Traffic Trace Info
DumpFile: 201012091400.dump
FileSize: 3235.08MB
Id: 201012091400
StartTime: Thu Dec 9 14:00:01 2010
EndTime: Thu Dec 9 14:15:01 2010
TotalTime: 900.17 seconds
TotalCapSize: -1536.79MB CapLen: 96 bytes
# of packets: 44293070 (30500.96MB)
AvgRate: 284.20Mbps stddev:32.49M
IP flow (unique src/dst pair) Information
# of flows: 905435 (avg. 48.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.2% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 476365
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.0% 8.1% 8.0% 3.0% 2.0% 2.0% 1.8% 1.6% 1.5%
# of IPv6 addresses: 4347
Top 10 bandwidth usage (bytes/total in %):
89.4% 83.2% 6.5% 0.7% 0.7% 0.5% 0.5% 0.5% 0.5% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012091400.pktlen.png)
detailed numbers
[ 32- 63]: 7100738
[ 64- 127]: 12454124
[ 128- 255]: 1971756
[ 256- 511]: 1532624
[ 512- 1023]: 1117762
[ 1024- 2047]: 20116066
Protocol Breakdown
![[protocol breakdown chart]](201012091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44293070 (100.00%) 31982571964 (100.00%) 722.07
ip 43986344 ( 99.31%) 31675917148 ( 99.04%) 720.13
tcp 29800751 ( 67.28%) 24100455772 ( 75.35%) 808.72
http(s) 13845046 ( 31.26%) 18502662382 ( 57.85%) 1336.41
http(c) 9731688 ( 21.97%) 1919600250 ( 6.00%) 197.25
squid 184673 ( 0.42%) 58281256 ( 0.18%) 315.59
smtp 266576 ( 0.60%) 162239730 ( 0.51%) 608.61
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 104698 ( 0.24%) 43222847 ( 0.14%) 412.83
pop3 19284 ( 0.04%) 8370210 ( 0.03%) 434.05
imap 4806 ( 0.01%) 1690305 ( 0.01%) 351.71
telnet 1114 ( 0.00%) 75366 ( 0.00%) 67.65
ssh 624721 ( 1.41%) 93321371 ( 0.29%) 149.38
dns 355321 ( 0.80%) 348497598 ( 1.09%) 980.80
bgp 560 ( 0.00%) 102214 ( 0.00%) 182.53
napster 21 ( 0.00%) 2134 ( 0.00%) 101.62
realaud 29 ( 0.00%) 3683 ( 0.00%) 127.00
rtsp 20935 ( 0.05%) 21214066 ( 0.07%) 1013.33
icecast 14392 ( 0.03%) 10219793 ( 0.03%) 710.10
hotline 13 ( 0.00%) 1196 ( 0.00%) 92.00
other 4626871 ( 10.45%) 2930951187 ( 9.16%) 633.46
udp 7996404 ( 18.05%) 3826437170 ( 11.96%) 478.52
dns 1003200 ( 2.26%) 150920382 ( 0.47%) 150.44
realaud 5 ( 0.00%) 488 ( 0.00%) 97.60
halflif 803 ( 0.00%) 270481 ( 0.00%) 336.84
starcra 38 ( 0.00%) 5016 ( 0.00%) 132.00
everque 595 ( 0.00%) 101064 ( 0.00%) 169.86
unreal 9 ( 0.00%) 1113 ( 0.00%) 123.67
quake 23 ( 0.00%) 3194 ( 0.00%) 138.87
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 6991577 ( 15.78%) 3675080122 ( 11.49%) 525.64
icmp 1709049 ( 3.86%) 179209828 ( 0.56%) 104.86
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 8204 ( 0.02%) 1476024 ( 0.00%) 179.92
ip6 4453526 ( 10.05%) 3560723033 ( 11.13%) 799.53
other 18230 ( 0.04%) 7596601 ( 0.02%) 416.71
frag 1991 ( 0.00%) 1610352 ( 0.01%) 808.82
ip6 306726 ( 0.69%) 306654816 ( 0.96%) 999.77
tcp6 241080 ( 0.54%) 289492190 ( 0.91%) 1200.81
http(s) 6429 ( 0.01%) 7036649 ( 0.02%) 1094.52
http(c) 7424 ( 0.02%) 789654 ( 0.00%) 106.37
squid 99 ( 0.00%) 14839 ( 0.00%) 149.89
smtp 277 ( 0.00%) 53012 ( 0.00%) 191.38
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
telnet 1162 ( 0.00%) 624696 ( 0.00%) 537.60
ssh 15 ( 0.00%) 5130 ( 0.00%) 342.00
dns 812 ( 0.00%) 206593 ( 0.00%) 254.42
bgp 106 ( 0.00%) 33201 ( 0.00%) 313.22
other 224672 ( 0.51%) 280720922 ( 0.88%) 1249.47
udp6 51433 ( 0.12%) 15197353 ( 0.05%) 295.48
dns 43417 ( 0.10%) 14288925 ( 0.04%) 329.11
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
other 8014 ( 0.02%) 908219 ( 0.00%) 113.33
icmp6 13780 ( 0.03%) 1649257 ( 0.01%) 119.68
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 320 ( 0.00%) 300592 ( 0.00%) 939.35
tcpdump file: 201012091400.dump.gz (1142.93 MB)