Traffic Trace Info
DumpFile: 201012291400.dump
FileSize: 1740.58MB
Id: 201012291400
StartTime: Wed Dec 29 14:00:00 2010
EndTime: Wed Dec 29 14:15:00 2010
TotalTime: 899.98 seconds
TotalCapSize: 1366.71MB CapLen: 96 bytes
# of packets: 24501049 (19511.55MB)
AvgRate: 181.87Mbps stddev:26.36M
IP flow (unique src/dst pair) Information
# of flows: 740885 (avg. 33.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.1% 1.8% 1.6% 1.2% 1.2% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 434641
Top 10 bandwidth usage (bytes/total in %):
12.6% 6.1% 4.8% 3.9% 3.0% 2.8% 2.7% 2.7% 2.5% 2.5%
# of IPv6 addresses: 3129
Top 10 bandwidth usage (bytes/total in %):
92.4% 84.7% 8.3% 1.4% 1.4% 1.2% 1.2% 0.7% 0.5% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012291400.pktlen.png)
detailed numbers
[ 32- 63]: 3956536
[ 64- 127]: 5500125
[ 128- 255]: 894361
[ 256- 511]: 475523
[ 512- 1023]: 886754
[ 1024- 2047]: 12787750
Protocol Breakdown
![[protocol breakdown chart]](201012291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24501049 (100.00%) 20459343023 (100.00%) 835.04
ip 24234011 ( 98.91%) 20162137296 ( 98.55%) 831.98
tcp 18846946 ( 76.92%) 17493447705 ( 85.50%) 928.18
http(s) 10334611 ( 42.18%) 13878317589 ( 67.83%) 1342.90
http(c) 5043413 ( 20.58%) 1132733024 ( 5.54%) 224.60
squid 87812 ( 0.36%) 60106566 ( 0.29%) 684.49
smtp 146772 ( 0.60%) 85512159 ( 0.42%) 582.62
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 58210 ( 0.24%) 30471775 ( 0.15%) 523.48
pop3 8941 ( 0.04%) 4131553 ( 0.02%) 462.09
imap 9299 ( 0.04%) 6783063 ( 0.03%) 729.44
telnet 291 ( 0.00%) 25002 ( 0.00%) 85.92
ssh 69647 ( 0.28%) 14145341 ( 0.07%) 203.10
dns 6700 ( 0.03%) 523668 ( 0.00%) 78.16
bgp 566 ( 0.00%) 94089 ( 0.00%) 166.23
napster 11 ( 0.00%) 1388 ( 0.00%) 126.18
realaud 222 ( 0.00%) 14823 ( 0.00%) 66.77
rtsp 40145 ( 0.16%) 59711678 ( 0.29%) 1487.40
icecast 1142 ( 0.00%) 595716 ( 0.00%) 521.64
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3039155 ( 12.40%) 2220275349 ( 10.85%) 730.56
udp 4179551 ( 17.06%) 2227288633 ( 10.89%) 532.90
dns 690955 ( 2.82%) 110457273 ( 0.54%) 159.86
realaud 17 ( 0.00%) 1764 ( 0.00%) 103.76
halflif 31 ( 0.00%) 3171 ( 0.00%) 102.29
starcra 34 ( 0.00%) 6175 ( 0.00%) 181.62
everque 106 ( 0.00%) 22414 ( 0.00%) 211.45
unreal 21 ( 0.00%) 3141 ( 0.00%) 149.57
quake 19 ( 0.00%) 1845 ( 0.00%) 97.11
cuseeme 5 ( 0.00%) 862 ( 0.00%) 172.40
other 3488243 ( 14.24%) 2116691936 ( 10.35%) 606.81
icmp 357779 ( 1.46%) 41545592 ( 0.20%) 116.12
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8706 ( 0.04%) 2146212 ( 0.01%) 246.52
ip6 822620 ( 3.36%) 391632604 ( 1.91%) 476.08
other 18224 ( 0.07%) 6057280 ( 0.03%) 332.38
frag 580 ( 0.00%) 656814 ( 0.00%) 1132.44
ip6 267038 ( 1.09%) 297205727 ( 1.45%) 1112.97
tcp6 220395 ( 0.90%) 286583317 ( 1.40%) 1300.32
http(s) 1031 ( 0.00%) 1014402 ( 0.00%) 983.90
http(c) 15543 ( 0.06%) 1424270 ( 0.01%) 91.63
smtp 406 ( 0.00%) 238773 ( 0.00%) 588.11
ftp 98 ( 0.00%) 8780 ( 0.00%) 89.59
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 549 ( 0.00%) 136767 ( 0.00%) 249.12
bgp 93 ( 0.00%) 21095 ( 0.00%) 226.83
other 202674 ( 0.83%) 283739144 ( 1.39%) 1399.98
udp6 28152 ( 0.11%) 8422974 ( 0.04%) 299.20
dns 26702 ( 0.11%) 8179330 ( 0.04%) 306.32
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 2 ( 0.00%) 202 ( 0.00%) 101.00
other 1447 ( 0.01%) 243337 ( 0.00%) 168.17
icmp6 18156 ( 0.07%) 1960446 ( 0.01%) 107.98
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 221 ( 0.00%) 223480 ( 0.00%) 1011.22
tcpdump file: 201012291400.dump.gz (581.29 MB)