Traffic Trace Info
DumpFile: 201012031400.dump
FileSize: 2597.88MB
Id: 201012031400
StartTime: Fri Dec 3 14:00:01 2010
EndTime: Fri Dec 3 14:15:00 2010
TotalTime: 899.29 seconds
TotalCapSize: 2043.75MB CapLen: 96 bytes
# of packets: 36314810 (25295.83MB)
AvgRate: 235.94Mbps stddev:25.02M
IP flow (unique src/dst pair) Information
# of flows: 956462 (avg. 37.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 3.9% 1.6% 1.1% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 508169
Top 10 bandwidth usage (bytes/total in %):
11.3% 7.5% 5.0% 3.9% 3.9% 3.1% 2.9% 2.6% 2.5% 2.4%
# of IPv6 addresses: 5251
Top 10 bandwidth usage (bytes/total in %):
17.8% 17.8% 9.5% 9.3% 9.3% 9.0% 9.0% 8.7% 8.7% 8.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012031400.pktlen.png)
detailed numbers
[ 32- 63]: 7765126
[ 64- 127]: 8481025
[ 128- 255]: 1304620
[ 256- 511]: 1198461
[ 512- 1023]: 1236673
[ 1024- 2047]: 16328905
Protocol Breakdown
![[protocol breakdown chart]](201012031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36314810 (100.00%) 26524597720 (100.00%) 730.41
ip 36034967 ( 99.23%) 26348578270 ( 99.34%) 731.19
tcp 29503080 ( 81.24%) 23349801442 ( 88.03%) 791.44
http(s) 13188358 ( 36.32%) 17383527789 ( 65.54%) 1318.10
http(c) 9233339 ( 25.43%) 1831289766 ( 6.90%) 198.33
squid 229700 ( 0.63%) 87267900 ( 0.33%) 379.92
smtp 243444 ( 0.67%) 107461762 ( 0.41%) 441.42
ftp 67875 ( 0.19%) 39580773 ( 0.15%) 583.14
pop3 18270 ( 0.05%) 4017628 ( 0.02%) 219.90
imap 4839 ( 0.01%) 1390809 ( 0.01%) 287.42
telnet 583 ( 0.00%) 42025 ( 0.00%) 72.08
ssh 374424 ( 1.03%) 34412492 ( 0.13%) 91.91
dns 12328 ( 0.03%) 1078969 ( 0.00%) 87.52
bgp 666 ( 0.00%) 154334 ( 0.00%) 231.73
napster 43 ( 0.00%) 10385 ( 0.00%) 241.51
realaud 235 ( 0.00%) 153508 ( 0.00%) 653.23
rtsp 15972 ( 0.04%) 15583493 ( 0.06%) 975.68
icecast 26763 ( 0.07%) 23168027 ( 0.09%) 865.67
hotline 27 ( 0.00%) 4174 ( 0.00%) 154.59
other 6086210 ( 16.76%) 3820657368 ( 14.40%) 627.76
udp 4662757 ( 12.84%) 2024675824 ( 7.63%) 434.22
dns 860205 ( 2.37%) 138029346 ( 0.52%) 160.46
realaud 47 ( 0.00%) 8274 ( 0.00%) 176.04
halflif 563 ( 0.00%) 218413 ( 0.00%) 387.94
starcra 73 ( 0.00%) 12223 ( 0.00%) 167.44
everque 1202 ( 0.00%) 202020 ( 0.00%) 168.07
unreal 28 ( 0.00%) 4680 ( 0.00%) 167.14
quake 22 ( 0.00%) 2517 ( 0.00%) 114.41
cuseeme 2 ( 0.00%) 185 ( 0.00%) 92.50
other 3800394 ( 10.47%) 1886043792 ( 7.11%) 496.28
icmp 495146 ( 1.36%) 44282353 ( 0.17%) 89.43
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ip6 1357564 ( 3.74%) 923835363 ( 3.48%) 680.51
other 16240 ( 0.04%) 5964568 ( 0.02%) 367.28
frag 2612 ( 0.01%) 2259995 ( 0.01%) 865.24
ip6 279843 ( 0.77%) 176019450 ( 0.66%) 628.99
tcp6 212310 ( 0.58%) 159398743 ( 0.60%) 750.78
http(s) 19071 ( 0.05%) 20233796 ( 0.08%) 1060.97
http(c) 60056 ( 0.17%) 5503256 ( 0.02%) 91.64
squid 9231 ( 0.03%) 6027438 ( 0.02%) 652.96
smtp 490 ( 0.00%) 92978 ( 0.00%) 189.75
ftp 109 ( 0.00%) 9791 ( 0.00%) 89.83
dns 785 ( 0.00%) 222663 ( 0.00%) 283.65
bgp 93 ( 0.00%) 19409 ( 0.00%) 208.70
icecast 7096 ( 0.02%) 8721710 ( 0.03%) 1229.10
other 115379 ( 0.32%) 118567702 ( 0.45%) 1027.64
udp6 47961 ( 0.13%) 14081014 ( 0.05%) 293.59
dns 43297 ( 0.12%) 13364533 ( 0.05%) 308.67
halflif 2 ( 0.00%) 234 ( 0.00%) 117.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 3 ( 0.00%) 438 ( 0.00%) 146.00
other 4658 ( 0.01%) 715701 ( 0.00%) 153.65
icmp6 18532 ( 0.05%) 1813343 ( 0.01%) 97.85
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 924 ( 0.00%) 710572 ( 0.00%) 769.02
tcpdump file: 201012031400.dump.gz (905.95 MB)