Traffic Trace Info
DumpFile: 201012231400.dump
FileSize: 2258.25MB
Id: 201012231400
StartTime: Thu Dec 23 14:00:00 2010
EndTime: Thu Dec 23 14:15:00 2010
TotalTime: 899.93 seconds
TotalCapSize: 1774.66MB CapLen: 96 bytes
# of packets: 31691890 (26014.26MB)
AvgRate: 242.53Mbps stddev:38.04M
IP flow (unique src/dst pair) Information
# of flows: 758026 (avg. 41.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.0% 1.9% 1.7% 1.3% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 400758
Top 10 bandwidth usage (bytes/total in %):
8.7% 5.1% 4.4% 3.5% 3.5% 2.7% 2.5% 2.2% 2.1% 2.1%
# of IPv6 addresses: 3948
Top 10 bandwidth usage (bytes/total in %):
81.7% 75.9% 6.8% 6.8% 6.6% 4.5% 4.5% 1.0% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012231400.pktlen.png)
detailed numbers
[ 32- 63]: 4993900
[ 64- 127]: 6830079
[ 128- 255]: 1120814
[ 256- 511]: 692314
[ 512- 1023]: 760439
[ 1024- 2047]: 17294344
Protocol Breakdown
![[protocol breakdown chart]](201012231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31691890 (100.00%) 27277930394 (100.00%) 860.72
ip 31365115 ( 98.97%) 26943600761 ( 98.77%) 859.03
tcp 25633188 ( 80.88%) 24342185315 ( 89.24%) 949.64
http(s) 13837914 ( 43.66%) 18615025988 ( 68.24%) 1345.22
http(c) 5919870 ( 18.68%) 1772335768 ( 6.50%) 299.39
squid 316271 ( 1.00%) 145886125 ( 0.53%) 461.27
smtp 210179 ( 0.66%) 116331336 ( 0.43%) 553.49
ftp 996073 ( 3.14%) 942762354 ( 3.46%) 946.48
pop3 6418 ( 0.02%) 3715202 ( 0.01%) 578.87
imap 3035 ( 0.01%) 1528051 ( 0.01%) 503.48
telnet 1245 ( 0.00%) 89681 ( 0.00%) 72.03
ssh 150023 ( 0.47%) 24559610 ( 0.09%) 163.71
dns 8248 ( 0.03%) 631363 ( 0.00%) 76.55
bgp 571 ( 0.00%) 108831 ( 0.00%) 190.60
napster 173 ( 0.00%) 16229 ( 0.00%) 93.81
realaud 54 ( 0.00%) 6513 ( 0.00%) 120.61
rtsp 61 ( 0.00%) 21084 ( 0.00%) 345.64
icecast 14461 ( 0.05%) 12001935 ( 0.04%) 829.95
hotline 13 ( 0.00%) 794 ( 0.00%) 61.08
other 4168575 ( 13.15%) 2707164211 ( 9.92%) 649.42
udp 4611668 ( 14.55%) 2361392863 ( 8.66%) 512.05
dns 812316 ( 2.56%) 127010664 ( 0.47%) 156.36
realaud 14 ( 0.00%) 1551 ( 0.00%) 110.79
halflif 59 ( 0.00%) 4976 ( 0.00%) 84.34
starcra 67 ( 0.00%) 6843 ( 0.00%) 102.13
everque 8726 ( 0.03%) 2955438 ( 0.01%) 338.69
unreal 50 ( 0.00%) 5833 ( 0.00%) 116.66
quake 11 ( 0.00%) 1015 ( 0.00%) 92.27
cuseeme 6 ( 0.00%) 796 ( 0.00%) 132.67
other 3790166 ( 11.96%) 2231249377 ( 8.18%) 588.69
icmp 548456 ( 1.73%) 103421130 ( 0.38%) 188.57
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 282 ( 0.00%) 71676 ( 0.00%) 254.17
ip6 562353 ( 1.77%) 134785386 ( 0.49%) 239.68
other 8984 ( 0.03%) 1725231 ( 0.01%) 192.03
frag 1096 ( 0.00%) 1108404 ( 0.00%) 1011.32
ip6 326775 ( 1.03%) 334329633 ( 1.23%) 1023.12
tcp6 237579 ( 0.75%) 298292350 ( 1.09%) 1255.55
http(s) 3612 ( 0.01%) 3733167 ( 0.01%) 1033.55
http(c) 22221 ( 0.07%) 1923730 ( 0.01%) 86.57
squid 51 ( 0.00%) 5496 ( 0.00%) 107.76
smtp 139 ( 0.00%) 33372 ( 0.00%) 240.09
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
ssh 455 ( 0.00%) 50938 ( 0.00%) 111.95
dns 879 ( 0.00%) 226563 ( 0.00%) 257.75
bgp 97 ( 0.00%) 24993 ( 0.00%) 257.66
other 210041 ( 0.66%) 292286597 ( 1.07%) 1391.57
udp6 38926 ( 0.12%) 11211252 ( 0.04%) 288.01
dns 35120 ( 0.11%) 10734989 ( 0.04%) 305.67
halflif 2 ( 0.00%) 217 ( 0.00%) 108.50
starcra 6 ( 0.00%) 571 ( 0.00%) 95.17
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3796 ( 0.01%) 475258 ( 0.00%) 125.20
icmp6 17604 ( 0.06%) 1920845 ( 0.01%) 109.11
ip6 78 ( 0.00%) 10704 ( 0.00%) 137.23
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 32557 ( 0.10%) 22890266 ( 0.08%) 703.08
tcpdump file: 201012231400.dump.gz (738.56 MB)