Traffic Trace Info
DumpFile: 201006111400.dump
FileSize: 2368.01MB
Id: 201006111400
StartTime: Fri Jun 11 14:00:01 2010
EndTime: Fri Jun 11 14:15:01 2010
TotalTime: 899.75 seconds
TotalCapSize: 1860.08MB CapLen: 96 bytes
# of packets: 33286011 (18015.36MB)
AvgRate: 167.95Mbps stddev:15.85M
IP flow (unique src/dst pair) Information
# of flows: 1260778 (avg. 26.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 1.4% 1.2% 1.0% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 716529
Top 10 bandwidth usage (bytes/total in %):
13.0% 10.5% 5.6% 5.5% 4.7% 4.2% 3.0% 2.7% 2.7% 2.5%
# of IPv6 addresses: 1118
Top 10 bandwidth usage (bytes/total in %):
9.6% 9.3% 9.0% 8.8% 7.0% 5.2% 4.9% 4.7% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006111400.pktlen.png)
detailed numbers
[ 32- 63]: 6788915
[ 64- 127]: 10203196
[ 128- 255]: 2376209
[ 256- 511]: 1682761
[ 512- 1023]: 1040109
[ 1024- 2047]: 11194821
Protocol Breakdown
![[protocol breakdown chart]](201006111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33286011 (100.00%) 18890471498 (100.00%) 567.52
ip 33253506 ( 99.90%) 18883621903 ( 99.96%) 567.87
tcp 20841824 ( 62.61%) 12816833727 ( 67.85%) 614.96
http(s) 7467865 ( 22.44%) 9358333771 ( 49.54%) 1253.15
http(c) 7457290 ( 22.40%) 885350103 ( 4.69%) 118.72
squid 257733 ( 0.77%) 97809981 ( 0.52%) 379.50
smtp 248046 ( 0.75%) 76507671 ( 0.41%) 308.44
nntp 9 ( 0.00%) 582 ( 0.00%) 64.67
ftp 28953 ( 0.09%) 8919727 ( 0.05%) 308.08
pop3 31873 ( 0.10%) 20038598 ( 0.11%) 628.70
imap 5852 ( 0.02%) 857471 ( 0.00%) 146.53
telnet 959 ( 0.00%) 71656 ( 0.00%) 74.72
ssh 1344706 ( 4.04%) 193434272 ( 1.02%) 143.85
dns 51161 ( 0.15%) 3489241 ( 0.02%) 68.20
bgp 158 ( 0.00%) 66671 ( 0.00%) 421.97
napster 18 ( 0.00%) 2464 ( 0.00%) 136.89
realaud 126 ( 0.00%) 13840 ( 0.00%) 109.84
rtsp 22363 ( 0.07%) 23249754 ( 0.12%) 1039.65
icecast 29129 ( 0.09%) 31825389 ( 0.17%) 1092.57
other 3895579 ( 11.70%) 2116862296 ( 11.21%) 543.40
udp 8349715 ( 25.08%) 4009450139 ( 21.22%) 480.19
dns 879163 ( 2.64%) 183628680 ( 0.97%) 208.87
rip 3 ( 0.00%) 622 ( 0.00%) 207.33
realaud 417 ( 0.00%) 29274 ( 0.00%) 70.20
halflif 256 ( 0.00%) 37148 ( 0.00%) 145.11
starcra 79 ( 0.00%) 10679 ( 0.00%) 135.18
everque 2047 ( 0.01%) 233824 ( 0.00%) 114.23
unreal 79 ( 0.00%) 14946 ( 0.00%) 189.19
quake 26 ( 0.00%) 2309 ( 0.00%) 88.81
cuseeme 3 ( 0.00%) 476 ( 0.00%) 158.67
other 7467302 ( 22.43%) 3825318750 ( 20.25%) 512.28
icmp 272109 ( 0.82%) 22424748 ( 0.12%) 82.41
ipip 358 ( 0.00%) 44952 ( 0.00%) 125.56
ipsec 538 ( 0.00%) 99644 ( 0.00%) 185.21
ip6 3786332 ( 11.38%) 2034216917 ( 10.77%) 537.25
other 2630 ( 0.01%) 551776 ( 0.00%) 209.80
frag 1385 ( 0.00%) 1386410 ( 0.01%) 1001.02
ip6 32505 ( 0.10%) 6849595 ( 0.04%) 210.72
tcp6 7360 ( 0.02%) 1636576 ( 0.01%) 222.36
http(s) 510 ( 0.00%) 559864 ( 0.00%) 1097.77
http(c) 1377 ( 0.00%) 144913 ( 0.00%) 105.24
smtp 377 ( 0.00%) 228854 ( 0.00%) 607.04
imap 236 ( 0.00%) 26782 ( 0.00%) 113.48
ssh 6 ( 0.00%) 868 ( 0.00%) 144.67
dns 186 ( 0.00%) 31015 ( 0.00%) 166.75
bgp 117 ( 0.00%) 16948 ( 0.00%) 144.85
other 4551 ( 0.01%) 627332 ( 0.00%) 137.84
udp6 15317 ( 0.05%) 3790501 ( 0.02%) 247.47
dns 15127 ( 0.05%) 3760889 ( 0.02%) 248.62
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 189 ( 0.00%) 29504 ( 0.00%) 156.11
icmp6 9716 ( 0.03%) 1350799 ( 0.01%) 139.03
rtopt6 1 ( 0.00%) 142 ( 0.00%) 142.00
dstopt6 3 ( 0.00%) 426 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 78 ( 0.00%) 67071 ( 0.00%) 859.88
tcpdump file: 201006111400.dump.gz (877.46 MB)