3% 4.2% 3.3% 3.1% 2.4% 2.1% 1.8%
# of IPv6 addresses: 4298
Top 10 bandwidth usage (bytes/total in %):
48.5% 48.5% 18.6% 16.3% 7.3% 5.1% 5.0% 4.8% 4.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012011400.pktlen.png)
detailed numbers
[ 32- 63]: 7353011
[ 64- 127]: 11858237
[ 128- 255]: 1991128
[ 256- 511]: 1966975
[ 512- 1023]: 1202136
[ 1024- 2047]: 23031040
Protocol Breakdown
![[protocol breakdown chart]](201012011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47402527 (100.00%) 36613442886 (100.00%) 772.39
ip 47131678 ( 99.43%) 36383719607 ( 99.37%) 771.96
tcp 34173143 ( 72.09%) 28450381363 ( 77.70%) 832.54
http(s) 16804384 ( 35.45%) 22847344169 ( 62.40%) 1359.61
http(c) 10915912 ( 23.03%) 1689667313 ( 4.61%) 154.79
squid 230560 ( 0.49%) 101463214 ( 0.28%) 440.07
smtp 220513 ( 0.47%) 86126419 ( 0.24%) 390.57
ftp 55526 ( 0.12%) 6073681 ( 0.02%) 109.38
pop3 21327 ( 0.04%) 9020584 ( 0.02%) 422.97
imap 4633 ( 0.01%) 1523530 ( 0.00%) 328.84
telnet 1795 ( 0.00%) 137224 ( 0.00%) 76.45
ssh 53462 ( 0.11%) 8230956 ( 0.02%) 153.96
dns 12764 ( 0.03%) 1153845 ( 0.00%) 90.40
bgp 596 ( 0.00%) 128048 ( 0.00%) 214.85
napster 13 ( 0.00%) 1363 ( 0.00%) 104.85
realaud 36 ( 0.00%) 5289 ( 0.00%) 146.92
rtsp 50154 ( 0.11%) 56523008 ( 0.15%) 1126.99
icecast 1551 ( 0.00%) 278871 ( 0.00%) 179.80
other 5799916 ( 12.24%) 3642703775 ( 9.95%) 628.06
udp 7873251 ( 16.61%) 4318321082 ( 11.79%) 548.48
dns 934065 ( 1.97%) 147421307 ( 0.40%) 157.83
realaud 13 ( 0.00%) 1065 ( 0.00%) 81.92
halflif 539 ( 0.00%) 194100 ( 0.00%) 360.11
starcra 85 ( 0.00%) 13998 ( 0.00%) 164.68
everque 9094 ( 0.02%) 2897370 ( 0.01%) 318.60
unreal 67 ( 0.00%) 7942 ( 0.00%) 118.54
quake 61 ( 0.00%) 6953 ( 0.00%) 113.98
cuseeme 8 ( 0.00%) 616 ( 0.00%) 77.00
other 6925843 ( 14.61%) 4167470141 ( 11.38%) 601.73
icmp 456915 ( 0.96%) 50548303 ( 0.14%) 110.63
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 12979 ( 0.03%) 8804682 ( 0.02%) 678.38
ip6 4600496 ( 9.71%) 3549673975 ( 9.70%) 771.59
other 14715 ( 0.03%) 5971592 ( 0.02%) 405.82
frag 11923 ( 0.03%) 8276234 ( 0.02%) 694.14
ip6 270849 ( 0.57%) 229723279 ( 0.63%) 848.16
tcp6 206483 ( 0.44%) 210309373 ( 0.57%) 1018.53
http(s) 96744 ( 0.20%) 122793547 ( 0.34%) 1269.26
http(c) 22869 ( 0.05%) 6645208 ( 0.02%) 290.58
squid 10220 ( 0.02%) 7804903 ( 0.02%) 763.69
smtp 553 ( 0.00%) 134238 ( 0.00%) 242.75
ftp 106 ( 0.00%) 9428 ( 0.00%) 88.94
dns 1287 ( 0.00%) 328470 ( 0.00%) 255.22
bgp 89 ( 0.00%) 17799 ( 0.00%) 199.99
other 74615 ( 0.16%) 72575780 ( 0.20%) 972.67
udp6 48390 ( 0.10%) 15218280 ( 0.04%) 314.49
dns 44800 ( 0.09%) 14642606 ( 0.04%) 326.84
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 4 ( 0.00%) 636 ( 0.00%) 159.00
other 3585 ( 0.01%) 574931 ( 0.00%) 160.37
icmp6 12127 ( 0.03%) 1509008 ( 0.00%) 124.43
ip6 79 ( 0.00%) 10872 ( 0.00%) 137.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3740 ( 0.01%) 2671666 ( 0.01%) 714.35
tcpdump file: 201012011400.dump.gz (1193.13 MB)