Traffic Trace Info
DumpFile: 201006071400.dump
FileSize: 2697.78MB
Id: 201006071400
StartTime: Mon Jun 7 14:00:01 2010
EndTime: Mon Jun 7 14:15:01 2010
TotalTime: 899.89 seconds
TotalCapSize: -1969.64MB CapLen: 96 bytes
# of packets: 37443944 (26363.61MB)
AvgRate: 245.78Mbps stddev:21.58M
IP flow (unique src/dst pair) Information
# of flows: 927753 (avg. 40.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.9% 1.9% 1.8% 1.8% 1.4% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 515503
Top 10 bandwidth usage (bytes/total in %):
11.9% 10.2% 8.8% 4.2% 3.4% 3.2% 3.1% 2.6% 2.5% 2.3%
# of IPv6 addresses: 1188
Top 10 bandwidth usage (bytes/total in %):
37.8% 18.8% 9.9% 9.1% 6.0% 5.8% 5.7% 5.5% 5.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006071400.pktlen.png)
detailed numbers
[ 32- 63]: 5893783
[ 64- 127]: 8972475
[ 128- 255]: 2506396
[ 256- 511]: 1823907
[ 512- 1023]: 1325807
[ 1024- 2047]: 16921576
Protocol Breakdown
![[protocol breakdown chart]](201006071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37443944 (100.00%) 27644245100 (100.00%) 738.28
ip 37399444 ( 99.88%) 27630099270 ( 99.95%) 738.78
tcp 25524526 ( 68.17%) 21732875934 ( 78.62%) 851.45
http(s) 11806073 ( 31.53%) 16118463697 ( 58.31%) 1365.27
http(c) 7150967 ( 19.10%) 1431003248 ( 5.18%) 200.11
squid 258853 ( 0.69%) 90886516 ( 0.33%) 351.11
smtp 311923 ( 0.83%) 139065552 ( 0.50%) 445.83
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 20913 ( 0.06%) 3072259 ( 0.01%) 146.91
pop3 24426 ( 0.07%) 9647167 ( 0.03%) 394.95
imap 9311 ( 0.02%) 1242583 ( 0.00%) 133.45
telnet 855 ( 0.00%) 61763 ( 0.00%) 72.24
ssh 38077 ( 0.10%) 6242329 ( 0.02%) 163.94
dns 18579 ( 0.05%) 1359551 ( 0.00%) 73.18
bgp 133 ( 0.00%) 47085 ( 0.00%) 354.02
napster 15 ( 0.00%) 1572 ( 0.00%) 104.80
realaud 37 ( 0.00%) 7436 ( 0.00%) 200.97
rtsp 25 ( 0.00%) 4844 ( 0.00%) 193.76
icecast 36980 ( 0.10%) 37717190 ( 0.14%) 1019.93
hotline 30 ( 0.00%) 8133 ( 0.00%) 271.10
other 5847324 ( 15.62%) 3894044707 ( 14.09%) 665.95
udp 7288676 ( 19.47%) 3428609739 ( 12.40%) 470.40
dns 685903 ( 1.83%) 117742443 ( 0.43%) 171.66
realaud 125 ( 0.00%) 10271 ( 0.00%) 82.17
halflif 241 ( 0.00%) 48010 ( 0.00%) 199.21
starcra 71 ( 0.00%) 9368 ( 0.00%) 131.94
everque 1341 ( 0.00%) 166392 ( 0.00%) 124.08
unreal 54 ( 0.00%) 10609 ( 0.00%) 196.46
quake 10 ( 0.00%) 857 ( 0.00%) 85.70
cuseeme 5 ( 0.00%) 437 ( 0.00%) 87.40
other 6600730 ( 17.63%) 3310523351 ( 11.98%) 501.54
icmp 307888 ( 0.82%) 25255293 ( 0.09%) 82.03
ipip 329 ( 0.00%) 41938 ( 0.00%) 127.47
ipsec 604 ( 0.00%) 122008 ( 0.00%) 202.00
ip6 4266121 ( 11.39%) 2441560918 ( 8.83%) 572.31
other 11300 ( 0.03%) 1633440 ( 0.01%) 144.55
frag 1328 ( 0.00%) 1535100 ( 0.01%) 1155.95
ip6 44500 ( 0.12%) 14145830 ( 0.05%) 317.88
tcp6 17699 ( 0.05%) 8300133 ( 0.03%) 468.96
http(s) 5284 ( 0.01%) 6188597 ( 0.02%) 1171.20
http(c) 1318 ( 0.00%) 132683 ( 0.00%) 100.67
smtp 333 ( 0.00%) 135712 ( 0.00%) 407.54
imap 271 ( 0.00%) 30909 ( 0.00%) 114.06
ssh 4563 ( 0.01%) 1142394 ( 0.00%) 250.36
dns 398 ( 0.00%) 78488 ( 0.00%) 197.21
bgp 109 ( 0.00%) 13681 ( 0.00%) 125.51
other 5423 ( 0.01%) 577669 ( 0.00%) 106.52
udp6 16529 ( 0.04%) 4330576 ( 0.02%) 262.00
dns 16186 ( 0.04%) 4275735 ( 0.02%) 264.16
other 343 ( 0.00%) 54841 ( 0.00%) 159.89
icmp6 10039 ( 0.03%) 1413128 ( 0.01%) 140.76
rtopt6 1 ( 0.00%) 142 ( 0.00%) 142.00
dstopt6 109 ( 0.00%) 15478 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 93 ( 0.00%) 82293 ( 0.00%) 884.87
tcpdump file: 201006071400.dump.gz (962.16 MB)