Traffic Trace Info
DumpFile: 201012121400.dump
FileSize: 1796.71MB
Id: 201012121400
StartTime: Sun Dec 12 14:00:00 2010
EndTime: Sun Dec 12 14:15:00 2010
TotalTime: 900.40 seconds
TotalCapSize: 1416.28MB CapLen: 96 bytes
# of packets: 24929752 (18151.56MB)
AvgRate: 169.16Mbps stddev:24.83M
IP flow (unique src/dst pair) Information
# of flows: 1149881 (avg. 21.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 5.5% 2.6% 2.3% 1.9% 1.8% 1.7% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 575322
Top 10 bandwidth usage (bytes/total in %):
11.1% 7.6% 6.6% 6.3% 2.8% 2.8% 2.8% 2.5% 2.5% 2.3%
# of IPv6 addresses: 3690
Top 10 bandwidth usage (bytes/total in %):
97.1% 95.4% 1.1% 1.0% 1.0% 0.7% 0.5% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012121400.pktlen.png)
detailed numbers
[ 32- 63]: 3751132
[ 64- 127]: 6974773
[ 128- 255]: 1013670
[ 256- 511]: 657493
[ 512- 1023]: 574668
[ 1024- 2047]: 11958016
Protocol Breakdown
![[protocol breakdown chart]](201012121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24929752 (100.00%) 19033291965 (100.00%) 763.48
ip 24127037 ( 96.78%) 17945664029 ( 94.29%) 743.80
tcp 17454223 ( 70.01%) 15215742158 ( 79.94%) 871.75
http(s) 7853655 ( 31.50%) 10654275741 ( 55.98%) 1356.60
http(c) 3646688 ( 14.63%) 383379076 ( 2.01%) 105.13
squid 394781 ( 1.58%) 281484375 ( 1.48%) 713.01
smtp 151722 ( 0.61%) 47972375 ( 0.25%) 316.19
ftp 290680 ( 1.17%) 54375722 ( 0.29%) 187.06
pop3 6168 ( 0.02%) 3673661 ( 0.02%) 595.60
imap 1427 ( 0.01%) 510581 ( 0.00%) 357.80
telnet 1591 ( 0.01%) 110631 ( 0.00%) 69.54
ssh 26442 ( 0.11%) 4899352 ( 0.03%) 185.29
dns 5322 ( 0.02%) 479872 ( 0.00%) 90.17
bgp 567 ( 0.00%) 110492 ( 0.00%) 194.87
napster 32 ( 0.00%) 10136 ( 0.00%) 316.75
realaud 76 ( 0.00%) 11216 ( 0.00%) 147.58
rtsp 107 ( 0.00%) 35400 ( 0.00%) 330.84
icecast 1181 ( 0.00%) 520791 ( 0.00%) 440.97
hotline 1 ( 0.00%) 1390 ( 0.00%) 1390.00
other 5073747 ( 20.35%) 3783889184 ( 19.88%) 745.78
udp 4723357 ( 18.95%) 2355199183 ( 12.37%) 498.63
dns 704626 ( 2.83%) 103843321 ( 0.55%) 147.37
realaud 13 ( 0.00%) 1809 ( 0.00%) 139.15
halflif 55427 ( 0.22%) 21703682 ( 0.11%) 391.57
starcra 55 ( 0.00%) 11883 ( 0.00%) 216.05
everque 155 ( 0.00%) 30238 ( 0.00%) 195.08
unreal 17 ( 0.00%) 3158 ( 0.00%) 185.76
quake 19 ( 0.00%) 1503 ( 0.00%) 79.11
cuseeme 5 ( 0.00%) 728 ( 0.00%) 145.60
other 3962159 ( 15.89%) 2229323135 ( 11.71%) 562.65
icmp 1145651 ( 4.60%) 146026671 ( 0.77%) 127.46
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1236 ( 0.00%) 393728 ( 0.00%) 318.55
ip6 782402 ( 3.14%) 220187182 ( 1.16%) 281.42
other 19984 ( 0.08%) 8095947 ( 0.04%) 405.12
frag 3845 ( 0.02%) 4094406 ( 0.02%) 1064.87
ip6 802713 ( 3.22%) 1087627816 ( 5.71%) 1354.94
tcp6 758514 ( 3.04%) 1077189839 ( 5.66%) 1420.13
http(s) 12152 ( 0.05%) 17290677 ( 0.09%) 1422.87
http(c) 26054 ( 0.10%) 2327789 ( 0.01%) 89.34
smtp 238 ( 0.00%) 56356 ( 0.00%) 236.79
ftp 59 ( 0.00%) 5267 ( 0.00%) 89.27
dns 476 ( 0.00%) 134239 ( 0.00%) 282.01
bgp 89 ( 0.00%) 18231 ( 0.00%) 204.84
other 719446 ( 2.89%) 1057357280 ( 5.56%) 1469.68
udp6 30174 ( 0.12%) 8269173 ( 0.04%) 274.05
dns 25523 ( 0.10%) 7693796 ( 0.04%) 301.45
other 4651 ( 0.02%) 575377 ( 0.00%) 123.71
icmp6 12982 ( 0.05%) 1475800 ( 0.01%) 113.68
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 932 ( 0.00%) 677848 ( 0.00%) 727.30
tcpdump file: 201012121400.dump.gz (590.69 MB)