Traffic Trace Info
DumpFile: 201012141400.dump
FileSize: 2766.52MB
Id: 201012141400
StartTime: Tue Dec 14 14:00:00 2010
EndTime: Tue Dec 14 14:15:00 2010
TotalTime: 899.64 seconds
TotalCapSize: -1933.26MB CapLen: 96 bytes
# of packets: 39568884 (26266.46MB)
AvgRate: 244.91Mbps stddev:27.14M
IP flow (unique src/dst pair) Information
# of flows: 1154176 (avg. 34.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.3% 1.3% 1.2% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 556337
Top 10 bandwidth usage (bytes/total in %):
8.7% 8.6% 6.3% 4.9% 4.1% 3.0% 2.1% 2.0% 1.9% 1.7%
# of IPv6 addresses: 3955
Top 10 bandwidth usage (bytes/total in %):
52.7% 28.8% 23.6% 12.7% 12.7% 10.8% 8.9% 7.1% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012141400.pktlen.png)
detailed numbers
[ 32- 63]: 10738147
[ 64- 127]: 8246634
[ 128- 255]: 1428645
[ 256- 511]: 1021234
[ 512- 1023]: 866039
[ 1024- 2047]: 17268185
Protocol Breakdown
![[protocol breakdown chart]](201012141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39568884 (100.00%) 27542383093 (100.00%) 696.06
ip 39347427 ( 99.44%) 27354776781 ( 99.32%) 695.21
tcp 29784234 ( 75.27%) 24391359281 ( 88.56%) 818.94
http(s) 15302710 ( 38.67%) 20196187190 ( 73.33%) 1319.78
http(c) 9532437 ( 24.09%) 1649353861 ( 5.99%) 173.03
squid 277097 ( 0.70%) 167943318 ( 0.61%) 606.08
smtp 324170 ( 0.82%) 120526257 ( 0.44%) 371.80
nntp 320 ( 0.00%) 174859 ( 0.00%) 546.43
ftp 101386 ( 0.26%) 38935876 ( 0.14%) 384.04
pop3 27237 ( 0.07%) 12793866 ( 0.05%) 469.72
imap 4500 ( 0.01%) 1479023 ( 0.01%) 328.67
telnet 39826 ( 0.10%) 2929880 ( 0.01%) 73.57
ssh 183052 ( 0.46%) 23465395 ( 0.09%) 128.19
dns 18704 ( 0.05%) 1491894 ( 0.01%) 79.76
bgp 628 ( 0.00%) 154724 ( 0.00%) 246.38
napster 12 ( 0.00%) 780 ( 0.00%) 65.00
realaud 13 ( 0.00%) 1867 ( 0.00%) 143.62
rtsp 41678 ( 0.11%) 42895812 ( 0.16%) 1029.22
icecast 8639 ( 0.02%) 833384 ( 0.00%) 96.47
hotline 15 ( 0.00%) 2589 ( 0.00%) 172.60
other 3921806 ( 9.91%) 2132188464 ( 7.74%) 543.68
udp 8440563 ( 21.33%) 2620964658 ( 9.52%) 310.52
dns 993696 ( 2.51%) 156149837 ( 0.57%) 157.14
rip 44 ( 0.00%) 2640 ( 0.00%) 60.00
realaud 127 ( 0.00%) 8263 ( 0.00%) 65.06
halflif 161 ( 0.00%) 11835 ( 0.00%) 73.51
starcra 97 ( 0.00%) 10002 ( 0.00%) 103.11
everque 504 ( 0.00%) 74108 ( 0.00%) 147.04
unreal 86 ( 0.00%) 7253 ( 0.00%) 84.34
quake 234 ( 0.00%) 15491 ( 0.00%) 66.20
cuseeme 49 ( 0.00%) 3034 ( 0.00%) 61.92
other 7445172 ( 18.82%) 2464568602 ( 8.95%) 331.03
icmp 558201 ( 1.41%) 103809472 ( 0.38%) 185.97
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 484 ( 0.00%) 160520 ( 0.00%) 331.65
ip6 499856 ( 1.26%) 225923280 ( 0.82%) 451.98
other 63904 ( 0.16%) 12540300 ( 0.05%) 196.24
frag 1746 ( 0.00%) 1568573 ( 0.01%) 898.38
ip6 221457 ( 0.56%) 187606312 ( 0.68%) 847.15
tcp6 157032 ( 0.40%) 168309668 ( 0.61%) 1071.82
http(s) 8059 ( 0.02%) 7848231 ( 0.03%) 973.85
http(c) 17495 ( 0.04%) 1690428 ( 0.01%) 96.62
smtp 342 ( 0.00%) 110329 ( 0.00%) 322.60
ftp 929 ( 0.00%) 98961 ( 0.00%) 106.52
dns 1023 ( 0.00%) 265704 ( 0.00%) 259.73
bgp 100 ( 0.00%) 36632 ( 0.00%) 366.32
other 129084 ( 0.33%) 158259383 ( 0.57%) 1226.02
udp6 48963 ( 0.12%) 16917692 ( 0.06%) 345.52
dns 43117 ( 0.11%) 14206330 ( 0.05%) 329.48
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 5845 ( 0.01%) 2711256 ( 0.01%) 463.86
icmp6 14504 ( 0.04%) 1667067 ( 0.01%) 114.94
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 847 ( 0.00%) 696697 ( 0.00%) 822.55
tcpdump file: 201012141400.dump.gz (969.72 MB)