Traffic Trace Info
DumpFile: 201012071400.dump
FileSize: 3666.34MB
Id: 201012071400
StartTime: Tue Dec 7 14:00:01 2010
EndTime: Tue Dec 7 14:15:00 2010
TotalTime: 899.40 seconds
TotalCapSize: -1204.68MB CapLen: 96 bytes
# of packets: 50790138 (35503.56MB)
AvgRate: 331.19Mbps stddev:29.38M
IP flow (unique src/dst pair) Information
# of flows: 1055647 (avg. 48.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.4% 2.3% 1.5% 1.5% 1.5% 1.5% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 564575
Top 10 bandwidth usage (bytes/total in %):
10.8% 8.0% 6.2% 5.0% 3.8% 3.6% 3.6% 2.7% 2.6% 2.6%
# of IPv6 addresses: 4486
Top 10 bandwidth usage (bytes/total in %):
30.8% 30.1% 12.3% 12.3% 11.1% 11.1% 9.1% 5.8% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012071400.pktlen.png)
detailed numbers
[ 32- 63]: 8341043
[ 64- 127]: 13977433
[ 128- 255]: 1880619
[ 256- 511]: 1646556
[ 512- 1023]: 2143558
[ 1024- 2047]: 22800929
Protocol Breakdown
![[protocol breakdown chart]](201012071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50790138 (100.00%) 37228181335 (100.00%) 732.98
ip 50625239 ( 99.68%) 37122004683 ( 99.71%) 733.27
tcp 33454839 ( 65.87%) 27391298418 ( 73.58%) 818.75
http(s) 15893517 ( 31.29%) 21587417558 ( 57.99%) 1358.25
http(c) 11075664 ( 21.81%) 1567536862 ( 4.21%) 141.53
squid 263805 ( 0.52%) 84360698 ( 0.23%) 319.78
smtp 258494 ( 0.51%) 118878820 ( 0.32%) 459.89
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 89211 ( 0.18%) 41620519 ( 0.11%) 466.54
pop3 23410 ( 0.05%) 9398292 ( 0.03%) 401.46
imap 6533 ( 0.01%) 3267993 ( 0.01%) 500.23
telnet 26605 ( 0.05%) 1983610 ( 0.01%) 74.56
ssh 28977 ( 0.06%) 4268528 ( 0.01%) 147.31
dns 11461 ( 0.02%) 1062579 ( 0.00%) 92.71
bgp 619 ( 0.00%) 136420 ( 0.00%) 220.39
napster 44 ( 0.00%) 9340 ( 0.00%) 212.27
realaud 28 ( 0.00%) 4319 ( 0.00%) 154.25
rtsp 22203 ( 0.04%) 21444504 ( 0.06%) 965.84
icecast 7869 ( 0.02%) 3495776 ( 0.01%) 444.25
hotline 12 ( 0.00%) 3898 ( 0.00%) 324.83
other 5746386 ( 11.31%) 3946408640 ( 10.60%) 686.76
udp 11195224 ( 22.04%) 5578265126 ( 14.98%) 498.27
dns 965819 ( 1.90%) 152992879 ( 0.41%) 158.41
realaud 27 ( 0.00%) 4809 ( 0.00%) 178.11
halflif 740 ( 0.00%) 226520 ( 0.00%) 306.11
starcra 42 ( 0.00%) 7728 ( 0.00%) 184.00
everque 298 ( 0.00%) 54141 ( 0.00%) 181.68
unreal 6957 ( 0.01%) 5876098 ( 0.02%) 844.63
quake 24 ( 0.00%) 2118 ( 0.00%) 88.25
cuseeme 5 ( 0.00%) 415 ( 0.00%) 83.00
other 10220859 ( 20.12%) 5418803826 ( 14.56%) 530.17
icmp 1015302 ( 2.00%) 76379922 ( 0.21%) 75.23
ipip 179 ( 0.00%) 18610 ( 0.00%) 103.97
ipsec 190 ( 0.00%) 31020 ( 0.00%) 163.26
ip6 4944339 ( 9.73%) 4070181351 ( 10.93%) 823.20
other 15166 ( 0.03%) 5830236 ( 0.02%) 384.43
frag 41769 ( 0.08%) 30320955 ( 0.08%) 725.92
ip6 164899 ( 0.32%) 106176652 ( 0.29%) 643.89
tcp6 100831 ( 0.20%) 87790963 ( 0.24%) 870.67
http(s) 7256 ( 0.01%) 8538087 ( 0.02%) 1176.69
http(c) 9004 ( 0.02%) 948885 ( 0.00%) 105.38
squid 6 ( 0.00%) 500 ( 0.00%) 83.33
smtp 475 ( 0.00%) 132050 ( 0.00%) 278.00
ftp 202 ( 0.00%) 22520 ( 0.00%) 111.49
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 566 ( 0.00%) 146952 ( 0.00%) 259.63
bgp 91 ( 0.00%) 19271 ( 0.00%) 211.77
other 83229 ( 0.16%) 77982526 ( 0.21%) 936.96
udp6 49674 ( 0.10%) 15933034 ( 0.04%) 320.75
dns 43816 ( 0.09%) 13748503 ( 0.04%) 313.78
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 5857 ( 0.01%) 2184424 ( 0.01%) 372.96
icmp6 13055 ( 0.03%) 1483653 ( 0.00%) 113.65
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1229 ( 0.00%) 953982 ( 0.00%) 776.23
tcpdump file: 201012071400.dump.gz (1266.11 MB)