Traffic Trace Info
DumpFile: 201012151400.dump
FileSize: 2795.65MB
Id: 201012151400
StartTime: Wed Dec 15 14:00:00 2010
EndTime: Wed Dec 15 14:15:01 2010
TotalTime: 900.21 seconds
TotalCapSize: -1893.69MB CapLen: 96 bytes
# of packets: 38884414 (28255.16MB)
AvgRate: 263.29Mbps stddev:32.67M
IP flow (unique src/dst pair) Information
# of flows: 914200 (avg. 42.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.3% 2.6% 1.7% 1.6% 1.5% 1.4% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 459236
Top 10 bandwidth usage (bytes/total in %):
12.7% 9.3% 5.2% 3.7% 3.5% 3.5% 3.5% 2.9% 2.7% 2.6%
# of IPv6 addresses: 3972
Top 10 bandwidth usage (bytes/total in %):
58.8% 56.3% 36.0% 33.9% 1.6% 1.6% 1.1% 0.8% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012151400.pktlen.png)
detailed numbers
[ 32- 63]: 7571651
[ 64- 127]: 9461469
[ 128- 255]: 1373070
[ 256- 511]: 903148
[ 512- 1023]: 1169449
[ 1024- 2047]: 18405627
Protocol Breakdown
![[protocol breakdown chart]](201012151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38884414 (100.00%) 29627684435 (100.00%) 761.94
ip 38303396 ( 98.51%) 28867111109 ( 97.43%) 753.64
tcp 32375063 ( 83.26%) 26418078018 ( 89.17%) 816.00
http(s) 15566837 ( 40.03%) 20623372381 ( 69.61%) 1324.83
http(c) 9671202 ( 24.87%) 1295610514 ( 4.37%) 133.97
squid 279391 ( 0.72%) 183821980 ( 0.62%) 657.94
smtp 251967 ( 0.65%) 127835156 ( 0.43%) 507.35
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 85681 ( 0.22%) 36974293 ( 0.12%) 431.53
pop3 34825 ( 0.09%) 10319423 ( 0.03%) 296.32
imap 7815 ( 0.02%) 3642011 ( 0.01%) 466.03
telnet 3302 ( 0.01%) 221579 ( 0.00%) 67.10
ssh 43734 ( 0.11%) 21422731 ( 0.07%) 489.84
dns 11805 ( 0.03%) 1130659 ( 0.00%) 95.78
bgp 583 ( 0.00%) 112767 ( 0.00%) 193.43
napster 37 ( 0.00%) 7908 ( 0.00%) 213.73
realaud 63 ( 0.00%) 11872 ( 0.00%) 188.44
rtsp 24257 ( 0.06%) 28011729 ( 0.09%) 1154.79
icecast 26936 ( 0.07%) 16260789 ( 0.05%) 603.68
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 6360253 ( 16.36%) 4068939724 ( 13.73%) 639.74
udp 4638772 ( 11.93%) 2071768187 ( 6.99%) 446.62
dns 960072 ( 2.47%) 149067220 ( 0.50%) 155.27
realaud 17 ( 0.00%) 2651 ( 0.00%) 155.94
halflif 49 ( 0.00%) 5715 ( 0.00%) 116.63
starcra 30 ( 0.00%) 4410 ( 0.00%) 147.00
everque 625 ( 0.00%) 91690 ( 0.00%) 146.70
unreal 23 ( 0.00%) 3611 ( 0.00%) 157.00
quake 185 ( 0.00%) 18413 ( 0.00%) 99.53
cuseeme 12 ( 0.00%) 1419 ( 0.00%) 118.25
other 3677598 ( 9.46%) 1922468895 ( 6.49%) 522.75
icmp 518020 ( 1.33%) 85748259 ( 0.29%) 165.53
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17 ( 0.00%) 5766 ( 0.00%) 339.18
ip6 758506 ( 1.95%) 289214177 ( 0.98%) 381.29
other 12833 ( 0.03%) 2277432 ( 0.01%) 177.47
frag 13926 ( 0.04%) 11306609 ( 0.04%) 811.91
ip6 581018 ( 1.49%) 760573326 ( 2.57%) 1309.04
tcp6 519563 ( 1.34%) 744034646 ( 2.51%) 1432.04
http(s) 18422 ( 0.05%) 22787493 ( 0.08%) 1236.97
http(c) 10579 ( 0.03%) 1071986 ( 0.00%) 101.33
squid 25 ( 0.00%) 3491 ( 0.00%) 139.64
smtp 372 ( 0.00%) 120669 ( 0.00%) 324.38
ftp 108 ( 0.00%) 9438 ( 0.00%) 87.39
ssh 250 ( 0.00%) 112336 ( 0.00%) 449.34
dns 1123 ( 0.00%) 286017 ( 0.00%) 254.69
bgp 97 ( 0.00%) 26147 ( 0.00%) 269.56
other 488587 ( 1.26%) 719617069 ( 2.43%) 1472.85
udp6 45064 ( 0.12%) 14327879 ( 0.05%) 317.95
dns 42751 ( 0.11%) 13972946 ( 0.05%) 326.84
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2312 ( 0.01%) 354824 ( 0.00%) 153.47
icmp6 15858 ( 0.04%) 1833664 ( 0.01%) 115.63
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 422 ( 0.00%) 361949 ( 0.00%) 857.70
tcpdump file: 201012151400.dump.gz (939.17 MB)