Traffic Trace Info
DumpFile: 201006041400.dump
FileSize: 2504.65MB
Id: 201006041400
StartTime: Fri Jun 4 14:00:01 2010
EndTime: Fri Jun 4 14:15:01 2010
TotalTime: 899.80 seconds
TotalCapSize: 1961.49MB CapLen: 96 bytes
# of packets: 35595518 (24560.91MB)
AvgRate: 228.97Mbps stddev:24.84M
IP flow (unique src/dst pair) Information
# of flows: 902281 (avg. 39.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 7.7% 1.8% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 524905
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.1% 8.3% 8.2% 7.9% 7.7% 6.0% 3.8% 2.9% 2.7%
# of IPv6 addresses: 1165
Top 10 bandwidth usage (bytes/total in %):
11.8% 11.5% 10.0% 9.8% 7.1% 6.1% 6.0% 5.9% 5.1% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006041400.pktlen.png)
detailed numbers
[ 32- 63]: 5612985
[ 64- 127]: 9160418
[ 128- 255]: 2116039
[ 256- 511]: 1740122
[ 512- 1023]: 992484
[ 1024- 2047]: 15973470
Protocol Breakdown
![[protocol breakdown chart]](201006041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35595518 (100.00%) 25753979382 (100.00%) 723.52
ip 35551091 ( 99.88%) 25743456353 ( 99.96%) 724.13
tcp 22621221 ( 63.55%) 18923770448 ( 73.48%) 836.55
http(s) 9179084 ( 25.79%) 12313709859 ( 47.81%) 1341.50
http(c) 6279593 ( 17.64%) 834951691 ( 3.24%) 132.96
squid 324933 ( 0.91%) 95949269 ( 0.37%) 295.29
smtp 294104 ( 0.83%) 126594860 ( 0.49%) 430.44
nntp 22 ( 0.00%) 1588 ( 0.00%) 72.18
ftp 23396 ( 0.07%) 8154097 ( 0.03%) 348.53
pop3 15134 ( 0.04%) 9175207 ( 0.04%) 606.26
imap 4920 ( 0.01%) 1641937 ( 0.01%) 333.73
telnet 3710 ( 0.01%) 297081 ( 0.00%) 80.08
ssh 19751 ( 0.06%) 3989037 ( 0.02%) 201.97
dns 17135 ( 0.05%) 1257716 ( 0.00%) 73.40
bgp 144 ( 0.00%) 56068 ( 0.00%) 389.36
napster 31 ( 0.00%) 2948 ( 0.00%) 95.10
realaud 196 ( 0.00%) 16203 ( 0.00%) 82.67
rtsp 126983 ( 0.36%) 114910399 ( 0.45%) 904.93
icecast 26858 ( 0.08%) 23156015 ( 0.09%) 862.16
hotline 50 ( 0.00%) 3543 ( 0.00%) 70.86
other 6305174 ( 17.71%) 5389902750 ( 20.93%) 854.84
udp 8925512 ( 25.07%) 4752330919 ( 18.45%) 532.44
dns 660870 ( 1.86%) 113289356 ( 0.44%) 171.42
realaud 969 ( 0.00%) 63715 ( 0.00%) 65.75
halflif 91 ( 0.00%) 16475 ( 0.00%) 181.04
starcra 61 ( 0.00%) 10121 ( 0.00%) 165.92
everque 998 ( 0.00%) 171380 ( 0.00%) 171.72
unreal 88 ( 0.00%) 17624 ( 0.00%) 200.27
quake 34 ( 0.00%) 3211 ( 0.00%) 94.44
cuseeme 4 ( 0.00%) 498 ( 0.00%) 124.50
other 8256217 ( 23.19%) 4638270342 ( 18.01%) 561.79
icmp 422277 ( 1.19%) 33056710 ( 0.13%) 78.28
ipip 303 ( 0.00%) 36670 ( 0.00%) 121.02
ipsec 1269 ( 0.00%) 223710 ( 0.00%) 176.29
ip6 3575505 ( 10.04%) 2032986536 ( 7.89%) 568.59
other 5004 ( 0.01%) 1051360 ( 0.00%) 210.10
frag 25747 ( 0.07%) 19778412 ( 0.08%) 768.18
ip6 44427 ( 0.12%) 10523029 ( 0.04%) 236.86
tcp6 16948 ( 0.05%) 4794788 ( 0.02%) 282.91
http(s) 2779 ( 0.01%) 3037023 ( 0.01%) 1092.85
http(c) 7345 ( 0.02%) 670460 ( 0.00%) 91.28
smtp 383 ( 0.00%) 202590 ( 0.00%) 528.96
imap 431 ( 0.00%) 48564 ( 0.00%) 112.68
ssh 1842 ( 0.01%) 333148 ( 0.00%) 180.86
dns 332 ( 0.00%) 52724 ( 0.00%) 158.81
bgp 123 ( 0.00%) 17592 ( 0.00%) 143.02
other 3713 ( 0.01%) 432687 ( 0.00%) 116.53
udp6 15566 ( 0.04%) 4015582 ( 0.02%) 257.97
dns 14990 ( 0.04%) 3801604 ( 0.01%) 253.61
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
other 575 ( 0.00%) 213874 ( 0.00%) 371.95
icmp6 11779 ( 0.03%) 1606239 ( 0.01%) 136.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 104 ( 0.00%) 102340 ( 0.00%) 984.04
tcpdump file: 201006041400.dump.gz (897.87 MB)