Traffic Trace Info
DumpFile: 201012051400.dump
FileSize: 2232.57MB
Id: 201012051400
StartTime: Sun Dec 5 14:00:01 2010
EndTime: Sun Dec 5 14:15:01 2010
TotalTime: 899.93 seconds
TotalCapSize: 1768.87MB CapLen: 96 bytes
# of packets: 30388762 (22765.28MB)
AvgRate: 212.22Mbps stddev:21.48M
IP flow (unique src/dst pair) Information
# of flows: 566342 (avg. 53.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.0% 2.0% 1.8% 1.6% 1.6% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 365775
Top 10 bandwidth usage (bytes/total in %):
17.9% 12.2% 11.8% 9.7% 6.0% 4.7% 3.1% 2.2% 2.0% 1.9%
# of IPv6 addresses: 3727
Top 10 bandwidth usage (bytes/total in %):
32.8% 32.8% 16.7% 16.7% 12.6% 12.6% 11.8% 11.8% 11.5% 10.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012051400.pktlen.png)
detailed numbers
[ 32- 63]: 4072951
[ 64- 127]: 7487817
[ 128- 255]: 1539518
[ 256- 511]: 1330604
[ 512- 1023]: 664628
[ 1024- 2047]: 15293244
Protocol Breakdown
![[protocol breakdown chart]](201012051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30388762 (100.00%) 23871121806 (100.00%) 785.52
ip 30201710 ( 99.38%) 23756600076 ( 99.52%) 786.60
tcp 17417786 ( 57.32%) 15801527222 ( 66.20%) 907.21
http(s) 7927366 ( 26.09%) 10782931417 ( 45.17%) 1360.22
http(c) 3887670 ( 12.79%) 478640114 ( 2.01%) 123.12
squid 191758 ( 0.63%) 89718214 ( 0.38%) 467.87
smtp 71565 ( 0.24%) 30420104 ( 0.13%) 425.07
nntp 14 ( 0.00%) 854 ( 0.00%) 61.00
ftp 76180 ( 0.25%) 39763415 ( 0.17%) 521.97
pop3 6255 ( 0.02%) 4755150 ( 0.02%) 760.22
imap 1236 ( 0.00%) 294848 ( 0.00%) 238.55
telnet 756 ( 0.00%) 51250 ( 0.00%) 67.79
ssh 91060 ( 0.30%) 13885623 ( 0.06%) 152.49
dns 5219 ( 0.02%) 459213 ( 0.00%) 87.99
bgp 584 ( 0.00%) 104524 ( 0.00%) 178.98
napster 50 ( 0.00%) 7745 ( 0.00%) 154.90
realaud 7 ( 0.00%) 918 ( 0.00%) 131.14
rtsp 14702 ( 0.05%) 13675889 ( 0.06%) 930.21
icecast 1093 ( 0.00%) 533636 ( 0.00%) 488.23
hotline 7 ( 0.00%) 1950 ( 0.00%) 278.57
other 5142264 ( 16.92%) 4346282358 ( 18.21%) 845.21
udp 7127084 ( 23.45%) 3605510291 ( 15.10%) 505.89
dns 483945 ( 1.59%) 69289283 ( 0.29%) 143.18
realaud 4 ( 0.00%) 682 ( 0.00%) 170.50
halflif 19 ( 0.00%) 2430 ( 0.00%) 127.89
starcra 48 ( 0.00%) 7600 ( 0.00%) 158.33
everque 130 ( 0.00%) 28827 ( 0.00%) 221.75
unreal 11 ( 0.00%) 2042 ( 0.00%) 185.64
quake 44 ( 0.00%) 3540 ( 0.00%) 80.45
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 6642733 ( 21.86%) 3536069779 ( 14.81%) 532.32
icmp 283728 ( 0.93%) 23275877 ( 0.10%) 82.04
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 4038 ( 0.01%) 678140 ( 0.00%) 167.94
ip6 5342450 ( 17.58%) 4318261982 ( 18.09%) 808.29
other 26444 ( 0.09%) 7327844 ( 0.03%) 277.11
frag 1532 ( 0.01%) 1384739 ( 0.01%) 903.88
ip6 187052 ( 0.62%) 114521730 ( 0.48%) 612.25
tcp6 98555 ( 0.32%) 69901080 ( 0.29%) 709.26
http(s) 736 ( 0.00%) 677439 ( 0.00%) 920.43
http(c) 4984 ( 0.02%) 558395 ( 0.00%) 112.04
smtp 188 ( 0.00%) 36076 ( 0.00%) 191.89
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
ssh 63 ( 0.00%) 12170 ( 0.00%) 193.17
dns 113 ( 0.00%) 23792 ( 0.00%) 210.55
bgp 95 ( 0.00%) 20052 ( 0.00%) 211.07
other 92292 ( 0.30%) 68565662 ( 0.29%) 742.92
udp6 22201 ( 0.07%) 5368270 ( 0.02%) 241.80
dns 17517 ( 0.06%) 4670945 ( 0.02%) 266.65
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 4683 ( 0.02%) 697226 ( 0.00%) 148.88
icmp6 12442 ( 0.04%) 1450773 ( 0.01%) 116.60
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 53823 ( 0.18%) 37797391 ( 0.16%) 702.25
tcpdump file: 201012051400.dump.gz (765.36 MB)