Traffic Trace Info
DumpFile: 201012191400.dump
FileSize: 1852.78MB
Id: 201012191400
StartTime: Sun Dec 19 14:00:00 2010
EndTime: Sun Dec 19 14:15:00 2010
TotalTime: 899.49 seconds
TotalCapSize: 1449.99MB CapLen: 96 bytes
# of packets: 26396633 (19664.19MB)
AvgRate: 183.39Mbps stddev:26.15M
IP flow (unique src/dst pair) Information
# of flows: 796449 (avg. 33.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.4% 2.3% 1.9% 1.6% 1.3% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 437333
Top 10 bandwidth usage (bytes/total in %):
14.3% 9.2% 6.1% 3.1% 2.9% 2.9% 2.7% 2.5% 2.4% 2.4%
# of IPv6 addresses: 3366
Top 10 bandwidth usage (bytes/total in %):
52.4% 51.1% 7.1% 7.1% 6.9% 6.7% 4.9% 3.2% 3.1% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012191400.pktlen.png)
detailed numbers
[ 32- 63]: 4372288
[ 64- 127]: 6284068
[ 128- 255]: 1402275
[ 256- 511]: 697626
[ 512- 1023]: 686562
[ 1024- 2047]: 12953814
Protocol Breakdown
![[protocol breakdown chart]](201012191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26396633 (100.00%) 20619396981 (100.00%) 781.14
ip 26311411 ( 99.68%) 20575673800 ( 99.79%) 782.01
tcp 18999028 ( 71.98%) 16641510558 ( 80.71%) 875.91
http(s) 9748914 ( 36.93%) 13283056170 ( 64.42%) 1362.52
http(c) 4595399 ( 17.41%) 1029061156 ( 4.99%) 223.93
squid 245501 ( 0.93%) 103996739 ( 0.50%) 423.61
smtp 148018 ( 0.56%) 49575477 ( 0.24%) 334.93
ftp 35015 ( 0.13%) 16537951 ( 0.08%) 472.31
pop3 7534 ( 0.03%) 4447609 ( 0.02%) 590.34
imap 5626 ( 0.02%) 2112453 ( 0.01%) 375.48
telnet 780 ( 0.00%) 55169 ( 0.00%) 70.73
ssh 54172 ( 0.21%) 14789440 ( 0.07%) 273.01
dns 6690 ( 0.03%) 509324 ( 0.00%) 76.13
bgp 702 ( 0.00%) 239493 ( 0.00%) 341.16
napster 35 ( 0.00%) 6521 ( 0.00%) 186.31
realaud 105 ( 0.00%) 10043 ( 0.00%) 95.65
rtsp 5053 ( 0.02%) 5822511 ( 0.03%) 1152.29
icecast 3576 ( 0.01%) 514082 ( 0.00%) 143.76
other 4141908 ( 15.69%) 2130776420 ( 10.33%) 514.44
udp 5767414 ( 21.85%) 3172151589 ( 15.38%) 550.01
dns 765277 ( 2.90%) 114528486 ( 0.56%) 149.66
realaud 936 ( 0.00%) 57306 ( 0.00%) 61.22
halflif 57 ( 0.00%) 5701 ( 0.00%) 100.02
starcra 128 ( 0.00%) 15703 ( 0.00%) 122.68
everque 202 ( 0.00%) 42667 ( 0.00%) 211.22
unreal 14 ( 0.00%) 3231 ( 0.00%) 230.79
quake 75 ( 0.00%) 7080 ( 0.00%) 94.40
cuseeme 5 ( 0.00%) 677 ( 0.00%) 135.40
other 4999494 ( 18.94%) 3057297258 ( 14.83%) 611.52
icmp 482219 ( 1.83%) 97005336 ( 0.47%) 201.16
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6561 ( 0.02%) 1037166 ( 0.01%) 158.08
ip6 1043227 ( 3.95%) 661751430 ( 3.21%) 634.33
other 12777 ( 0.05%) 2198451 ( 0.01%) 172.06
frag 2993 ( 0.01%) 1986012 ( 0.01%) 663.55
ip6 85222 ( 0.32%) 43723181 ( 0.21%) 513.05
tcp6 31044 ( 0.12%) 29384226 ( 0.14%) 946.53
http(s) 2185 ( 0.01%) 2207374 ( 0.01%) 1010.24
http(c) 4184 ( 0.02%) 472909 ( 0.00%) 113.03
smtp 94 ( 0.00%) 18850 ( 0.00%) 200.53
ftp 71 ( 0.00%) 6290 ( 0.00%) 88.59
ssh 16 ( 0.00%) 1976 ( 0.00%) 123.50
dns 515 ( 0.00%) 154735 ( 0.00%) 300.46
bgp 92 ( 0.00%) 18596 ( 0.00%) 202.13
other 23887 ( 0.09%) 26503496 ( 0.13%) 1109.54
udp6 35764 ( 0.14%) 9503050 ( 0.05%) 265.72
dns 31088 ( 0.12%) 8838479 ( 0.04%) 284.31
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
other 4674 ( 0.02%) 664356 ( 0.00%) 142.14
icmp6 13761 ( 0.05%) 1591439 ( 0.01%) 115.65
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4543 ( 0.02%) 3229446 ( 0.02%) 710.86
tcpdump file: 201012191400.dump.gz (629.70 MB)