Traffic Trace Info
DumpFile: 201006021400.dump
FileSize: 2189.61MB
Id: 201006021400
StartTime: Wed Jun 2 14:00:01 2010
EndTime: Wed Jun 2 14:15:00 2010
TotalTime: 899.55 seconds
TotalCapSize: 1716.28MB CapLen: 96 bytes
# of packets: 31019536 (18916.43MB)
AvgRate: 176.43Mbps stddev:14.85M
IP flow (unique src/dst pair) Information
# of flows: 842871 (avg. 36.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.2% 1.1% 1.0% 1.0% 0.8% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 489421
Top 10 bandwidth usage (bytes/total in %):
12.5% 9.5% 5.1% 4.2% 3.8% 2.8% 2.7% 2.3% 2.3% 2.3%
# of IPv6 addresses: 1161
Top 10 bandwidth usage (bytes/total in %):
19.2% 14.5% 13.0% 12.8% 11.1% 10.0% 9.2% 6.0% 5.6% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006021400.pktlen.png)
detailed numbers
[ 32- 63]: 5342020
[ 64- 127]: 8894156
[ 128- 255]: 2231964
[ 256- 511]: 1663897
[ 512- 1023]: 858548
[ 1024- 2047]: 12028951
Protocol Breakdown
![[protocol breakdown chart]](201006021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31019536 (100.00%) 19835313025 (100.00%) 639.45
ip 30979197 ( 99.87%) 19822429866 ( 99.94%) 639.86
tcp 19217412 ( 61.95%) 14272488712 ( 71.95%) 742.69
http(s) 8233323 ( 26.54%) 10649100159 ( 53.69%) 1293.41
http(c) 5943599 ( 19.16%) 770028863 ( 3.88%) 129.56
squid 203161 ( 0.65%) 66782729 ( 0.34%) 328.72
smtp 300712 ( 0.97%) 111014132 ( 0.56%) 369.17
nntp 4 ( 0.00%) 271 ( 0.00%) 67.75
ftp 14168 ( 0.05%) 5964652 ( 0.03%) 420.99
pop3 17938 ( 0.06%) 12456898 ( 0.06%) 694.44
imap 30763 ( 0.10%) 26596555 ( 0.13%) 864.56
telnet 2028 ( 0.01%) 147416 ( 0.00%) 72.69
ssh 158603 ( 0.51%) 30167541 ( 0.15%) 190.21
dns 15641 ( 0.05%) 1143009 ( 0.01%) 73.08
bgp 324 ( 0.00%) 191517 ( 0.00%) 591.10
napster 72 ( 0.00%) 6543 ( 0.00%) 90.88
realaud 21 ( 0.00%) 4537 ( 0.00%) 216.05
rtsp 6640 ( 0.02%) 7917784 ( 0.04%) 1192.44
icecast 7057 ( 0.02%) 4875657 ( 0.02%) 690.90
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 4283347 ( 13.81%) 2586089785 ( 13.04%) 603.75
udp 7651909 ( 24.67%) 3583329370 ( 18.07%) 468.29
dns 667283 ( 2.15%) 114663253 ( 0.58%) 171.84
realaud 29 ( 0.00%) 4699 ( 0.00%) 162.03
halflif 92 ( 0.00%) 11004 ( 0.00%) 119.61
starcra 75 ( 0.00%) 10316 ( 0.00%) 137.55
everque 607 ( 0.00%) 119677 ( 0.00%) 197.16
unreal 96 ( 0.00%) 20022 ( 0.00%) 208.56
quake 31 ( 0.00%) 5155 ( 0.00%) 166.29
cuseeme 8 ( 0.00%) 906 ( 0.00%) 113.25
other 6983317 ( 22.51%) 3468303621 ( 17.49%) 496.66
icmp 649133 ( 2.09%) 54299701 ( 0.27%) 83.65
ipip 342 ( 0.00%) 41584 ( 0.00%) 121.59
ipsec 627 ( 0.00%) 125154 ( 0.00%) 199.61
ip6 3442068 ( 11.10%) 1909185995 ( 9.63%) 554.66
other 17706 ( 0.06%) 2959350 ( 0.01%) 167.14
frag 1321 ( 0.00%) 1340187 ( 0.01%) 1014.52
ip6 40339 ( 0.13%) 12883159 ( 0.06%) 319.37
tcp6 11647 ( 0.04%) 7105713 ( 0.04%) 610.09
http(s) 5593 ( 0.02%) 6297618 ( 0.03%) 1125.98
http(c) 1289 ( 0.00%) 126368 ( 0.00%) 98.04
smtp 340 ( 0.00%) 129952 ( 0.00%) 382.21
imap 373 ( 0.00%) 43625 ( 0.00%) 116.96
ssh 166 ( 0.00%) 51268 ( 0.00%) 308.84
dns 406 ( 0.00%) 82394 ( 0.00%) 202.94
bgp 124 ( 0.00%) 20205 ( 0.00%) 162.94
other 3356 ( 0.01%) 354283 ( 0.00%) 105.57
udp6 16830 ( 0.05%) 4047625 ( 0.02%) 240.50
dns 16266 ( 0.05%) 3955789 ( 0.02%) 243.19
other 564 ( 0.00%) 91836 ( 0.00%) 162.83
icmp6 11698 ( 0.04%) 1595307 ( 0.01%) 136.37
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 134 ( 0.00%) 130434 ( 0.00%) 973.39
tcpdump file: 201006021400.dump.gz (820.09 MB)