Traffic Trace Info
DumpFile: 201012181400.dump
FileSize: 2224.27MB
Id: 201012181400
StartTime: Sat Dec 18 14:00:00 2010
EndTime: Sat Dec 18 14:15:00 2010
TotalTime: 899.65 seconds
TotalCapSize: 1740.08MB CapLen: 96 bytes
# of packets: 31731570 (23349.83MB)
AvgRate: 217.73Mbps stddev:27.88M
IP flow (unique src/dst pair) Information
# of flows: 932743 (avg. 34.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.5% 1.4% 1.0% 1.0% 1.0% 0.9% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 539258
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.8% 4.3% 3.8% 3.5% 2.4% 2.3% 2.3% 2.0% 1.9%
# of IPv6 addresses: 3578
Top 10 bandwidth usage (bytes/total in %):
81.9% 80.0% 4.3% 3.7% 3.7% 3.6% 1.2% 1.2% 0.9% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012181400.pktlen.png)
detailed numbers
[ 32- 63]: 6405210
[ 64- 127]: 6961122
[ 128- 255]: 1369185
[ 256- 511]: 752923
[ 512- 1023]: 699882
[ 1024- 2047]: 15543248
Protocol Breakdown
![[protocol breakdown chart]](201012181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31731570 (100.00%) 24484073414 (100.00%) 771.60
ip 31539724 ( 99.40%) 24317868657 ( 99.32%) 771.02
tcp 24475548 ( 77.13%) 20389639516 ( 83.28%) 833.06
http(s) 11899237 ( 37.50%) 16326163011 ( 66.68%) 1372.03
http(c) 6795699 ( 21.42%) 1060557579 ( 4.33%) 156.06
squid 241324 ( 0.76%) 100442647 ( 0.41%) 416.21
smtp 290821 ( 0.92%) 61569389 ( 0.25%) 211.71
ftp 103986 ( 0.33%) 52977005 ( 0.22%) 509.46
pop3 17219 ( 0.05%) 8056659 ( 0.03%) 467.89
imap 3359 ( 0.01%) 1775379 ( 0.01%) 528.54
telnet 743 ( 0.00%) 49724 ( 0.00%) 66.92
ssh 1129864 ( 3.56%) 160600389 ( 0.66%) 142.14
dns 8412 ( 0.03%) 782513 ( 0.00%) 93.02
bgp 594 ( 0.00%) 92680 ( 0.00%) 156.03
napster 39 ( 0.00%) 5169 ( 0.00%) 132.54
realaud 259 ( 0.00%) 21878 ( 0.00%) 84.47
rtsp 5003 ( 0.02%) 5795016 ( 0.02%) 1158.31
icecast 1536 ( 0.00%) 479291 ( 0.00%) 312.04
hotline 12 ( 0.00%) 1665 ( 0.00%) 138.75
other 3977441 ( 12.53%) 2610269522 ( 10.66%) 656.27
udp 5663799 ( 17.85%) 3471527971 ( 14.18%) 612.93
dns 753439 ( 2.37%) 114827329 ( 0.47%) 152.40
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 12 ( 0.00%) 1695 ( 0.00%) 141.25
halflif 31 ( 0.00%) 2754 ( 0.00%) 88.84
starcra 57 ( 0.00%) 8463 ( 0.00%) 148.47
everque 247 ( 0.00%) 54975 ( 0.00%) 222.57
unreal 6 ( 0.00%) 1162 ( 0.00%) 193.67
quake 46 ( 0.00%) 4539 ( 0.00%) 98.67
cuseeme 7 ( 0.00%) 558 ( 0.00%) 79.71
other 4909856 ( 15.47%) 3356554857 ( 13.71%) 683.64
icmp 540187 ( 1.70%) 105664276 ( 0.43%) 195.61
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9303 ( 0.03%) 1530482 ( 0.01%) 164.51
ip6 838979 ( 2.64%) 347358729 ( 1.42%) 414.03
other 11723 ( 0.04%) 2128413 ( 0.01%) 181.56
frag 564 ( 0.00%) 626919 ( 0.00%) 1111.56
ip6 191846 ( 0.60%) 166204757 ( 0.68%) 866.34
tcp6 140401 ( 0.44%) 154407980 ( 0.63%) 1099.76
http(s) 2713 ( 0.01%) 3083832 ( 0.01%) 1136.69
http(c) 25613 ( 0.08%) 2199317 ( 0.01%) 85.87
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 72 ( 0.00%) 8107 ( 0.00%) 112.60
ftp 106 ( 0.00%) 9428 ( 0.00%) 88.94
ssh 16 ( 0.00%) 1856 ( 0.00%) 116.00
dns 593 ( 0.00%) 147091 ( 0.00%) 248.05
bgp 94 ( 0.00%) 19446 ( 0.00%) 206.87
other 111185 ( 0.35%) 148938141 ( 0.61%) 1339.55
udp6 35999 ( 0.11%) 9829508 ( 0.04%) 273.05
dns 33233 ( 0.10%) 9344776 ( 0.04%) 281.19
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2764 ( 0.01%) 484521 ( 0.00%) 175.30
icmp6 14992 ( 0.05%) 1624387 ( 0.01%) 108.35
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 341 ( 0.00%) 327490 ( 0.00%) 960.38
tcpdump file: 201012181400.dump.gz (758.06 MB)