Traffic Trace Info
DumpFile: 201006011400.dump
FileSize: 2407.77MB
Id: 201006011400
StartTime: Tue Jun 1 14:00:01 2010
EndTime: Tue Jun 1 14:15:01 2010
TotalTime: 900.09 seconds
TotalCapSize: 1890.84MB CapLen: 96 bytes
# of packets: 33876543 (21300.92MB)
AvgRate: 198.52Mbps stddev:16.60M
IP flow (unique src/dst pair) Information
# of flows: 899654 (avg. 37.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.1% 1.0% 0.9% 0.9% 0.6% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 532367
Top 10 bandwidth usage (bytes/total in %):
12.7% 10.4% 5.4% 4.2% 3.9% 3.4% 3.2% 2.6% 2.6% 2.5%
# of IPv6 addresses: 1082
Top 10 bandwidth usage (bytes/total in %):
11.9% 10.3% 9.2% 8.3% 8.3% 7.5% 3.9% 3.7% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006011400.pktlen.png)
detailed numbers
[ 32- 63]: 6146237
[ 64- 127]: 9069829
[ 128- 255]: 2221386
[ 256- 511]: 1763204
[ 512- 1023]: 906335
[ 1024- 2047]: 13769552
Protocol Breakdown
![[protocol breakdown chart]](201006011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33876543 (100.00%) 22335632178 (100.00%) 659.32
ip 33841454 ( 99.90%) 22327937112 ( 99.97%) 659.78
tcp 21032507 ( 62.09%) 15480447915 ( 69.31%) 736.02
http(s) 8399753 ( 24.80%) 11192435642 ( 50.11%) 1332.47
http(c) 7002429 ( 20.67%) 924151649 ( 4.14%) 131.98
squid 263949 ( 0.78%) 61164267 ( 0.27%) 231.73
smtp 314103 ( 0.93%) 164243278 ( 0.74%) 522.90
nntp 19 ( 0.00%) 1158 ( 0.00%) 60.95
ftp 71220 ( 0.21%) 10753570 ( 0.05%) 150.99
pop3 19293 ( 0.06%) 5451190 ( 0.02%) 282.55
imap 4204 ( 0.01%) 2906571 ( 0.01%) 691.38
telnet 928 ( 0.00%) 73046 ( 0.00%) 78.71
ssh 71166 ( 0.21%) 7878909 ( 0.04%) 110.71
dns 12794 ( 0.04%) 928690 ( 0.00%) 72.59
bgp 149 ( 0.00%) 56504 ( 0.00%) 379.22
napster 21 ( 0.00%) 2126 ( 0.00%) 101.24
realaud 16 ( 0.00%) 1700 ( 0.00%) 106.25
rtsp 63720 ( 0.19%) 86814066 ( 0.39%) 1362.43
icecast 5726 ( 0.02%) 475260 ( 0.00%) 83.00
hotline 8 ( 0.00%) 1515 ( 0.00%) 189.38
other 4803006 ( 14.18%) 3023108594 ( 13.53%) 629.42
udp 8504373 ( 25.10%) 4478463670 ( 20.05%) 526.61
dns 627730 ( 1.85%) 108144923 ( 0.48%) 172.28
realaud 54 ( 0.00%) 7293 ( 0.00%) 135.06
halflif 189 ( 0.00%) 44817 ( 0.00%) 237.13
starcra 56 ( 0.00%) 10438 ( 0.00%) 186.39
everque 1827 ( 0.01%) 1018926 ( 0.00%) 557.70
unreal 88 ( 0.00%) 18451 ( 0.00%) 209.67
quake 25 ( 0.00%) 2701 ( 0.00%) 108.04
cuseeme 7 ( 0.00%) 619 ( 0.00%) 88.43
other 7829300 ( 23.11%) 4362675264 ( 19.53%) 557.22
icmp 301404 ( 0.89%) 25247105 ( 0.11%) 83.76
ipip 347 ( 0.00%) 39262 ( 0.00%) 113.15
ipsec 566 ( 0.00%) 139412 ( 0.00%) 246.31
ip6 3945363 ( 11.65%) 2323308089 ( 10.40%) 588.87
other 56894 ( 0.17%) 20291659 ( 0.09%) 356.66
frag 111241 ( 0.33%) 81230900 ( 0.36%) 730.22
ip6 35089 ( 0.10%) 7695066 ( 0.03%) 219.30
tcp6 7114 ( 0.02%) 1648218 ( 0.01%) 231.69
http(s) 517 ( 0.00%) 452487 ( 0.00%) 875.22
http(c) 1715 ( 0.01%) 174799 ( 0.00%) 101.92
smtp 299 ( 0.00%) 182728 ( 0.00%) 611.13
ftp 5 ( 0.00%) 458 ( 0.00%) 91.60
imap 350 ( 0.00%) 42292 ( 0.00%) 120.83
ssh 660 ( 0.00%) 287164 ( 0.00%) 435.10
dns 327 ( 0.00%) 72693 ( 0.00%) 222.30
bgp 118 ( 0.00%) 15857 ( 0.00%) 134.38
other 3123 ( 0.01%) 419740 ( 0.00%) 134.40
udp6 16479 ( 0.05%) 4418848 ( 0.02%) 268.15
dns 16340 ( 0.05%) 4391525 ( 0.02%) 268.76
other 139 ( 0.00%) 27323 ( 0.00%) 196.57
icmp6 11378 ( 0.03%) 1545627 ( 0.01%) 135.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 88 ( 0.00%) 78293 ( 0.00%) 889.69
tcpdump file: 201006011400.dump.gz (894.97 MB)