Traffic Trace Info
DumpFile: 201012221400.dump
FileSize: 2800.89MB
Id: 201012221400
StartTime: Wed Dec 22 14:00:01 2010
EndTime: Wed Dec 22 14:15:00 2010
TotalTime: 899.29 seconds
TotalCapSize: -1895.89MB CapLen: 96 bytes
# of packets: 39372324 (28771.94MB)
AvgRate: 268.43Mbps stddev:43.98M
IP flow (unique src/dst pair) Information
# of flows: 1077087 (avg. 36.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.2% 1.9% 1.3% 1.1% 1.1% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 556153
Top 10 bandwidth usage (bytes/total in %):
7.9% 5.6% 5.5% 5.3% 4.4% 2.8% 2.7% 2.4% 2.3% 2.3%
# of IPv6 addresses: 4266
Top 10 bandwidth usage (bytes/total in %):
51.0% 51.0% 24.8% 24.8% 2.8% 2.8% 2.0% 1.6% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012221400.pktlen.png)
detailed numbers
[ 32- 63]: 7850744
[ 64- 127]: 8981421
[ 128- 255]: 1543778
[ 256- 511]: 991512
[ 512- 1023]: 1117176
[ 1024- 2047]: 18887693
Protocol Breakdown
![[protocol breakdown chart]](201012221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39372324 (100.00%) 30169568003 (100.00%) 766.26
ip 39077579 ( 99.25%) 29967805974 ( 99.33%) 766.88
tcp 32348008 ( 82.16%) 26718065742 ( 88.56%) 825.96
http(s) 16445321 ( 41.77%) 21920097334 ( 72.66%) 1332.91
http(c) 9870491 ( 25.07%) 1688320113 ( 5.60%) 171.05
squid 309894 ( 0.79%) 116201555 ( 0.39%) 374.97
smtp 303871 ( 0.77%) 177009852 ( 0.59%) 582.52
nntp 4 ( 0.00%) 312 ( 0.00%) 78.00
ftp 101052 ( 0.26%) 48099180 ( 0.16%) 475.98
pop3 17956 ( 0.05%) 5970318 ( 0.02%) 332.50
imap 3633 ( 0.01%) 1429324 ( 0.00%) 393.43
telnet 632 ( 0.00%) 47535 ( 0.00%) 75.21
ssh 373947 ( 0.95%) 53508499 ( 0.18%) 143.09
dns 12489 ( 0.03%) 1119981 ( 0.00%) 89.68
bgp 565 ( 0.00%) 104956 ( 0.00%) 185.76
napster 51 ( 0.00%) 8981 ( 0.00%) 176.10
realaud 44 ( 0.00%) 4427 ( 0.00%) 100.61
rtsp 18137 ( 0.05%) 15673279 ( 0.05%) 864.16
icecast 2797 ( 0.01%) 534610 ( 0.00%) 191.14
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 4887117 ( 12.41%) 2689935012 ( 8.92%) 550.41
udp 5429910 ( 13.79%) 2815398484 ( 9.33%) 518.50
dns 935324 ( 2.38%) 147130374 ( 0.49%) 157.30
realaud 32 ( 0.00%) 5337 ( 0.00%) 166.78
halflif 32 ( 0.00%) 3339 ( 0.00%) 104.34
starcra 37 ( 0.00%) 7218 ( 0.00%) 195.08
everque 6823 ( 0.02%) 1004372 ( 0.00%) 147.20
unreal 14 ( 0.00%) 1912 ( 0.00%) 136.57
quake 17 ( 0.00%) 1802 ( 0.00%) 106.00
cuseeme 6 ( 0.00%) 488 ( 0.00%) 81.33
other 4486478 ( 11.40%) 2667029865 ( 8.84%) 594.46
icmp 548701 ( 1.39%) 103486661 ( 0.34%) 188.60
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 14474 ( 0.04%) 2946344 ( 0.01%) 203.56
ip6 724557 ( 1.84%) 325789922 ( 1.08%) 449.64
other 11745 ( 0.03%) 2099661 ( 0.01%) 178.77
frag 4570 ( 0.01%) 3544232 ( 0.01%) 775.54
ip6 294745 ( 0.75%) 201762029 ( 0.67%) 684.53
tcp6 221895 ( 0.56%) 183109712 ( 0.61%) 825.21
http(s) 7678 ( 0.02%) 8192151 ( 0.03%) 1066.96
http(c) 65975 ( 0.17%) 5770104 ( 0.02%) 87.46
smtp 647 ( 0.00%) 425360 ( 0.00%) 657.43
ftp 80 ( 0.00%) 7064 ( 0.00%) 88.30
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 905 ( 0.00%) 237287 ( 0.00%) 262.20
bgp 95 ( 0.00%) 20784 ( 0.00%) 218.78
other 146514 ( 0.37%) 168456876 ( 0.56%) 1149.77
udp6 52656 ( 0.13%) 16269365 ( 0.05%) 308.97
dns 48549 ( 0.12%) 15732583 ( 0.05%) 324.06
quake 3 ( 0.00%) 319 ( 0.00%) 106.33
other 4104 ( 0.01%) 536463 ( 0.00%) 130.72
icmp6 19757 ( 0.05%) 2074285 ( 0.01%) 104.99
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 322 ( 0.00%) 293039 ( 0.00%) 910.06
tcpdump file: 201012221400.dump.gz (958.97 MB)