Traffic Trace Info
DumpFile: 201012281400.dump
FileSize: 2531.93MB
Id: 201012281400
StartTime: Tue Dec 28 14:00:01 2010
EndTime: Tue Dec 28 14:15:01 2010
TotalTime: 899.99 seconds
TotalCapSize: 1988.94MB CapLen: 96 bytes
# of packets: 35584990 (29549.14MB)
AvgRate: 275.42Mbps stddev:34.32M
IP flow (unique src/dst pair) Information
# of flows: 772753 (avg. 46.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 4.1% 3.3% 2.4% 2.1% 1.8% 1.6% 1.6% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 435715
Top 10 bandwidth usage (bytes/total in %):
9.1% 6.9% 5.7% 5.4% 4.5% 4.2% 4.1% 3.8% 3.6% 3.4%
# of IPv6 addresses: 3288
Top 10 bandwidth usage (bytes/total in %):
26.0% 26.0% 25.1% 25.1% 20.2% 19.1% 8.9% 8.9% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012281400.pktlen.png)
detailed numbers
[ 32- 63]: 5657867
[ 64- 127]: 7447979
[ 128- 255]: 1141217
[ 256- 511]: 798024
[ 512- 1023]: 851278
[ 1024- 2047]: 19688625
Protocol Breakdown
![[protocol breakdown chart]](201012281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35584990 (100.00%) 30984514315 (100.00%) 870.72
ip 35427379 ( 99.56%) 30852019257 ( 99.57%) 870.85
tcp 29547408 ( 83.03%) 27831777265 ( 89.82%) 941.94
http(s) 15530750 ( 43.64%) 21060150304 ( 67.97%) 1356.03
http(c) 8078295 ( 22.70%) 2427363345 ( 7.83%) 300.48
squid 212057 ( 0.60%) 83625842 ( 0.27%) 394.36
smtp 161328 ( 0.45%) 72213436 ( 0.23%) 447.62
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 89213 ( 0.25%) 38472955 ( 0.12%) 431.25
pop3 10167 ( 0.03%) 3798547 ( 0.01%) 373.62
imap 4787 ( 0.01%) 2286539 ( 0.01%) 477.66
telnet 21233 ( 0.06%) 1566210 ( 0.01%) 73.76
ssh 1155746 ( 3.25%) 1300741872 ( 4.20%) 1125.46
dns 7570 ( 0.02%) 599307 ( 0.00%) 79.17
bgp 557 ( 0.00%) 107520 ( 0.00%) 193.03
napster 34 ( 0.00%) 4198 ( 0.00%) 123.47
realaud 58 ( 0.00%) 8413 ( 0.00%) 145.05
rtsp 8009 ( 0.02%) 7794858 ( 0.03%) 973.26
icecast 1445 ( 0.00%) 660047 ( 0.00%) 456.78
hotline 12 ( 0.00%) 1279 ( 0.00%) 106.58
other 4266141 ( 11.99%) 2832382233 ( 9.14%) 663.92
udp 4369312 ( 12.28%) 2418081618 ( 7.80%) 553.42
dns 747347 ( 2.10%) 121160910 ( 0.39%) 162.12
realaud 7 ( 0.00%) 691 ( 0.00%) 98.71
halflif 27 ( 0.00%) 7086 ( 0.00%) 262.44
starcra 37 ( 0.00%) 8194 ( 0.00%) 221.46
everque 115 ( 0.00%) 24735 ( 0.00%) 215.09
unreal 41 ( 0.00%) 6985 ( 0.00%) 170.37
quake 25 ( 0.00%) 3145 ( 0.00%) 125.80
cuseeme 2 ( 0.00%) 165 ( 0.00%) 82.50
other 3621449 ( 10.18%) 2296631728 ( 7.41%) 634.17
icmp 558221 ( 1.57%) 118142900 ( 0.38%) 211.64
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6276 ( 0.02%) 1483960 ( 0.00%) 236.45
ip6 935622 ( 2.63%) 480593416 ( 1.55%) 513.66
other 10355 ( 0.03%) 1920828 ( 0.01%) 185.50
frag 1507 ( 0.00%) 1728293 ( 0.01%) 1146.84
ip6 157611 ( 0.44%) 132495058 ( 0.43%) 840.65
tcp6 104124 ( 0.29%) 118591698 ( 0.38%) 1138.95
http(s) 11361 ( 0.03%) 15950062 ( 0.05%) 1403.93
http(c) 8542 ( 0.02%) 792797 ( 0.00%) 92.81
smtp 181 ( 0.00%) 33951 ( 0.00%) 187.57
ftp 60 ( 0.00%) 5371 ( 0.00%) 89.52
ssh 278 ( 0.00%) 35263 ( 0.00%) 126.85
dns 764 ( 0.00%) 197661 ( 0.00%) 258.72
bgp 87 ( 0.00%) 15130 ( 0.00%) 173.91
realaud 5 ( 0.00%) 450 ( 0.00%) 90.00
other 82846 ( 0.23%) 101561013 ( 0.33%) 1225.90
udp6 36371 ( 0.10%) 11497805 ( 0.04%) 316.13
dns 34596 ( 0.10%) 11124807 ( 0.04%) 321.56
other 1775 ( 0.00%) 372998 ( 0.00%) 210.14
icmp6 16424 ( 0.05%) 1773448 ( 0.01%) 107.98
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 580 ( 0.00%) 616833 ( 0.00%) 1063.51
tcpdump file: 201012281400.dump.gz (842.78 MB)