Traffic Trace Info
DumpFile: 201012251400.dump
FileSize: 2215.81MB
Id: 201012251400
StartTime: Sat Dec 25 14:00:00 2010
EndTime: Sat Dec 25 14:15:01 2010
TotalTime: 900.59 seconds
TotalCapSize: 1741.00MB CapLen: 96 bytes
# of packets: 31116454 (24344.34MB)
AvgRate: 226.76Mbps stddev:35.86M
IP flow (unique src/dst pair) Information
# of flows: 802084 (avg. 38.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.4% 1.6% 1.5% 1.4% 1.4% 1.4% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 458903
Top 10 bandwidth usage (bytes/total in %):
12.5% 7.4% 6.0% 5.0% 4.9% 4.7% 3.4% 2.4% 2.2% 2.2%
# of IPv6 addresses: 3558
Top 10 bandwidth usage (bytes/total in %):
91.9% 66.7% 26.0% 3.7% 3.7% 0.8% 0.8% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012251400.pktlen.png)
detailed numbers
[ 32- 63]: 5986022
[ 64- 127]: 6467386
[ 128- 255]: 1191972
[ 256- 511]: 646641
[ 512- 1023]: 681180
[ 1024- 2047]: 16143253
Protocol Breakdown
![[protocol breakdown chart]](201012251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31116454 (100.00%) 25526893894 (100.00%) 820.37
ip 30293289 ( 97.35%) 24595055479 ( 96.35%) 811.90
tcp 24271046 ( 78.00%) 21818374851 ( 85.47%) 898.95
http(s) 13055067 ( 41.96%) 17873676339 ( 70.02%) 1369.10
http(c) 6398248 ( 20.56%) 1096122098 ( 4.29%) 171.32
squid 213382 ( 0.69%) 87674272 ( 0.34%) 410.88
smtp 151383 ( 0.49%) 38763215 ( 0.15%) 256.06
ftp 80696 ( 0.26%) 40054855 ( 0.16%) 496.37
pop3 7135 ( 0.02%) 2633791 ( 0.01%) 369.14
imap 2496 ( 0.01%) 774407 ( 0.00%) 310.26
telnet 1171 ( 0.00%) 86803 ( 0.00%) 74.13
ssh 241007 ( 0.77%) 29792893 ( 0.12%) 123.62
dns 8810 ( 0.03%) 706571 ( 0.00%) 80.20
bgp 540 ( 0.00%) 86406 ( 0.00%) 160.01
napster 138 ( 0.00%) 19523 ( 0.00%) 141.47
realaud 18 ( 0.00%) 1809 ( 0.00%) 100.50
rtsp 76 ( 0.00%) 29129 ( 0.00%) 383.28
icecast 1572 ( 0.01%) 566460 ( 0.00%) 360.34
hotline 9 ( 0.00%) 792 ( 0.00%) 88.00
other 4109297 ( 13.21%) 2647385428 ( 10.37%) 644.24
udp 4303959 ( 13.83%) 2113411716 ( 8.28%) 491.04
dns 729424 ( 2.34%) 112964781 ( 0.44%) 154.87
realaud 9 ( 0.00%) 1139 ( 0.00%) 126.56
halflif 24 ( 0.00%) 2418 ( 0.00%) 100.75
starcra 5 ( 0.00%) 424 ( 0.00%) 84.80
everque 201 ( 0.00%) 28352 ( 0.00%) 141.05
unreal 5 ( 0.00%) 473 ( 0.00%) 94.60
quake 21 ( 0.00%) 4699 ( 0.00%) 223.76
cuseeme 5 ( 0.00%) 484 ( 0.00%) 96.80
other 3574075 ( 11.49%) 2000230538 ( 7.84%) 559.65
icmp 535162 ( 1.72%) 100540519 ( 0.39%) 187.87
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 1632 ( 0.01%) 1002096 ( 0.00%) 614.03
ip6 1161619 ( 3.73%) 556756648 ( 2.18%) 479.29
other 19685 ( 0.06%) 4950269 ( 0.02%) 251.47
frag 892 ( 0.00%) 1024327 ( 0.00%) 1148.35
ip6 823165 ( 2.65%) 931838415 ( 3.65%) 1132.02
tcp6 719207 ( 2.31%) 883680791 ( 3.46%) 1228.69
http(s) 2678 ( 0.01%) 2546377 ( 0.01%) 950.85
http(c) 65837 ( 0.21%) 5823413 ( 0.02%) 88.45
smtp 320 ( 0.00%) 71146 ( 0.00%) 222.33
ftp 85 ( 0.00%) 7588 ( 0.00%) 89.27
ssh 31 ( 0.00%) 7994 ( 0.00%) 257.87
dns 298 ( 0.00%) 79355 ( 0.00%) 266.29
bgp 97 ( 0.00%) 16951 ( 0.00%) 174.75
other 649861 ( 2.09%) 875127967 ( 3.43%) 1346.64
udp6 34919 ( 0.11%) 10182446 ( 0.04%) 291.60
dns 32831 ( 0.11%) 9876251 ( 0.04%) 300.82
other 2088 ( 0.01%) 306195 ( 0.00%) 146.65
icmp6 17563 ( 0.06%) 1867838 ( 0.01%) 106.35
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 51363 ( 0.17%) 36091916 ( 0.14%) 702.68
tcpdump file: 201012251400.dump.gz (725.50 MB)