Traffic Trace Info
DumpFile: 201012241400.dump
FileSize: 2180.72MB
Id: 201012241400
StartTime: Fri Dec 24 14:00:00 2010
EndTime: Fri Dec 24 14:15:01 2010
TotalTime: 900.19 seconds
TotalCapSize: 1711.78MB CapLen: 96 bytes
# of packets: 30731726 (22988.17MB)
AvgRate: 214.23Mbps stddev:31.44M
IP flow (unique src/dst pair) Information
# of flows: 899621 (avg. 34.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.7% 1.6% 1.5% 1.4% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 467810
Top 10 bandwidth usage (bytes/total in %):
9.4% 5.6% 3.3% 3.1% 3.1% 2.8% 2.4% 2.4% 2.3% 2.1%
# of IPv6 addresses: 4003
Top 10 bandwidth usage (bytes/total in %):
90.5% 82.8% 8.2% 1.0% 1.0% 1.0% 0.6% 0.6% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012241400.pktlen.png)
detailed numbers
[ 32- 63]: 5741942
[ 64- 127]: 7192356
[ 128- 255]: 1210103
[ 256- 511]: 712077
[ 512- 1023]: 688011
[ 1024- 2047]: 15187237
Protocol Breakdown
![[protocol breakdown chart]](201012241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30731726 (100.00%) 24104841587 (100.00%) 784.36
ip 30454009 ( 99.10%) 23797017146 ( 98.72%) 781.41
tcp 24429686 ( 79.49%) 21246502908 ( 88.14%) 869.70
http(s) 13075051 ( 42.55%) 17656381700 ( 73.25%) 1350.39
http(c) 7356826 ( 23.94%) 1661142850 ( 6.89%) 225.80
squid 206676 ( 0.67%) 99297405 ( 0.41%) 480.45
smtp 308425 ( 1.00%) 208272539 ( 0.86%) 675.28
ftp 79327 ( 0.26%) 35343551 ( 0.15%) 445.54
pop3 16579 ( 0.05%) 9083053 ( 0.04%) 547.86
imap 3610 ( 0.01%) 636921 ( 0.00%) 176.43
telnet 427 ( 0.00%) 31591 ( 0.00%) 73.98
ssh 112241 ( 0.37%) 17345656 ( 0.07%) 154.54
dns 12174 ( 0.04%) 1133778 ( 0.00%) 93.13
bgp 557 ( 0.00%) 89332 ( 0.00%) 160.38
napster 109 ( 0.00%) 95024 ( 0.00%) 871.78
realaud 28 ( 0.00%) 3006 ( 0.00%) 107.36
rtsp 8992 ( 0.03%) 7881371 ( 0.03%) 876.49
icecast 1135 ( 0.00%) 190315 ( 0.00%) 167.68
hotline 5 ( 0.00%) 320 ( 0.00%) 64.00
other 3247524 ( 10.57%) 1549574496 ( 6.43%) 477.16
udp 4565966 ( 14.86%) 2126795314 ( 8.82%) 465.79
dns 907895 ( 2.95%) 140971021 ( 0.58%) 155.27
realaud 17 ( 0.00%) 1484 ( 0.00%) 87.29
halflif 32 ( 0.00%) 3323 ( 0.00%) 103.84
starcra 25 ( 0.00%) 2749 ( 0.00%) 109.96
everque 619 ( 0.00%) 76792 ( 0.00%) 124.06
unreal 8 ( 0.00%) 1003 ( 0.00%) 125.38
quake 39 ( 0.00%) 3096 ( 0.00%) 79.38
cuseeme 8 ( 0.00%) 867 ( 0.00%) 108.38
other 3657059 ( 11.90%) 1985558947 ( 8.24%) 542.94
icmp 701180 ( 2.28%) 123496233 ( 0.51%) 176.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 237 ( 0.00%) 66190 ( 0.00%) 279.28
ip6 741201 ( 2.41%) 297478668 ( 1.23%) 401.35
other 15554 ( 0.05%) 2658563 ( 0.01%) 170.92
frag 2478 ( 0.01%) 2034811 ( 0.01%) 821.15
ip6 277717 ( 0.90%) 307824441 ( 1.28%) 1108.41
tcp6 211809 ( 0.69%) 290909758 ( 1.21%) 1373.45
http(s) 3187 ( 0.01%) 3610076 ( 0.01%) 1132.75
http(c) 6983 ( 0.02%) 660963 ( 0.00%) 94.65
smtp 206 ( 0.00%) 81732 ( 0.00%) 396.76
ftp 84 ( 0.00%) 7494 ( 0.00%) 89.21
ssh 32 ( 0.00%) 8080 ( 0.00%) 252.50
dns 481 ( 0.00%) 127210 ( 0.00%) 264.47
bgp 94 ( 0.00%) 21703 ( 0.00%) 230.88
other 200742 ( 0.65%) 286392500 ( 1.19%) 1426.67
udp6 45503 ( 0.15%) 14559187 ( 0.06%) 319.96
dns 42519 ( 0.14%) 13709564 ( 0.06%) 322.43
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 223 ( 0.00%) 111.50
other 2981 ( 0.01%) 849293 ( 0.00%) 284.90
icmp6 19930 ( 0.06%) 2009389 ( 0.01%) 100.82
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 362 ( 0.00%) 330733 ( 0.00%) 913.63
tcpdump file: 201012241400.dump.gz (733.77 MB)