Traffic Trace Info
DumpFile: 201012301400.dump
FileSize: 3025.87MB
Id: 201012301400
StartTime: Thu Dec 30 14:00:01 2010
EndTime: Thu Dec 30 14:15:00 2010
TotalTime: 899.71 seconds
TotalCapSize: -1721.66MB CapLen: 96 bytes
# of packets: 42697870 (31707.80MB)
AvgRate: 295.62Mbps stddev:29.10M
IP flow (unique src/dst pair) Information
# of flows: 1151332 (avg. 37.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
22.7% 3.9% 3.7% 3.3% 1.5% 1.3% 1.2% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 729124
Top 10 bandwidth usage (bytes/total in %):
26.6% 23.2% 8.8% 7.1% 6.0% 5.0% 4.1% 3.9% 3.8% 3.5%
# of IPv6 addresses: 2960
Top 10 bandwidth usage (bytes/total in %):
44.2% 44.2% 21.8% 21.8% 5.2% 4.8% 2.8% 1.8% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012301400.pktlen.png)
detailed numbers
[ 32- 63]: 7827929
[ 64- 127]: 11315321
[ 128- 255]: 1131862
[ 256- 511]: 866654
[ 512- 1023]: 649016
[ 1024- 2047]: 20907088
Protocol Breakdown
![[protocol breakdown chart]](201012301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42697870 (100.00%) 33248034559 (100.00%) 778.68
ip 42606477 ( 99.79%) 33204340233 ( 99.87%) 779.33
tcp 37474887 ( 87.77%) 30558952672 ( 91.91%) 815.45
http(s) 15177931 ( 35.55%) 16728406776 ( 50.31%) 1102.15
http(c) 12033486 ( 28.18%) 9241566702 ( 27.80%) 767.99
squid 194899 ( 0.46%) 59050130 ( 0.18%) 302.98
smtp 105316 ( 0.25%) 28101995 ( 0.08%) 266.84
ftp 3348111 ( 7.84%) 302202860 ( 0.91%) 90.26
pop3 12888 ( 0.03%) 12664397 ( 0.04%) 982.65
imap 2394 ( 0.01%) 1266297 ( 0.00%) 528.95
telnet 1180 ( 0.00%) 261701 ( 0.00%) 221.78
ssh 667324 ( 1.56%) 122475945 ( 0.37%) 183.53
dns 5389 ( 0.01%) 453711 ( 0.00%) 84.19
bgp 590 ( 0.00%) 127544 ( 0.00%) 216.18
napster 101 ( 0.00%) 7858 ( 0.00%) 77.80
realaud 44 ( 0.00%) 3669 ( 0.00%) 83.39
rtsp 12122 ( 0.03%) 10188686 ( 0.03%) 840.51
icecast 1071 ( 0.00%) 353603 ( 0.00%) 330.16
hotline 21 ( 0.00%) 1660 ( 0.00%) 79.05
other 5912020 ( 13.85%) 4051819138 ( 12.19%) 685.35
udp 4281100 ( 10.03%) 2448518713 ( 7.36%) 571.94
dns 651988 ( 1.53%) 102557784 ( 0.31%) 157.30
realaud 12 ( 0.00%) 1491 ( 0.00%) 124.25
halflif 55 ( 0.00%) 6530 ( 0.00%) 118.73
starcra 27 ( 0.00%) 4789 ( 0.00%) 177.37
everque 361 ( 0.00%) 261196 ( 0.00%) 723.53
unreal 37 ( 0.00%) 3984 ( 0.00%) 107.68
quake 20 ( 0.00%) 2552 ( 0.00%) 127.60
cuseeme 4 ( 0.00%) 666 ( 0.00%) 166.50
other 3628378 ( 8.50%) 2345524220 ( 7.05%) 646.44
icmp 388857 ( 0.91%) 78643918 ( 0.24%) 202.24
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 62027 ( 0.15%) 26912354 ( 0.08%) 433.88
ip6 386421 ( 0.91%) 85643977 ( 0.26%) 221.63
other 13001 ( 0.03%) 5649439 ( 0.02%) 434.54
frag 1842 ( 0.00%) 1742265 ( 0.01%) 945.86
ip6 91393 ( 0.21%) 43694326 ( 0.13%) 478.09
tcp6 20442 ( 0.05%) 13753108 ( 0.04%) 672.79
http(s) 2463 ( 0.01%) 2921173 ( 0.01%) 1186.02
http(c) 7167 ( 0.02%) 694219 ( 0.00%) 96.86
smtp 192 ( 0.00%) 40990 ( 0.00%) 213.49
ftp 105 ( 0.00%) 9743 ( 0.00%) 92.79
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 408 ( 0.00%) 106779 ( 0.00%) 261.71
bgp 106 ( 0.00%) 25082 ( 0.00%) 236.62
other 10000 ( 0.02%) 9955036 ( 0.03%) 995.50
udp6 26932 ( 0.06%) 8265694 ( 0.02%) 306.91
dns 23352 ( 0.05%) 7137713 ( 0.02%) 305.66
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3578 ( 0.01%) 1127767 ( 0.00%) 315.19
icmp6 15853 ( 0.04%) 1789440 ( 0.01%) 112.88
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28055 ( 0.07%) 19870946 ( 0.06%) 708.29
tcpdump file: 201012301400.dump.gz (1041.96 MB)