Traffic Trace Info
DumpFile: 201006081400.dump
FileSize: 2255.84MB
Id: 201006081400
StartTime: Tue Jun 8 14:00:01 2010
EndTime: Tue Jun 8 14:15:01 2010
TotalTime: 900.01 seconds
TotalCapSize: 1776.70MB CapLen: 96 bytes
# of packets: 31399645 (19166.50MB)
AvgRate: 178.66Mbps stddev:13.90M
IP flow (unique src/dst pair) Information
# of flows: 874894 (avg. 35.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.2% 1.1% 0.8% 0.7% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 494943
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.0% 3.8% 3.6% 3.3% 3.2% 3.2% 3.1% 2.6% 2.6%
# of IPv6 addresses: 1149
Top 10 bandwidth usage (bytes/total in %):
11.1% 9.2% 8.4% 7.7% 7.7% 7.7% 7.6% 5.9% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006081400.pktlen.png)
detailed numbers
[ 32- 63]: 5371311
[ 64- 127]: 8949841
[ 128- 255]: 2160698
[ 256- 511]: 1697666
[ 512- 1023]: 989445
[ 1024- 2047]: 12230684
Protocol Breakdown
![[protocol breakdown chart]](201006081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31399645 (100.00%) 20097530857 (100.00%) 640.06
ip 31362995 ( 99.88%) 20089137980 ( 99.96%) 640.54
tcp 19416892 ( 61.84%) 13878279328 ( 69.05%) 714.75
http(s) 7924113 ( 25.24%) 10360988731 ( 51.55%) 1307.53
http(c) 6473356 ( 20.62%) 938768426 ( 4.67%) 145.02
squid 305831 ( 0.97%) 98869686 ( 0.49%) 323.28
smtp 314737 ( 1.00%) 136054740 ( 0.68%) 432.28
ftp 20234 ( 0.06%) 7077625 ( 0.04%) 349.79
pop3 15572 ( 0.05%) 5873477 ( 0.03%) 377.18
imap 5029 ( 0.02%) 2271997 ( 0.01%) 451.78
telnet 655 ( 0.00%) 45242 ( 0.00%) 69.07
ssh 354774 ( 1.13%) 50306104 ( 0.25%) 141.80
dns 49867 ( 0.16%) 3471247 ( 0.02%) 69.61
bgp 180 ( 0.00%) 76139 ( 0.00%) 422.99
napster 280 ( 0.00%) 29139 ( 0.00%) 104.07
realaud 63 ( 0.00%) 7133 ( 0.00%) 113.22
rtsp 48201 ( 0.15%) 62287515 ( 0.31%) 1292.25
icecast 3671 ( 0.01%) 1144188 ( 0.01%) 311.68
hotline 7 ( 0.00%) 426 ( 0.00%) 60.86
other 3900319 ( 12.42%) 2211007333 ( 11.00%) 566.88
udp 7500515 ( 23.89%) 3744269421 ( 18.63%) 499.20
dns 665857 ( 2.12%) 117590014 ( 0.59%) 176.60
realaud 926 ( 0.00%) 57387 ( 0.00%) 61.97
halflif 235 ( 0.00%) 49945 ( 0.00%) 212.53
starcra 89 ( 0.00%) 9705 ( 0.00%) 109.04
everque 640 ( 0.00%) 119651 ( 0.00%) 186.95
unreal 110 ( 0.00%) 19610 ( 0.00%) 178.27
quake 32 ( 0.00%) 4741 ( 0.00%) 148.16
cuseeme 2 ( 0.00%) 184 ( 0.00%) 92.00
other 6832418 ( 21.76%) 3626332118 ( 18.04%) 530.75
icmp 346837 ( 1.10%) 28117925 ( 0.14%) 81.07
ipip 331 ( 0.00%) 41662 ( 0.00%) 125.87
ipsec 607 ( 0.00%) 122570 ( 0.00%) 201.93
ip6 4090499 ( 13.03%) 2436783297 ( 12.12%) 595.72
other 7314 ( 0.02%) 1523777 ( 0.01%) 208.34
frag 1204 ( 0.00%) 1175405 ( 0.01%) 976.25
ip6 36650 ( 0.12%) 8392877 ( 0.04%) 229.00
tcp6 7963 ( 0.03%) 2357351 ( 0.01%) 296.04
http(s) 1237 ( 0.00%) 1442830 ( 0.01%) 1166.39
http(c) 1849 ( 0.01%) 334117 ( 0.00%) 180.70
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 205 ( 0.00%) 86948 ( 0.00%) 424.14
imap 407 ( 0.00%) 45359 ( 0.00%) 111.45
ssh 6 ( 0.00%) 856 ( 0.00%) 142.67
dns 226 ( 0.00%) 43388 ( 0.00%) 191.98
bgp 109 ( 0.00%) 14091 ( 0.00%) 129.28
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3921 ( 0.01%) 389540 ( 0.00%) 99.35
udp6 17105 ( 0.05%) 4432124 ( 0.02%) 259.11
dns 16620 ( 0.05%) 4350849 ( 0.02%) 261.78
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 484 ( 0.00%) 81172 ( 0.00%) 167.71
icmp6 11479 ( 0.04%) 1549051 ( 0.01%) 134.95
rtopt6 3 ( 0.00%) 426 ( 0.00%) 142.00
dstopt6 10 ( 0.00%) 1420 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 60 ( 0.00%) 48425 ( 0.00%) 807.08
tcpdump file: 201006081400.dump.gz (832.51 MB)