Traffic Trace Info
DumpFile: 201012201400.dump
FileSize: 2896.09MB
Id: 201012201400
StartTime: Mon Dec 20 14:00:01 2010
EndTime: Mon Dec 20 14:15:01 2010
TotalTime: 900.22 seconds
TotalCapSize: -1821.14MB CapLen: 96 bytes
# of packets: 40712062 (28679.53MB)
AvgRate: 267.26Mbps stddev:39.23M
IP flow (unique src/dst pair) Information
# of flows: 1024621 (avg. 39.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.1% 1.1% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 571271
Top 10 bandwidth usage (bytes/total in %):
8.4% 7.6% 6.3% 4.2% 3.5% 2.6% 2.4% 2.4% 2.3% 2.2%
# of IPv6 addresses: 3682
Top 10 bandwidth usage (bytes/total in %):
80.9% 73.6% 10.6% 10.4% 7.4% 1.0% 0.6% 0.6% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012201400.pktlen.png)
detailed numbers
[ 32- 63]: 7282552
[ 64- 127]: 10755624
[ 128- 255]: 1823943
[ 256- 511]: 1008789
[ 512- 1023]: 972388
[ 1024- 2047]: 18868766
Protocol Breakdown
![[protocol breakdown chart]](201012201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40712062 (100.00%) 30072669425 (100.00%) 738.67
ip 40398841 ( 99.23%) 29744757538 ( 98.91%) 736.28
tcp 32912205 ( 80.84%) 25829025931 ( 85.89%) 784.79
http(s) 14505335 ( 35.63%) 19348387898 ( 64.34%) 1333.88
http(c) 10290666 ( 25.28%) 2318805263 ( 7.71%) 225.33
squid 312545 ( 0.77%) 109872393 ( 0.37%) 351.54
smtp 244428 ( 0.60%) 117355008 ( 0.39%) 480.12
ftp 99608 ( 0.24%) 22999347 ( 0.08%) 230.90
pop3 24890 ( 0.06%) 5367344 ( 0.02%) 215.64
imap 5559 ( 0.01%) 2216823 ( 0.01%) 398.78
telnet 1052 ( 0.00%) 75538 ( 0.00%) 71.80
ssh 1964206 ( 4.82%) 285502570 ( 0.95%) 145.35
dns 221220 ( 0.54%) 211774055 ( 0.70%) 957.30
bgp 556 ( 0.00%) 83394 ( 0.00%) 149.99
napster 39 ( 0.00%) 3444 ( 0.00%) 88.31
realaud 1618 ( 0.00%) 104025 ( 0.00%) 64.29
rtsp 33387 ( 0.08%) 14846866 ( 0.05%) 444.69
icecast 14112 ( 0.03%) 15138920 ( 0.05%) 1072.77
hotline 10 ( 0.00%) 656 ( 0.00%) 65.60
other 5192973 ( 12.76%) 3376492327 ( 11.23%) 650.20
udp 6002956 ( 14.74%) 3411209264 ( 11.34%) 568.25
dns 979115 ( 2.40%) 155561644 ( 0.52%) 158.88
realaud 15 ( 0.00%) 1541 ( 0.00%) 102.73
halflif 29 ( 0.00%) 2240 ( 0.00%) 77.24
starcra 14 ( 0.00%) 2263 ( 0.00%) 161.64
everque 567 ( 0.00%) 74359 ( 0.00%) 131.14
unreal 18 ( 0.00%) 2634 ( 0.00%) 146.33
quake 23 ( 0.00%) 5065 ( 0.00%) 220.22
cuseeme 8 ( 0.00%) 995 ( 0.00%) 124.38
other 5022840 ( 12.34%) 3255338874 ( 10.82%) 648.11
icmp 540495 ( 1.33%) 101647208 ( 0.34%) 188.06
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17168 ( 0.04%) 3938072 ( 0.01%) 229.38
ip6 874350 ( 2.15%) 391823674 ( 1.30%) 448.13
other 51482 ( 0.13%) 7094119 ( 0.02%) 137.80
frag 5400 ( 0.01%) 4323999 ( 0.01%) 800.74
ip6 313221 ( 0.77%) 327911887 ( 1.09%) 1046.90
tcp6 247520 ( 0.61%) 308860943 ( 1.03%) 1247.82
http(s) 28579 ( 0.07%) 40569624 ( 0.13%) 1419.56
http(c) 7900 ( 0.02%) 805177 ( 0.00%) 101.92
smtp 228 ( 0.00%) 50777 ( 0.00%) 222.71
ftp 84 ( 0.00%) 7506 ( 0.00%) 89.36
ssh 31 ( 0.00%) 7946 ( 0.00%) 256.32
dns 936 ( 0.00%) 242821 ( 0.00%) 259.42
bgp 99 ( 0.00%) 22622 ( 0.00%) 228.51
other 209663 ( 0.51%) 267154470 ( 0.89%) 1274.21
udp6 52044 ( 0.13%) 17015468 ( 0.06%) 326.94
dns 50572 ( 0.12%) 16774733 ( 0.06%) 331.70
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1471 ( 0.00%) 240626 ( 0.00%) 163.58
icmp6 13128 ( 0.03%) 1617905 ( 0.01%) 123.24
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 416 ( 0.00%) 402197 ( 0.00%) 966.82
tcpdump file: 201012201400.dump.gz (1020.00 MB)