Traffic Trace Info
DumpFile: 201006091400.dump
FileSize: 2619.99MB
Id: 201006091400
StartTime: Wed Jun 9 14:00:01 2010
EndTime: Wed Jun 9 14:15:01 2010
TotalTime: 899.73 seconds
TotalCapSize: -2038.82MB CapLen: 96 bytes
# of packets: 36881850 (22143.77MB)
AvgRate: 206.46Mbps stddev:18.07M
IP flow (unique src/dst pair) Information
# of flows: 964653 (avg. 38.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.3% 1.4% 1.4% 1.4% 1.4% 1.3% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 557481
Top 10 bandwidth usage (bytes/total in %):
12.3% 9.8% 9.5% 4.8% 3.7% 3.4% 3.3% 2.8% 2.5% 2.5%
# of IPv6 addresses: 1099
Top 10 bandwidth usage (bytes/total in %):
80.6% 80.6% 3.0% 3.0% 1.4% 1.4% 1.3% 1.3% 1.1% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006091400.pktlen.png)
detailed numbers
[ 32- 63]: 7596322
[ 64- 127]: 9872418
[ 128- 255]: 2618376
[ 256- 511]: 1670833
[ 512- 1023]: 1086176
[ 1024- 2047]: 14037725
Protocol Breakdown
![[protocol breakdown chart]](201006091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36881850 (100.00%) 23219420706 (100.00%) 629.56
ip 36825776 ( 99.85%) 23177344049 ( 99.82%) 629.38
tcp 24130023 ( 65.43%) 16585247671 ( 71.43%) 687.33
http(s) 8844970 ( 23.98%) 11696716080 ( 50.37%) 1322.41
http(c) 8206321 ( 22.25%) 1293053298 ( 5.57%) 157.57
squid 302473 ( 0.82%) 173281778 ( 0.75%) 572.88
smtp 226701 ( 0.61%) 80293996 ( 0.35%) 354.18
ftp 28930 ( 0.08%) 8219057 ( 0.04%) 284.10
pop3 47596 ( 0.13%) 9662500 ( 0.04%) 203.01
imap 5422 ( 0.01%) 1943403 ( 0.01%) 358.43
telnet 491 ( 0.00%) 38483 ( 0.00%) 78.38
ssh 1462844 ( 3.97%) 205729360 ( 0.89%) 140.64
dns 47719 ( 0.13%) 3245953 ( 0.01%) 68.02
bgp 386 ( 0.00%) 246556 ( 0.00%) 638.75
napster 19 ( 0.00%) 3322 ( 0.00%) 174.84
realaud 93 ( 0.00%) 11701 ( 0.00%) 125.82
rtsp 19891 ( 0.05%) 22491315 ( 0.10%) 1130.73
icecast 21560 ( 0.06%) 11699805 ( 0.05%) 542.66
hotline 16 ( 0.00%) 1676 ( 0.00%) 104.75
other 4914589 ( 13.33%) 3078609268 ( 13.26%) 626.42
udp 8407734 ( 22.80%) 4249765395 ( 18.30%) 505.46
dns 657581 ( 1.78%) 112011569 ( 0.48%) 170.34
realaud 23 ( 0.00%) 4015 ( 0.00%) 174.57
halflif 261 ( 0.00%) 58442 ( 0.00%) 223.92
starcra 82 ( 0.00%) 11019 ( 0.00%) 134.38
everque 989 ( 0.00%) 306206 ( 0.00%) 309.61
unreal 169 ( 0.00%) 23890 ( 0.00%) 141.36
quake 29 ( 0.00%) 2848 ( 0.00%) 98.21
cuseeme 4 ( 0.00%) 455 ( 0.00%) 113.75
other 7748392 ( 21.01%) 4137237563 ( 17.82%) 533.95
icmp 246380 ( 0.67%) 20896932 ( 0.09%) 84.82
ipip 346 ( 0.00%) 44144 ( 0.00%) 127.58
ipsec 2463 ( 0.01%) 752280 ( 0.00%) 305.43
ip6 4033224 ( 10.94%) 2319706590 ( 9.99%) 575.15
other 5606 ( 0.02%) 931037 ( 0.00%) 166.08
frag 1400 ( 0.00%) 1356244 ( 0.01%) 968.75
ip6 56074 ( 0.15%) 42076657 ( 0.18%) 750.38
tcp6 31246 ( 0.08%) 36962709 ( 0.16%) 1182.96
http(s) 1914 ( 0.01%) 1861735 ( 0.01%) 972.69
http(c) 1684 ( 0.00%) 168484 ( 0.00%) 100.05
smtp 279 ( 0.00%) 128569 ( 0.00%) 460.82
ftp 44 ( 0.00%) 6387 ( 0.00%) 145.16
imap 334 ( 0.00%) 38771 ( 0.00%) 116.08
ssh 23384 ( 0.06%) 34026852 ( 0.15%) 1455.13
dns 296 ( 0.00%) 42572 ( 0.00%) 143.82
bgp 515 ( 0.00%) 320995 ( 0.00%) 623.29
other 2796 ( 0.01%) 368344 ( 0.00%) 131.74
udp6 15303 ( 0.04%) 3734190 ( 0.02%) 244.02
dns 14855 ( 0.04%) 3662280 ( 0.02%) 246.54
other 448 ( 0.00%) 71910 ( 0.00%) 160.51
icmp6 9414 ( 0.03%) 1320384 ( 0.01%) 140.26
rtopt6 10 ( 0.00%) 1420 ( 0.00%) 142.00
dstopt6 8 ( 0.00%) 1136 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 63 ( 0.00%) 52738 ( 0.00%) 837.11
tcpdump file: 201006091400.dump.gz (947.72 MB)