Traffic Trace Info
DumpFile: 201012161400.dump
FileSize: 2657.04MB
Id: 201012161400
StartTime: Thu Dec 16 14:00:00 2010
EndTime: Thu Dec 16 14:15:00 2010
TotalTime: 900.19 seconds
TotalCapSize: -2013.98MB CapLen: 96 bytes
# of packets: 37683897 (27758.81MB)
AvgRate: 258.58Mbps stddev:36.38M
IP flow (unique src/dst pair) Information
# of flows: 986862 (avg. 38.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.6% 1.3% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 518135
Top 10 bandwidth usage (bytes/total in %):
9.8% 8.6% 5.1% 4.5% 4.2% 3.1% 3.1% 2.5% 1.9% 1.8%
# of IPv6 addresses: 4071
Top 10 bandwidth usage (bytes/total in %):
26.7% 23.0% 23.0% 19.7% 15.8% 13.6% 9.6% 4.1% 4.1% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012161400.pktlen.png)
detailed numbers
[ 32- 63]: 8194315
[ 64- 127]: 7957156
[ 128- 255]: 1236745
[ 256- 511]: 950990
[ 512- 1023]: 938084
[ 1024- 2047]: 18406607
Protocol Breakdown
![[protocol breakdown chart]](201012161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37683897 (100.00%) 29107222680 (100.00%) 772.40
ip 37515081 ( 99.55%) 28999388085 ( 99.63%) 773.01
tcp 30350743 ( 80.54%) 24979459168 ( 85.82%) 823.03
http(s) 15627599 ( 41.47%) 20813724622 ( 71.51%) 1331.86
http(c) 10146503 ( 26.93%) 1627600835 ( 5.59%) 160.41
squid 272802 ( 0.72%) 172450343 ( 0.59%) 632.14
smtp 229840 ( 0.61%) 113180921 ( 0.39%) 492.43
ftp 41014 ( 0.11%) 6767972 ( 0.02%) 165.02
pop3 36349 ( 0.10%) 4496421 ( 0.02%) 123.70
imap 6766 ( 0.02%) 3405859 ( 0.01%) 503.38
telnet 263 ( 0.00%) 16910 ( 0.00%) 64.30
ssh 65532 ( 0.17%) 7792777 ( 0.03%) 118.92
dns 10230 ( 0.03%) 947738 ( 0.00%) 92.64
bgp 651 ( 0.00%) 122588 ( 0.00%) 188.31
napster 214 ( 0.00%) 177431 ( 0.00%) 829.12
realaud 46 ( 0.00%) 3929 ( 0.00%) 85.41
rtsp 30793 ( 0.08%) 29265040 ( 0.10%) 950.38
icecast 25731 ( 0.07%) 16139360 ( 0.06%) 627.23
hotline 25 ( 0.00%) 4477 ( 0.00%) 179.08
other 3856382 ( 10.23%) 2183361765 ( 7.50%) 566.17
udp 6011170 ( 15.95%) 3538769214 ( 12.16%) 588.70
dns 833141 ( 2.21%) 139539758 ( 0.48%) 167.49
realaud 11 ( 0.00%) 1632 ( 0.00%) 148.36
halflif 39 ( 0.00%) 4016 ( 0.00%) 102.97
starcra 38 ( 0.00%) 5935 ( 0.00%) 156.18
everque 562 ( 0.00%) 84610 ( 0.00%) 150.55
unreal 13 ( 0.00%) 1537 ( 0.00%) 118.23
quake 17 ( 0.00%) 2298 ( 0.00%) 135.18
cuseeme 11 ( 0.00%) 1906 ( 0.00%) 173.27
other 5170283 ( 13.72%) 3398555512 ( 11.68%) 657.32
icmp 407441 ( 1.08%) 31979854 ( 0.11%) 78.49
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1450 ( 0.00%) 1146236 ( 0.00%) 790.51
ip6 718983 ( 1.91%) 439612181 ( 1.51%) 611.44
other 25110 ( 0.07%) 8402272 ( 0.03%) 334.62
frag 14854 ( 0.04%) 11656372 ( 0.04%) 784.73
ip6 168816 ( 0.45%) 107834595 ( 0.37%) 638.77
tcp6 97745 ( 0.26%) 88535802 ( 0.30%) 905.78
http(s) 26722 ( 0.07%) 32917614 ( 0.11%) 1231.85
http(c) 15538 ( 0.04%) 1490061 ( 0.01%) 95.90
smtp 457 ( 0.00%) 106278 ( 0.00%) 232.56
ftp 106 ( 0.00%) 9428 ( 0.00%) 88.94
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 1033 ( 0.00%) 269062 ( 0.00%) 260.47
bgp 95 ( 0.00%) 22293 ( 0.00%) 234.66
other 53793 ( 0.14%) 53720980 ( 0.18%) 998.66
udp6 51202 ( 0.14%) 16761377 ( 0.06%) 327.36
dns 49473 ( 0.13%) 16484720 ( 0.06%) 333.21
realaud 1 ( 0.00%) 96 ( 0.00%) 96.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1726 ( 0.00%) 276348 ( 0.00%) 160.11
icmp6 19398 ( 0.05%) 2181332 ( 0.01%) 112.45
ip6 80 ( 0.00%) 10990 ( 0.00%) 137.38
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 360 ( 0.00%) 340878 ( 0.00%) 946.88
tcpdump file: 201012161400.dump.gz (912.26 MB)