Traffic Trace Info
DumpFile: 201012041400.dump
FileSize: 2766.38MB
Id: 201012041400
StartTime: Sat Dec 4 14:00:01 2010
EndTime: Sat Dec 4 14:15:00 2010
TotalTime: 899.47 seconds
TotalCapSize: -1913.10MB CapLen: 96 bytes
# of packets: 38237205 (27464.25MB)
AvgRate: 256.17Mbps stddev:27.94M
IP flow (unique src/dst pair) Information
# of flows: 885699 (avg. 43.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 4.4% 2.7% 2.0% 1.5% 1.3% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 516962
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.0% 8.4% 7.8% 6.6% 4.9% 4.7% 4.6% 2.6% 2.1%
# of IPv6 addresses: 4205
Top 10 bandwidth usage (bytes/total in %):
83.5% 83.5% 11.1% 11.1% 0.8% 0.8% 0.8% 0.6% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012041400.pktlen.png)
detailed numbers
[ 32- 63]: 5245612
[ 64- 127]: 10463502
[ 128- 255]: 2046953
[ 256- 511]: 1538653
[ 512- 1023]: 990981
[ 1024- 2047]: 17951504
Protocol Breakdown
![[protocol breakdown chart]](201012041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38237205 (100.00%) 28798351452 (100.00%) 753.15
ip 37420484 ( 97.86%) 27867396032 ( 96.77%) 744.71
tcp 23979157 ( 62.71%) 20966151439 ( 72.80%) 874.35
http(s) 11558390 ( 30.23%) 15744907249 ( 54.67%) 1362.21
http(c) 5874825 ( 15.36%) 838573943 ( 2.91%) 142.74
squid 245834 ( 0.64%) 118335288 ( 0.41%) 481.36
smtp 250575 ( 0.66%) 110496346 ( 0.38%) 440.97
ftp 100101 ( 0.26%) 40712427 ( 0.14%) 406.71
pop3 19953 ( 0.05%) 13271199 ( 0.05%) 665.12
imap 3468 ( 0.01%) 1470573 ( 0.01%) 424.04
telnet 1303 ( 0.00%) 92854 ( 0.00%) 71.26
ssh 271857 ( 0.71%) 39557452 ( 0.14%) 145.51
dns 11852 ( 0.03%) 982139 ( 0.00%) 82.87
bgp 601 ( 0.00%) 112387 ( 0.00%) 187.00
napster 567 ( 0.00%) 247094 ( 0.00%) 435.79
realaud 247 ( 0.00%) 15804 ( 0.00%) 63.98
rtsp 6920 ( 0.02%) 7735048 ( 0.03%) 1117.78
icecast 27761 ( 0.07%) 23988936 ( 0.08%) 864.12
hotline 130 ( 0.00%) 8642 ( 0.00%) 66.48
other 5604773 ( 14.66%) 4025644058 ( 13.98%) 718.25
udp 9202289 ( 24.07%) 4413591080 ( 15.33%) 479.62
dns 786975 ( 2.06%) 123778303 ( 0.43%) 157.28
realaud 338 ( 0.00%) 26377 ( 0.00%) 78.04
halflif 295598 ( 0.77%) 70766409 ( 0.25%) 239.40
starcra 67 ( 0.00%) 11049 ( 0.00%) 164.91
everque 231 ( 0.00%) 49701 ( 0.00%) 215.16
unreal 25 ( 0.00%) 3839 ( 0.00%) 153.56
quake 6144 ( 0.02%) 5443366 ( 0.02%) 885.96
cuseeme 1 ( 0.00%) 88 ( 0.00%) 88.00
other 8111986 ( 21.21%) 4213270518 ( 14.63%) 519.39
icmp 386667 ( 1.01%) 31062078 ( 0.11%) 80.33
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 507 ( 0.00%) 152690 ( 0.00%) 301.16
ip6 3838809 ( 10.04%) 2454422221 ( 8.52%) 639.37
other 12876 ( 0.03%) 1997914 ( 0.01%) 155.17
frag 8275 ( 0.02%) 9746428 ( 0.03%) 1177.82
ip6 816721 ( 2.14%) 930955420 ( 3.23%) 1139.87
tcp6 616408 ( 1.61%) 813757194 ( 2.83%) 1320.16
http(s) 515387 ( 1.35%) 779243104 ( 2.71%) 1511.96
http(c) 22748 ( 0.06%) 2180489 ( 0.01%) 95.85
squid 138 ( 0.00%) 49128 ( 0.00%) 356.00
smtp 70 ( 0.00%) 7955 ( 0.00%) 113.64
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
dns 577 ( 0.00%) 151593 ( 0.00%) 262.73
bgp 100 ( 0.00%) 19468 ( 0.00%) 194.68
other 77304 ( 0.20%) 32097963 ( 0.11%) 415.22
udp6 37008 ( 0.10%) 11042423 ( 0.04%) 298.38
dns 32732 ( 0.09%) 9924896 ( 0.03%) 303.22
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
halflif 12 ( 0.00%) 1104 ( 0.00%) 92.00
starcra 4 ( 0.00%) 368 ( 0.00%) 92.00
everque 2 ( 0.00%) 279 ( 0.00%) 139.50
other 4257 ( 0.01%) 1115667 ( 0.00%) 262.08
icmp6 14349 ( 0.04%) 1600846 ( 0.01%) 111.56
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 148843 ( 0.39%) 104539533 ( 0.36%) 702.35
tcpdump file: 201012041400.dump.gz (969.55 MB)