Traffic Trace Info
DumpFile: 201006031400.dump
FileSize: 2509.40MB
Id: 201006031400
StartTime: Thu Jun 3 14:00:01 2010
EndTime: Thu Jun 3 14:15:00 2010
TotalTime: 899.17 seconds
TotalCapSize: 1975.62MB CapLen: 96 bytes
# of packets: 34981482 (23848.28MB)
AvgRate: 222.49Mbps stddev:19.16M
IP flow (unique src/dst pair) Information
# of flows: 879367 (avg. 39.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 1.6% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 492250
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.7% 9.2% 6.1% 4.8% 3.2% 3.1% 2.8% 2.5% 2.5%
# of IPv6 addresses: 1137
Top 10 bandwidth usage (bytes/total in %):
28.1% 19.1% 15.2% 11.7% 9.7% 6.6% 6.3% 5.7% 5.1% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006031400.pktlen.png)
detailed numbers
[ 32- 63]: 5550080
[ 64- 127]: 9194586
[ 128- 255]: 2302278
[ 256- 511]: 1598325
[ 512- 1023]: 886186
[ 1024- 2047]: 15450027
Protocol Breakdown
![[protocol breakdown chart]](201006031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34981482 (100.00%) 25006729930 (100.00%) 714.86
ip 34941537 ( 99.89%) 24994209280 ( 99.95%) 715.32
tcp 23306615 ( 66.63%) 19391466953 ( 77.54%) 832.02
http(s) 10491354 ( 29.99%) 14339441845 ( 57.34%) 1366.79
http(c) 6816236 ( 19.49%) 1082373916 ( 4.33%) 158.79
squid 331071 ( 0.95%) 170200673 ( 0.68%) 514.09
smtp 269622 ( 0.77%) 83773442 ( 0.34%) 310.71
nntp 8 ( 0.00%) 624 ( 0.00%) 78.00
ftp 23275 ( 0.07%) 7159439 ( 0.03%) 307.60
pop3 16909 ( 0.05%) 6197747 ( 0.02%) 366.54
imap 20029 ( 0.06%) 4195691 ( 0.02%) 209.48
telnet 666 ( 0.00%) 77606 ( 0.00%) 116.53
ssh 36343 ( 0.10%) 5102391 ( 0.02%) 140.40
dns 17616 ( 0.05%) 1305190 ( 0.01%) 74.09
bgp 171 ( 0.00%) 73656 ( 0.00%) 430.74
napster 78 ( 0.00%) 9956 ( 0.00%) 127.64
realaud 54 ( 0.00%) 13638 ( 0.00%) 252.56
rtsp 88598 ( 0.25%) 129241561 ( 0.52%) 1458.74
icecast 41345 ( 0.12%) 40088201 ( 0.16%) 969.60
hotline 4 ( 0.00%) 288 ( 0.00%) 72.00
other 5153233 ( 14.73%) 3522210909 ( 14.09%) 683.50
udp 7124873 ( 20.37%) 3211802726 ( 12.84%) 450.79
dns 691177 ( 1.98%) 117985175 ( 0.47%) 170.70
realaud 24 ( 0.00%) 4994 ( 0.00%) 208.08
halflif 133 ( 0.00%) 25752 ( 0.00%) 193.62
starcra 101 ( 0.00%) 10890 ( 0.00%) 107.82
everque 690 ( 0.00%) 132845 ( 0.00%) 192.53
unreal 60 ( 0.00%) 11447 ( 0.00%) 190.78
quake 35 ( 0.00%) 5128 ( 0.00%) 146.51
cuseeme 3 ( 0.00%) 267 ( 0.00%) 89.00
other 6432310 ( 18.39%) 3093514035 ( 12.37%) 480.93
icmp 480227 ( 1.37%) 38962475 ( 0.16%) 81.13
ipip 298 ( 0.00%) 37304 ( 0.00%) 125.18
ipsec 506 ( 0.00%) 94852 ( 0.00%) 187.45
ip6 3771531 ( 10.78%) 2316114930 ( 9.26%) 614.10
other 257487 ( 0.74%) 35730040 ( 0.14%) 138.76
frag 1423 ( 0.00%) 1373374 ( 0.01%) 965.13
ip6 39945 ( 0.11%) 12520650 ( 0.05%) 313.45
tcp6 10539 ( 0.03%) 6918871 ( 0.03%) 656.50
http(s) 5119 ( 0.01%) 6153342 ( 0.02%) 1202.06
http(c) 1625 ( 0.00%) 172944 ( 0.00%) 106.43
smtp 454 ( 0.00%) 218169 ( 0.00%) 480.55
imap 339 ( 0.00%) 39348 ( 0.00%) 116.07
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
dns 218 ( 0.00%) 45599 ( 0.00%) 209.17
bgp 114 ( 0.00%) 14973 ( 0.00%) 131.34
other 2663 ( 0.01%) 273542 ( 0.00%) 102.72
udp6 17452 ( 0.05%) 3913704 ( 0.02%) 224.26
dns 17262 ( 0.05%) 3858537 ( 0.02%) 223.53
other 190 ( 0.00%) 55167 ( 0.00%) 290.35
icmp6 11836 ( 0.03%) 1596143 ( 0.01%) 134.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 88 ( 0.00%) 87852 ( 0.00%) 998.32
tcpdump file: 201006031400.dump.gz (915.15 MB)