Traffic Trace Info
DumpFile: 201006061400.dump
FileSize: 1779.17MB
Id: 201006061400
StartTime: Sun Jun 6 14:00:00 2010
EndTime: Sun Jun 6 14:15:00 2010
TotalTime: 899.88 seconds
TotalCapSize: 1400.47MB CapLen: 96 bytes
# of packets: 24817476 (16319.18MB)
AvgRate: 152.12Mbps stddev:13.95M
IP flow (unique src/dst pair) Information
# of flows: 764304 (avg. 32.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.5% 1.3% 1.3% 1.2% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 494759
Top 10 bandwidth usage (bytes/total in %):
13.5% 11.6% 8.8% 5.7% 3.5% 2.6% 2.4% 2.4% 2.2% 2.2%
# of IPv6 addresses: 942
Top 10 bandwidth usage (bytes/total in %):
12.7% 12.7% 12.1% 10.3% 9.2% 6.8% 6.6% 6.6% 6.3% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006061400.pktlen.png)
detailed numbers
[ 32- 63]: 3925360
[ 64- 127]: 6652999
[ 128- 255]: 1633245
[ 256- 511]: 1414715
[ 512- 1023]: 681377
[ 1024- 2047]: 10509780
Protocol Breakdown
![[protocol breakdown chart]](201006061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24817476 (100.00%) 17111897507 (100.00%) 689.51
ip 24789773 ( 99.89%) 17106871641 ( 99.97%) 690.08
tcp 14189080 ( 57.17%) 11977575068 ( 70.00%) 844.14
http(s) 6992097 ( 28.17%) 9725420311 ( 56.83%) 1390.92
http(c) 3852520 ( 15.52%) 410324030 ( 2.40%) 106.51
squid 312229 ( 1.26%) 196677062 ( 1.15%) 629.91
smtp 168045 ( 0.68%) 41809255 ( 0.24%) 248.80
ftp 20239 ( 0.08%) 7184408 ( 0.04%) 354.98
pop3 6859 ( 0.03%) 3720539 ( 0.02%) 542.43
imap 2595 ( 0.01%) 1213643 ( 0.01%) 467.69
telnet 1861 ( 0.01%) 129728 ( 0.00%) 69.71
ssh 127425 ( 0.51%) 28570087 ( 0.17%) 224.21
dns 17706 ( 0.07%) 1291577 ( 0.01%) 72.95
bgp 142 ( 0.00%) 40835 ( 0.00%) 287.57
napster 39 ( 0.00%) 5385 ( 0.00%) 138.08
realaud 100 ( 0.00%) 18574 ( 0.00%) 185.74
rtsp 66 ( 0.00%) 27046 ( 0.00%) 409.79
icecast 26125 ( 0.11%) 23082642 ( 0.13%) 883.55
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 2661024 ( 10.72%) 1538059390 ( 8.99%) 578.00
udp 6335047 ( 25.53%) 2778540732 ( 16.24%) 438.60
dns 437719 ( 1.76%) 76895044 ( 0.45%) 175.67
realaud 941 ( 0.00%) 58741 ( 0.00%) 62.42
halflif 62 ( 0.00%) 5868 ( 0.00%) 94.65
starcra 57 ( 0.00%) 6531 ( 0.00%) 114.58
everque 603 ( 0.00%) 128599 ( 0.00%) 213.27
unreal 78 ( 0.00%) 15399 ( 0.00%) 197.42
quake 33 ( 0.00%) 2715 ( 0.00%) 82.27
other 5895258 ( 23.75%) 2701272881 ( 15.79%) 458.21
icmp 283165 ( 1.14%) 22996898 ( 0.13%) 81.21
ipip 344 ( 0.00%) 42088 ( 0.00%) 122.35
ipsec 692 ( 0.00%) 134016 ( 0.00%) 193.66
ip6 3976733 ( 16.02%) 2326411153 ( 13.60%) 585.01
other 4712 ( 0.02%) 1171686 ( 0.01%) 248.66
frag 1425 ( 0.01%) 1432330 ( 0.01%) 1005.14
ip6 27703 ( 0.11%) 5025866 ( 0.03%) 181.42
tcp6 8071 ( 0.03%) 1185135 ( 0.01%) 146.84
http(s) 134 ( 0.00%) 104597 ( 0.00%) 780.57
http(c) 1204 ( 0.00%) 120814 ( 0.00%) 100.34
smtp 227 ( 0.00%) 100544 ( 0.00%) 442.93
imap 318 ( 0.00%) 38979 ( 0.00%) 122.58
ssh 1847 ( 0.01%) 334010 ( 0.00%) 180.84
dns 301 ( 0.00%) 48782 ( 0.00%) 162.07
bgp 110 ( 0.00%) 14056 ( 0.00%) 127.78
other 3930 ( 0.02%) 423353 ( 0.00%) 107.72
udp6 9672 ( 0.04%) 2426933 ( 0.01%) 250.92
dns 9304 ( 0.04%) 2374936 ( 0.01%) 255.26
realaud 1 ( 0.00%) 90 ( 0.00%) 90.00
other 367 ( 0.00%) 51907 ( 0.00%) 141.44
icmp6 9871 ( 0.04%) 1367181 ( 0.01%) 138.50
dstopt6 9 ( 0.00%) 1278 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 50 ( 0.00%) 41259 ( 0.00%) 825.18
tcpdump file: 201006061400.dump.gz (658.26 MB)