Traffic Trace Info
DumpFile: 201012311400.dump
FileSize: 2185.82MB
Id: 201012311400
StartTime: Fri Dec 31 14:00:00 2010
EndTime: Fri Dec 31 14:15:00 2010
TotalTime: 899.88 seconds
TotalCapSize: 1707.72MB CapLen: 96 bytes
# of packets: 31331723 (24924.54MB)
AvgRate: 232.35Mbps stddev:26.52M
IP flow (unique src/dst pair) Information
# of flows: 771234 (avg. 40.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.9% 10.5% 1.7% 1.7% 1.3% 1.1% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 462428
Top 10 bandwidth usage (bytes/total in %):
28.1% 17.3% 11.6% 10.8% 5.8% 5.3% 3.5% 2.7% 1.9% 1.9%
# of IPv6 addresses: 3102
Top 10 bandwidth usage (bytes/total in %):
63.3% 57.0% 5.7% 4.7% 4.7% 4.2% 3.0% 2.3% 2.2% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201012311400.pktlen.png)
detailed numbers
[ 32- 63]: 6788154
[ 64- 127]: 5661106
[ 128- 255]: 926172
[ 256- 511]: 960590
[ 512- 1023]: 476008
[ 1024- 2047]: 16519693
Protocol Breakdown
![[protocol breakdown chart]](201012311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31331723 (100.00%) 26135271034 (100.00%) 834.15
ip 31239761 ( 99.71%) 26096574968 ( 99.85%) 835.36
tcp 26084507 ( 83.25%) 23605385938 ( 90.32%) 904.96
http(s) 12150773 ( 38.78%) 13269627078 ( 50.77%) 1092.08
http(c) 9625499 ( 30.72%) 7658288085 ( 29.30%) 795.63
squid 77802 ( 0.25%) 39884584 ( 0.15%) 512.64
smtp 122389 ( 0.39%) 21746237 ( 0.08%) 177.68
ftp 94687 ( 0.30%) 44703532 ( 0.17%) 472.12
pop3 4274 ( 0.01%) 1854304 ( 0.01%) 433.86
imap 2833 ( 0.01%) 1240923 ( 0.00%) 438.02
telnet 1132 ( 0.00%) 300510 ( 0.00%) 265.47
ssh 162320 ( 0.52%) 202753473 ( 0.78%) 1249.10
dns 5877 ( 0.02%) 473704 ( 0.00%) 80.60
bgp 586 ( 0.00%) 107271 ( 0.00%) 183.06
napster 28 ( 0.00%) 2325 ( 0.00%) 83.04
realaud 11 ( 0.00%) 775 ( 0.00%) 70.45
rtsp 2183 ( 0.01%) 1727319 ( 0.01%) 791.26
icecast 589 ( 0.00%) 87860 ( 0.00%) 149.17
other 3833524 ( 12.24%) 2362587958 ( 9.04%) 616.30
udp 3848250 ( 12.28%) 1991038871 ( 7.62%) 517.39
dns 630350 ( 2.01%) 97772608 ( 0.37%) 155.11
realaud 1827 ( 0.01%) 112014 ( 0.00%) 61.31
halflif 39 ( 0.00%) 4513 ( 0.00%) 115.72
starcra 51 ( 0.00%) 6420 ( 0.00%) 125.88
everque 498 ( 0.00%) 287686 ( 0.00%) 577.68
unreal 28 ( 0.00%) 2137 ( 0.00%) 76.32
quake 43 ( 0.00%) 5878 ( 0.00%) 136.70
cuseeme 7 ( 0.00%) 592 ( 0.00%) 84.57
other 3215252 ( 10.26%) 1892734409 ( 7.24%) 588.67
icmp 571415 ( 1.82%) 132441216 ( 0.51%) 231.78
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8778 ( 0.03%) 2227772 ( 0.01%) 253.79
ip6 712605 ( 2.27%) 363134436 ( 1.39%) 509.59
other 14021 ( 0.04%) 2327465 ( 0.01%) 166.00
frag 671 ( 0.00%) 709736 ( 0.00%) 1057.73
ip6 91962 ( 0.29%) 38696066 ( 0.15%) 420.78
tcp6 44306 ( 0.14%) 27856680 ( 0.11%) 628.73
http(s) 1449 ( 0.00%) 1459774 ( 0.01%) 1007.44
http(c) 21282 ( 0.07%) 1985495 ( 0.01%) 93.29
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 188 ( 0.00%) 54566 ( 0.00%) 290.24
ftp 199 ( 0.00%) 66491 ( 0.00%) 334.13
ssh 32 ( 0.00%) 2752 ( 0.00%) 86.00
dns 428 ( 0.00%) 103023 ( 0.00%) 240.71
bgp 102 ( 0.00%) 23348 ( 0.00%) 228.90
other 20623 ( 0.07%) 24160977 ( 0.09%) 1171.55
udp6 26628 ( 0.08%) 7653885 ( 0.03%) 287.44
dns 24416 ( 0.08%) 7265511 ( 0.03%) 297.57
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 2 ( 0.00%) 279 ( 0.00%) 139.50
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 2208 ( 0.01%) 387880 ( 0.00%) 175.67
icmp6 19625 ( 0.06%) 2126503 ( 0.01%) 108.36
ip6 78 ( 0.00%) 10704 ( 0.00%) 137.23
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1294 ( 0.00%) 1044078 ( 0.00%) 806.86
tcpdump file: 201012311400.dump.gz (734.20 MB)