Traffic Trace Info
DumpFile: 201006051400.dump
FileSize: 1946.14MB
Id: 201006051400
StartTime: Sat Jun 5 14:00:01 2010
EndTime: Sat Jun 5 14:15:01 2010
TotalTime: 900.55 seconds
TotalCapSize: 1524.33MB CapLen: 96 bytes
# of packets: 27643072 (16986.79MB)
AvgRate: 158.23Mbps stddev:11.60M
IP flow (unique src/dst pair) Information
# of flows: 838530 (avg. 32.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 4.2% 3.1% 1.3% 1.3% 1.2% 1.0% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 513223
Top 10 bandwidth usage (bytes/total in %):
14.2% 10.3% 6.7% 6.5% 5.8% 5.8% 5.5% 4.3% 3.2% 2.9%
# of IPv6 addresses: 970
Top 10 bandwidth usage (bytes/total in %):
19.0% 10.8% 10.8% 10.5% 7.6% 5.9% 5.5% 5.5% 5.5% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006051400.pktlen.png)
detailed numbers
[ 32- 63]: 4476702
[ 64- 127]: 8069110
[ 128- 255]: 1899998
[ 256- 511]: 1507062
[ 512- 1023]: 710576
[ 1024- 2047]: 10979624
Protocol Breakdown
![[protocol breakdown chart]](201006051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27643072 (100.00%) 17811944583 (100.00%) 644.35
ip 27611142 ( 99.88%) 17806030388 ( 99.97%) 644.89
tcp 15721384 ( 56.87%) 12117856491 ( 68.03%) 770.79
http(s) 6465356 ( 23.39%) 8342031060 ( 46.83%) 1290.27
http(c) 4517149 ( 16.34%) 545714922 ( 3.06%) 120.81
squid 273052 ( 0.99%) 90059918 ( 0.51%) 329.83
smtp 206646 ( 0.75%) 71189661 ( 0.40%) 344.50
ftp 18936 ( 0.07%) 7224722 ( 0.04%) 381.53
pop3 10559 ( 0.04%) 6985901 ( 0.04%) 661.61
imap 1602 ( 0.01%) 194321 ( 0.00%) 121.30
telnet 2867 ( 0.01%) 234808 ( 0.00%) 81.90
ssh 27440 ( 0.10%) 4408956 ( 0.02%) 160.68
dns 16398 ( 0.06%) 1217800 ( 0.01%) 74.27
bgp 154 ( 0.00%) 50105 ( 0.00%) 325.36
napster 229 ( 0.00%) 15816 ( 0.00%) 69.07
realaud 23 ( 0.00%) 3362 ( 0.00%) 146.17
rtsp 3656 ( 0.01%) 3922568 ( 0.02%) 1072.91
icecast 31834 ( 0.12%) 26113391 ( 0.15%) 820.30
other 4145480 ( 15.00%) 3018489000 ( 16.95%) 728.14
udp 7874777 ( 28.49%) 3797063090 ( 21.32%) 482.18
dns 474028 ( 1.71%) 87835888 ( 0.49%) 185.30
realaud 23 ( 0.00%) 3063 ( 0.00%) 133.17
halflif 81 ( 0.00%) 8114 ( 0.00%) 100.17
starcra 62 ( 0.00%) 5710 ( 0.00%) 92.10
everque 331 ( 0.00%) 66202 ( 0.00%) 200.01
unreal 96 ( 0.00%) 17791 ( 0.00%) 185.32
quake 32 ( 0.00%) 3582 ( 0.00%) 111.94
cuseeme 2 ( 0.00%) 171 ( 0.00%) 85.50
other 7399582 ( 26.77%) 3708891533 ( 20.82%) 501.23
icmp 519026 ( 1.88%) 51295157 ( 0.29%) 98.83
ipip 362 ( 0.00%) 44518 ( 0.00%) 122.98
ipsec 1059 ( 0.00%) 287450 ( 0.00%) 271.44
ip6 3484608 ( 12.61%) 1837699819 ( 10.32%) 527.38
other 9926 ( 0.04%) 1783863 ( 0.01%) 179.72
frag 2489 ( 0.01%) 2408587 ( 0.01%) 967.69
ip6 31930 ( 0.12%) 5914195 ( 0.03%) 185.22
tcp6 8414 ( 0.03%) 1120313 ( 0.01%) 133.15
http(s) 26 ( 0.00%) 6507 ( 0.00%) 250.27
http(c) 1794 ( 0.01%) 174943 ( 0.00%) 97.52
smtp 136 ( 0.00%) 60765 ( 0.00%) 446.80
imap 361 ( 0.00%) 42527 ( 0.00%) 117.80
ssh 1810 ( 0.01%) 328908 ( 0.00%) 181.72
dns 287 ( 0.00%) 55197 ( 0.00%) 192.32
bgp 111 ( 0.00%) 14148 ( 0.00%) 127.46
other 3889 ( 0.01%) 437318 ( 0.00%) 112.45
udp6 11859 ( 0.04%) 3158400 ( 0.02%) 266.33
dns 11335 ( 0.04%) 3081572 ( 0.02%) 271.86
other 524 ( 0.00%) 76828 ( 0.00%) 146.62
icmp6 11535 ( 0.04%) 1552849 ( 0.01%) 134.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 92 ( 0.00%) 78553 ( 0.00%) 853.84
tcpdump file: 201006051400.dump.gz (710.88 MB)