Traffic Trace Info
DumpFile: 201012081400.dump
FileSize: 3168.37MB
Id: 201012081400
StartTime: Wed Dec 8 14:00:01 2010
EndTime: Wed Dec 8 14:15:00 2010
TotalTime: 899.57 seconds
TotalCapSize: -1597.21MB CapLen: 96 bytes
# of packets: 43879278 (27968.50MB)
AvgRate: 260.82Mbps stddev:23.15M
IP flow (unique src/dst pair) Information
# of flows: 1160968 (avg. 37.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.4% 1.3% 1.2% 1.1% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 620018
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.8% 6.1% 2.6% 2.1% 2.0% 1.9% 1.7% 1.7% 1.7%
# of IPv6 addresses: 4850
Top 10 bandwidth usage (bytes/total in %):
34.2% 33.1% 12.7% 12.7% 11.5% 11.5% 10.7% 5.9% 5.9% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012081400.pktlen.png)
detailed numbers
[ 32- 63]: 9042120
[ 64- 127]: 11288950
[ 128- 255]: 2606005
[ 256- 511]: 1669402
[ 512- 1023]: 1126548
[ 1024- 2047]: 18146253
Protocol Breakdown
![[protocol breakdown chart]](201012081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43879278 (100.00%) 29327101628 (100.00%) 668.36
ip 43593788 ( 99.35%) 29139501751 ( 99.36%) 668.43
tcp 29084613 ( 66.28%) 21489431940 ( 73.27%) 738.86
http(s) 12842694 ( 29.27%) 16664176559 ( 56.82%) 1297.56
http(c) 10000571 ( 22.79%) 1908332702 ( 6.51%) 190.82
squid 276413 ( 0.63%) 118072932 ( 0.40%) 427.16
smtp 225949 ( 0.51%) 111943436 ( 0.38%) 495.44
nntp 6 ( 0.00%) 444 ( 0.00%) 74.00
ftp 97765 ( 0.22%) 48929199 ( 0.17%) 500.48
pop3 40286 ( 0.09%) 29091655 ( 0.10%) 722.13
imap 8399 ( 0.02%) 2079197 ( 0.01%) 247.55
telnet 1939 ( 0.00%) 160122 ( 0.00%) 82.58
ssh 665448 ( 1.52%) 100007014 ( 0.34%) 150.29
dns 11332 ( 0.03%) 1041237 ( 0.00%) 91.88
bgp 584 ( 0.00%) 119481 ( 0.00%) 204.59
napster 408 ( 0.00%) 203902 ( 0.00%) 499.76
realaud 59 ( 0.00%) 17616 ( 0.00%) 298.58
rtsp 24382 ( 0.06%) 25231547 ( 0.09%) 1034.84
icecast 6887 ( 0.02%) 678798 ( 0.00%) 98.56
hotline 19 ( 0.00%) 3893 ( 0.00%) 204.89
other 4881466 ( 11.12%) 2479341846 ( 8.45%) 507.91
udp 7759767 ( 17.68%) 4171382367 ( 14.22%) 537.57
dns 956111 ( 2.18%) 151947829 ( 0.52%) 158.92
realaud 24 ( 0.00%) 3442 ( 0.00%) 143.42
halflif 31027 ( 0.07%) 7936718 ( 0.03%) 255.80
starcra 97 ( 0.00%) 16424 ( 0.00%) 169.32
everque 396 ( 0.00%) 68079 ( 0.00%) 171.92
unreal 15 ( 0.00%) 2508 ( 0.00%) 167.20
quake 34 ( 0.00%) 6155 ( 0.00%) 181.03
cuseeme 8 ( 0.00%) 1060 ( 0.00%) 132.50
other 6762813 ( 15.41%) 4010734221 ( 13.68%) 593.06
icmp 2051941 ( 4.68%) 208745183 ( 0.71%) 101.73
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 2054 ( 0.00%) 310500 ( 0.00%) 151.17
ip6 4678448 ( 10.66%) 3265022249 ( 11.13%) 697.89
other 16785 ( 0.04%) 4590792 ( 0.02%) 273.51
frag 18968 ( 0.04%) 14690241 ( 0.05%) 774.47
ip6 285490 ( 0.65%) 187599877 ( 0.64%) 657.12
tcp6 217421 ( 0.50%) 168056371 ( 0.57%) 772.95
http(s) 4997 ( 0.01%) 5216971 ( 0.02%) 1044.02
http(c) 11815 ( 0.03%) 1289261 ( 0.00%) 109.12
squid 2951 ( 0.01%) 225215 ( 0.00%) 76.32
smtp 604 ( 0.00%) 99121 ( 0.00%) 164.11
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 832 ( 0.00%) 215880 ( 0.00%) 259.47
bgp 94 ( 0.00%) 20327 ( 0.00%) 216.24
other 196042 ( 0.45%) 160981930 ( 0.55%) 821.16
udp6 50257 ( 0.11%) 17319888 ( 0.06%) 344.63
dns 42284 ( 0.10%) 13577507 ( 0.05%) 321.10
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 7970 ( 0.02%) 3742063 ( 0.01%) 469.52
icmp6 17095 ( 0.04%) 1742135 ( 0.01%) 101.91
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 603 ( 0.00%) 465941 ( 0.00%) 772.70
tcpdump file: 201012081400.dump.gz (1143.32 MB)