Traffic Trace Info
DumpFile: 201012271400.dump
FileSize: 2202.97MB
Id: 201012271400
StartTime: Mon Dec 27 14:00:00 2010
EndTime: Mon Dec 27 14:15:00 2010
TotalTime: 900.07 seconds
TotalCapSize: 1730.62MB CapLen: 96 bytes
# of packets: 30954993 (23398.20MB)
AvgRate: 218.10Mbps stddev:26.70M
IP flow (unique src/dst pair) Information
# of flows: 1016080 (avg. 30.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.4% 2.3% 1.8% 1.8% 1.4% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 565564
Top 10 bandwidth usage (bytes/total in %):
10.8% 7.8% 7.0% 4.4% 3.4% 2.9% 2.4% 2.4% 2.3% 1.9%
# of IPv6 addresses: 3083
Top 10 bandwidth usage (bytes/total in %):
78.1% 71.7% 9.3% 9.3% 6.7% 4.3% 4.0% 1.2% 1.2% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012271400.pktlen.png)
detailed numbers
[ 32- 63]: 5471430
[ 64- 127]: 7287351
[ 128- 255]: 1097449
[ 256- 511]: 792125
[ 512- 1023]: 750643
[ 1024- 2047]: 15555995
Protocol Breakdown
![[protocol breakdown chart]](201012271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30954993 (100.00%) 24534791279 (100.00%) 792.60
ip 30616194 ( 98.91%) 24180260092 ( 98.55%) 789.79
tcp 24606685 ( 79.49%) 21173392845 ( 86.30%) 860.47
http(s) 12405012 ( 40.07%) 16616727017 ( 67.73%) 1339.52
http(c) 7010592 ( 22.65%) 1547427292 ( 6.31%) 220.73
squid 243257 ( 0.79%) 133797977 ( 0.55%) 550.03
smtp 148634 ( 0.48%) 79388506 ( 0.32%) 534.12
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 81028 ( 0.26%) 40352506 ( 0.16%) 498.01
pop3 17992 ( 0.06%) 3945324 ( 0.02%) 219.28
imap 5439 ( 0.02%) 1222189 ( 0.00%) 224.71
telnet 948 ( 0.00%) 68405 ( 0.00%) 72.16
ssh 316482 ( 1.02%) 164227831 ( 0.67%) 518.92
dns 8673 ( 0.03%) 717723 ( 0.00%) 82.75
bgp 559 ( 0.00%) 94609 ( 0.00%) 169.25
napster 34 ( 0.00%) 5018 ( 0.00%) 147.59
realaud 23 ( 0.00%) 1937 ( 0.00%) 84.22
rtsp 9282 ( 0.03%) 7878120 ( 0.03%) 848.75
icecast 24924 ( 0.08%) 7994215 ( 0.03%) 320.74
hotline 31 ( 0.00%) 5088 ( 0.00%) 164.13
other 4333774 ( 14.00%) 2569539028 ( 10.47%) 592.91
udp 4509333 ( 14.57%) 2449021415 ( 9.98%) 543.10
dns 781390 ( 2.52%) 121884514 ( 0.50%) 155.98
realaud 16 ( 0.00%) 2412 ( 0.00%) 150.75
halflif 29 ( 0.00%) 3318 ( 0.00%) 114.41
starcra 45 ( 0.00%) 7585 ( 0.00%) 168.56
everque 475 ( 0.00%) 65209 ( 0.00%) 137.28
unreal 12 ( 0.00%) 1837 ( 0.00%) 153.08
quake 27 ( 0.00%) 3601 ( 0.00%) 133.37
cuseeme 5 ( 0.00%) 377 ( 0.00%) 75.40
other 3727003 ( 12.04%) 2326866341 ( 9.48%) 624.33
icmp 527635 ( 1.70%) 119624660 ( 0.49%) 226.72
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 210 ( 0.00%) 60796 ( 0.00%) 289.50
ip6 957629 ( 3.09%) 435781991 ( 1.78%) 455.06
other 14517 ( 0.05%) 2359115 ( 0.01%) 162.51
frag 1540 ( 0.00%) 1582972 ( 0.01%) 1027.90
ip6 338799 ( 1.09%) 354531187 ( 1.45%) 1046.44
tcp6 284603 ( 0.92%) 339255885 ( 1.38%) 1192.03
http(s) 4029 ( 0.01%) 5139537 ( 0.02%) 1275.64
http(c) 7757 ( 0.03%) 745217 ( 0.00%) 96.07
smtp 203 ( 0.00%) 107242 ( 0.00%) 528.29
ftp 85 ( 0.00%) 7667 ( 0.00%) 90.20
ssh 760 ( 0.00%) 848508 ( 0.00%) 1116.46
dns 756 ( 0.00%) 191264 ( 0.00%) 252.99
bgp 91 ( 0.00%) 15922 ( 0.00%) 174.97
other 270922 ( 0.88%) 332200528 ( 1.35%) 1226.19
udp6 39208 ( 0.13%) 12939660 ( 0.05%) 330.03
dns 34340 ( 0.11%) 11492168 ( 0.05%) 334.66
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 93 ( 0.00%) 93.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 4864 ( 0.02%) 1447072 ( 0.01%) 297.51
icmp6 14077 ( 0.05%) 1641158 ( 0.01%) 116.58
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 796 ( 0.00%) 678806 ( 0.00%) 852.77
tcpdump file: 201012271400.dump.gz (761.87 MB)