Traffic Trace Info
DumpFile: 201012211400.dump
FileSize: 2684.72MB
Id: 201012211400
StartTime: Tue Dec 21 14:00:01 2010
EndTime: Tue Dec 21 14:15:01 2010
TotalTime: 900.12 seconds
TotalCapSize: -1983.62MB CapLen: 96 bytes
# of packets: 37508147 (27400.37MB)
AvgRate: 255.38Mbps stddev:32.99M
IP flow (unique src/dst pair) Information
# of flows: 1060639 (avg. 35.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.4% 1.3% 1.3% 1.1% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 561929
Top 10 bandwidth usage (bytes/total in %):
6.2% 4.3% 3.4% 3.0% 2.5% 2.4% 2.3% 2.3% 2.1% 2.1%
# of IPv6 addresses: 3887
Top 10 bandwidth usage (bytes/total in %):
77.1% 70.5% 13.7% 13.7% 7.3% 1.0% 0.9% 0.9% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012211400.pktlen.png)
detailed numbers
[ 32- 63]: 6828796
[ 64- 127]: 9110472
[ 128- 255]: 1377199
[ 256- 511]: 1131815
[ 512- 1023]: 930386
[ 1024- 2047]: 18129479
Protocol Breakdown
![[protocol breakdown chart]](201012211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37508147 (100.00%) 28731368212 (100.00%) 766.00
ip 37145788 ( 99.03%) 28367601180 ( 98.73%) 763.68
tcp 30409409 ( 81.07%) 25131432072 ( 87.47%) 826.44
http(s) 14886014 ( 39.69%) 19341724623 ( 67.32%) 1299.32
http(c) 9343282 ( 24.91%) 2366407399 ( 8.24%) 253.27
squid 359565 ( 0.96%) 192738380 ( 0.67%) 536.03
smtp 209137 ( 0.56%) 100651755 ( 0.35%) 481.27
ftp 96954 ( 0.26%) 41359633 ( 0.14%) 426.59
pop3 22643 ( 0.06%) 8198041 ( 0.03%) 362.06
imap 5806 ( 0.02%) 2381969 ( 0.01%) 410.26
telnet 20910 ( 0.06%) 1543455 ( 0.01%) 73.81
ssh 137700 ( 0.37%) 20103594 ( 0.07%) 146.00
dns 12949 ( 0.03%) 1251725 ( 0.00%) 96.67
bgp 575 ( 0.00%) 99439 ( 0.00%) 172.94
napster 27 ( 0.00%) 2271 ( 0.00%) 84.11
realaud 54 ( 0.00%) 25055 ( 0.00%) 463.98
rtsp 35495 ( 0.09%) 36633324 ( 0.13%) 1032.07
icecast 5830 ( 0.02%) 858845 ( 0.00%) 147.31
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 5272454 ( 14.06%) 3017451712 ( 10.50%) 572.30
udp 5158143 ( 13.75%) 2534223427 ( 8.82%) 491.31
dns 914792 ( 2.44%) 142777385 ( 0.50%) 156.08
realaud 49 ( 0.00%) 4315 ( 0.00%) 88.06
halflif 46 ( 0.00%) 4235 ( 0.00%) 92.07
starcra 28 ( 0.00%) 5033 ( 0.00%) 179.75
everque 644 ( 0.00%) 110967 ( 0.00%) 172.31
unreal 33 ( 0.00%) 7073 ( 0.00%) 214.33
quake 35 ( 0.00%) 4227 ( 0.00%) 120.77
cuseeme 5 ( 0.00%) 1339 ( 0.00%) 267.80
other 4242067 ( 11.31%) 2391140207 ( 8.32%) 563.67
icmp 459067 ( 1.22%) 80941518 ( 0.28%) 176.32
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12811 ( 0.03%) 2861250 ( 0.01%) 223.34
ip6 1095346 ( 2.92%) 616091912 ( 2.14%) 562.46
other 10827 ( 0.03%) 2031731 ( 0.01%) 187.65
frag 2479 ( 0.01%) 2152314 ( 0.01%) 868.22
ip6 362359 ( 0.97%) 363767032 ( 1.27%) 1003.89
tcp6 298897 ( 0.80%) 345964541 ( 1.20%) 1157.47
http(s) 6074 ( 0.02%) 6650297 ( 0.02%) 1094.88
http(c) 9522 ( 0.03%) 965749 ( 0.00%) 101.42
smtp 599 ( 0.00%) 174932 ( 0.00%) 292.04
ftp 59 ( 0.00%) 5267 ( 0.00%) 89.27
ssh 34 ( 0.00%) 8956 ( 0.00%) 263.41
dns 763 ( 0.00%) 201858 ( 0.00%) 264.56
bgp 92 ( 0.00%) 20555 ( 0.00%) 223.42
other 281754 ( 0.75%) 337936927 ( 1.18%) 1199.40
udp6 49777 ( 0.13%) 15993733 ( 0.06%) 321.31
dns 48222 ( 0.13%) 15752514 ( 0.05%) 326.67
starcra 2 ( 0.00%) 210 ( 0.00%) 105.00
other 1553 ( 0.00%) 241009 ( 0.00%) 155.19
icmp6 13271 ( 0.04%) 1508766 ( 0.01%) 113.69
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 302 ( 0.00%) 284736 ( 0.00%) 942.83
tcpdump file: 201012211400.dump.gz (927.53 MB)