Traffic Trace Info
DumpFile: 201012061400.dump
FileSize: 3098.49MB
Id: 201012061400
StartTime: Mon Dec 6 14:00:01 2010
EndTime: Mon Dec 6 14:15:01 2010
TotalTime: 899.96 seconds
TotalCapSize: -1649.65MB CapLen: 96 bytes
# of packets: 42737521 (29730.52MB)
AvgRate: 277.12Mbps stddev:28.45M
IP flow (unique src/dst pair) Information
# of flows: 1022800 (avg. 41.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.5% 1.5% 1.3% 1.1% 1.1% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 529620
Top 10 bandwidth usage (bytes/total in %):
10.5% 8.8% 7.4% 4.0% 3.8% 3.5% 3.0% 2.9% 2.6% 2.5%
# of IPv6 addresses: 4290
Top 10 bandwidth usage (bytes/total in %):
25.4% 22.2% 16.2% 16.2% 13.7% 13.7% 5.5% 5.5% 5.1% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012061400.pktlen.png)
detailed numbers
[ 32- 63]: 7608306
[ 64- 127]: 10936968
[ 128- 255]: 1836858
[ 256- 511]: 1563410
[ 512- 1023]: 1540082
[ 1024- 2047]: 19251897
Protocol Breakdown
![[protocol breakdown chart]](201012061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42737521 (100.00%) 31174707745 (100.00%) 729.45
ip 42546338 ( 99.55%) 31077468194 ( 99.69%) 730.44
tcp 30110428 ( 70.45%) 23796645945 ( 76.33%) 790.31
http(s) 12996668 ( 30.41%) 17048660677 ( 54.69%) 1311.77
http(c) 10792058 ( 25.25%) 2958182738 ( 9.49%) 274.11
squid 168394 ( 0.39%) 73228907 ( 0.23%) 434.87
smtp 226074 ( 0.53%) 127457085 ( 0.41%) 563.78
ftp 246842 ( 0.58%) 197114754 ( 0.63%) 798.55
pop3 16422 ( 0.04%) 7811074 ( 0.03%) 475.65
imap 33637 ( 0.08%) 43874293 ( 0.14%) 1304.35
telnet 806 ( 0.00%) 76150 ( 0.00%) 94.48
ssh 914358 ( 2.14%) 137146186 ( 0.44%) 149.99
dns 9466 ( 0.02%) 902994 ( 0.00%) 95.39
bgp 551 ( 0.00%) 91872 ( 0.00%) 166.74
napster 4 ( 0.00%) 312 ( 0.00%) 78.00
realaud 15 ( 0.00%) 1082 ( 0.00%) 72.13
rtsp 115131 ( 0.27%) 139411247 ( 0.45%) 1210.89
icecast 1085 ( 0.00%) 418283 ( 0.00%) 385.51
hotline 8 ( 0.00%) 1951 ( 0.00%) 243.88
other 4588905 ( 10.74%) 3062266100 ( 9.82%) 667.32
udp 7942606 ( 18.58%) 4369608388 ( 14.02%) 550.15
dns 905884 ( 2.12%) 143793081 ( 0.46%) 158.73
realaud 17 ( 0.00%) 1416 ( 0.00%) 83.29
halflif 41 ( 0.00%) 5645 ( 0.00%) 137.68
starcra 77 ( 0.00%) 12181 ( 0.00%) 158.19
everque 678 ( 0.00%) 95033 ( 0.00%) 140.17
unreal 25 ( 0.00%) 3178 ( 0.00%) 127.12
quake 31 ( 0.00%) 3965 ( 0.00%) 127.90
cuseeme 10 ( 0.00%) 736 ( 0.00%) 73.60
other 7030484 ( 16.45%) 4225255244 ( 13.55%) 600.99
icmp 656584 ( 1.54%) 48742157 ( 0.16%) 74.24
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 83 ( 0.00%) 15090 ( 0.00%) 181.81
ip6 3820914 ( 8.94%) 2856334899 ( 9.16%) 747.55
other 15543 ( 0.04%) 6102995 ( 0.02%) 392.65
frag 15825 ( 0.04%) 12148600 ( 0.04%) 767.68
ip6 191183 ( 0.45%) 97239551 ( 0.31%) 508.62
tcp6 120949 ( 0.28%) 80085394 ( 0.26%) 662.14
http(s) 4758 ( 0.01%) 4794943 ( 0.02%) 1007.76
http(c) 29510 ( 0.07%) 2755755 ( 0.01%) 93.38
squid 2768 ( 0.01%) 2857605 ( 0.01%) 1032.37
smtp 1457 ( 0.00%) 209488 ( 0.00%) 143.78
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
dns 1471 ( 0.00%) 376737 ( 0.00%) 256.11
bgp 93 ( 0.00%) 19486 ( 0.00%) 209.53
other 80808 ( 0.19%) 69063886 ( 0.22%) 854.67
udp6 56590 ( 0.13%) 15306187 ( 0.05%) 270.48
dns 41960 ( 0.10%) 13775741 ( 0.04%) 328.31
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
other 14628 ( 0.03%) 1530225 ( 0.00%) 104.61
icmp6 13179 ( 0.03%) 1511516 ( 0.00%) 114.69
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 352 ( 0.00%) 321080 ( 0.00%) 912.16
tcpdump file: 201012061400.dump.gz (1090.72 MB)