Traffic Trace Info
DumpFile: 201012111400.dump
FileSize: 2281.85MB
Id: 201012111400
StartTime: Sat Dec 11 14:00:00 2010
EndTime: Sat Dec 11 14:15:00 2010
TotalTime: 899.47 seconds
TotalCapSize: 1783.68MB CapLen: 96 bytes
# of packets: 32647009 (23397.18MB)
AvgRate: 218.21Mbps stddev:23.66M
IP flow (unique src/dst pair) Information
# of flows: 747669 (avg. 43.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.6% 1.5% 1.5% 1.2% 1.2% 1.0% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 410153
Top 10 bandwidth usage (bytes/total in %):
8.9% 7.8% 4.9% 4.0% 2.8% 2.7% 2.5% 2.0% 2.0% 2.0%
# of IPv6 addresses: 3653
Top 10 bandwidth usage (bytes/total in %):
83.0% 83.0% 6.3% 6.3% 2.6% 2.3% 1.3% 1.0% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012111400.pktlen.png)
detailed numbers
[ 32- 63]: 5917666
[ 64- 127]: 8280463
[ 128- 255]: 1364502
[ 256- 511]: 836860
[ 512- 1023]: 790820
[ 1024- 2047]: 15456698
Protocol Breakdown
![[protocol breakdown chart]](201012111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32647009 (100.00%) 24533718402 (100.00%) 751.48
ip 32360473 ( 99.12%) 24231845552 ( 98.77%) 748.81
tcp 23238859 ( 71.18%) 19868853966 ( 80.99%) 854.98
http(s) 11577989 ( 35.46%) 15793059893 ( 64.37%) 1364.06
http(c) 6193703 ( 18.97%) 854617300 ( 3.48%) 137.98
squid 292265 ( 0.90%) 158891757 ( 0.65%) 543.66
smtp 169886 ( 0.52%) 74009982 ( 0.30%) 435.64
ftp 76607 ( 0.23%) 36364522 ( 0.15%) 474.69
pop3 17450 ( 0.05%) 5688562 ( 0.02%) 325.99
imap 342653 ( 1.05%) 490969999 ( 2.00%) 1432.85
telnet 658 ( 0.00%) 41508 ( 0.00%) 63.08
ssh 531137 ( 1.63%) 81866496 ( 0.33%) 154.13
dns 6002 ( 0.02%) 670335 ( 0.00%) 111.69
bgp 560 ( 0.00%) 96548 ( 0.00%) 172.41
napster 102 ( 0.00%) 13507 ( 0.00%) 132.42
realaud 98 ( 0.00%) 7818 ( 0.00%) 79.78
rtsp 116 ( 0.00%) 29023 ( 0.00%) 250.20
icecast 3514 ( 0.01%) 793157 ( 0.00%) 225.71
hotline 13 ( 0.00%) 820 ( 0.00%) 63.08
other 4026106 ( 12.33%) 2371732739 ( 9.67%) 589.09
udp 7077374 ( 21.68%) 3734280633 ( 15.22%) 527.64
dns 823476 ( 2.52%) 122305152 ( 0.50%) 148.52
realaud 22 ( 0.00%) 2829 ( 0.00%) 128.59
halflif 37 ( 0.00%) 3109 ( 0.00%) 84.03
starcra 31 ( 0.00%) 3719 ( 0.00%) 119.97
everque 197 ( 0.00%) 43100 ( 0.00%) 218.78
unreal 29 ( 0.00%) 3624 ( 0.00%) 124.97
quake 23 ( 0.00%) 2069 ( 0.00%) 89.96
cuseeme 10 ( 0.00%) 1219 ( 0.00%) 121.90
other 6222225 ( 19.06%) 3609529902 ( 14.71%) 580.10
icmp 1157537 ( 3.55%) 150125557 ( 0.61%) 129.69
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1088 ( 0.00%) 372528 ( 0.00%) 342.40
ip6 868412 ( 2.66%) 471851821 ( 1.92%) 543.35
other 17019 ( 0.05%) 6341887 ( 0.03%) 372.64
frag 156422 ( 0.48%) 120694787 ( 0.49%) 771.60
ip6 286534 ( 0.88%) 301872730 ( 1.23%) 1053.53
tcp6 238295 ( 0.73%) 289942734 ( 1.18%) 1216.74
http(s) 5530 ( 0.02%) 7184686 ( 0.03%) 1299.22
http(c) 24761 ( 0.08%) 2286847 ( 0.01%) 92.36
smtp 267 ( 0.00%) 85305 ( 0.00%) 319.49
ftp 139 ( 0.00%) 12951 ( 0.00%) 93.17
dns 681 ( 0.00%) 167362 ( 0.00%) 245.76
bgp 94 ( 0.00%) 17417 ( 0.00%) 185.29
other 206823 ( 0.63%) 280188166 ( 1.14%) 1354.72
udp6 33913 ( 0.10%) 10140394 ( 0.04%) 299.01
dns 32149 ( 0.10%) 9823129 ( 0.04%) 305.55
realaud 1 ( 0.00%) 97 ( 0.00%) 97.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 1761 ( 0.01%) 316966 ( 0.00%) 179.99
icmp6 13986 ( 0.04%) 1565126 ( 0.01%) 111.91
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 229 ( 0.00%) 209288 ( 0.00%) 913.92
tcpdump file: 201012111400.dump.gz (794.55 MB)