Traffic Trace Info
DumpFile: 201012101400.dump
FileSize: 2745.30MB
Id: 201012101400
StartTime: Fri Dec 10 14:00:01 2010
EndTime: Fri Dec 10 14:15:00 2010
TotalTime: 899.23 seconds
TotalCapSize: -1936.98MB CapLen: 96 bytes
# of packets: 38421298 (25710.79MB)
AvgRate: 239.82Mbps stddev:27.71M
IP flow (unique src/dst pair) Information
# of flows: 1008257 (avg. 38.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.6% 1.5% 1.3% 0.9% 0.9% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 554950
Top 10 bandwidth usage (bytes/total in %):
10.1% 8.1% 7.1% 3.9% 2.0% 1.9% 1.9% 1.9% 1.8% 1.7%
# of IPv6 addresses: 5217
Top 10 bandwidth usage (bytes/total in %):
27.1% 27.1% 18.4% 18.4% 14.4% 8.2% 6.3% 6.3% 6.2% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012101400.pktlen.png)
detailed numbers
[ 32- 63]: 7245574
[ 64- 127]: 10226162
[ 128- 255]: 1736323
[ 256- 511]: 1438957
[ 512- 1023]: 919022
[ 1024- 2047]: 16855260
Protocol Breakdown
![[protocol breakdown chart]](201012101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38421298 (100.00%) 26959716958 (100.00%) 701.69
ip 38160265 ( 99.32%) 26768861521 ( 99.29%) 701.49
tcp 25070846 ( 65.25%) 20052867882 ( 74.38%) 799.85
http(s) 11313037 ( 29.44%) 14790104902 ( 54.86%) 1307.35
http(c) 7471599 ( 19.45%) 1131311917 ( 4.20%) 151.41
squid 221476 ( 0.58%) 109259659 ( 0.41%) 493.33
smtp 390630 ( 1.02%) 301363239 ( 1.12%) 771.48
ftp 168436 ( 0.44%) 15169552 ( 0.06%) 90.06
pop3 24414 ( 0.06%) 16877250 ( 0.06%) 691.29
imap 5087 ( 0.01%) 1552875 ( 0.01%) 305.26
telnet 196 ( 0.00%) 12254 ( 0.00%) 62.52
ssh 378789 ( 0.99%) 69812176 ( 0.26%) 184.30
dns 12002 ( 0.03%) 1135754 ( 0.00%) 94.63
bgp 651 ( 0.00%) 180394 ( 0.00%) 277.10
napster 129 ( 0.00%) 17796 ( 0.00%) 137.95
realaud 13 ( 0.00%) 1368 ( 0.00%) 105.23
rtsp 29080 ( 0.08%) 30834879 ( 0.11%) 1060.35
icecast 3627 ( 0.01%) 982700 ( 0.00%) 270.94
hotline 14 ( 0.00%) 904 ( 0.00%) 64.57
other 5051666 ( 13.15%) 3584250263 ( 13.29%) 709.52
udp 8069029 ( 21.00%) 4270011432 ( 15.84%) 529.19
dns 1009837 ( 2.63%) 158566452 ( 0.59%) 157.02
realaud 115 ( 0.00%) 14749 ( 0.00%) 128.25
halflif 241 ( 0.00%) 15758 ( 0.00%) 65.39
starcra 50 ( 0.00%) 7659 ( 0.00%) 153.18
everque 401 ( 0.00%) 55966 ( 0.00%) 139.57
unreal 5 ( 0.00%) 769 ( 0.00%) 153.80
quake 45 ( 0.00%) 4226 ( 0.00%) 93.91
cuseeme 6 ( 0.00%) 563 ( 0.00%) 93.83
other 7057483 ( 18.37%) 4111197196 ( 15.25%) 582.53
icmp 1683713 ( 4.38%) 182974616 ( 0.68%) 108.67
ipip 180 ( 0.00%) 18720 ( 0.00%) 104.00
ipsec 4826 ( 0.01%) 1053932 ( 0.00%) 218.39
ip6 3316620 ( 8.63%) 2255848461 ( 8.37%) 680.16
other 15051 ( 0.04%) 6086478 ( 0.02%) 404.39
frag 31932 ( 0.08%) 24531094 ( 0.09%) 768.23
ip6 261033 ( 0.68%) 190855437 ( 0.71%) 731.15
tcp6 187345 ( 0.49%) 169479002 ( 0.63%) 904.64
http(s) 11379 ( 0.03%) 14264649 ( 0.05%) 1253.59
http(c) 24686 ( 0.06%) 2367176 ( 0.01%) 95.89
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 357 ( 0.00%) 86387 ( 0.00%) 241.98
ftp 83 ( 0.00%) 7420 ( 0.00%) 89.40
ssh 70 ( 0.00%) 13620 ( 0.00%) 194.57
dns 892 ( 0.00%) 220240 ( 0.00%) 246.91
bgp 105 ( 0.00%) 35415 ( 0.00%) 337.29
other 149764 ( 0.39%) 152483333 ( 0.57%) 1018.16
udp6 48432 ( 0.13%) 14776321 ( 0.05%) 305.09
dns 44413 ( 0.12%) 14130191 ( 0.05%) 318.15
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
cuseeme 1 ( 0.00%) 111 ( 0.00%) 111.00
other 4017 ( 0.01%) 645902 ( 0.00%) 160.79
icmp6 18575 ( 0.05%) 1908926 ( 0.01%) 102.77
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6570 ( 0.02%) 4676032 ( 0.02%) 711.72
tcpdump file: 201012101400.dump.gz (983.72 MB)