Traffic Trace Info
DumpFile: 201006121400.dump
FileSize: 1736.11MB
Id: 201006121400
StartTime: Sat Jun 12 14:00:00 2010
EndTime: Sat Jun 12 14:15:00 2010
TotalTime: 900.27 seconds
TotalCapSize: 1367.45MB CapLen: 96 bytes
# of packets: 24157398 (13351.88MB)
AvgRate: 124.42Mbps stddev:13.29M
IP flow (unique src/dst pair) Information
# of flows: 685006 (avg. 35.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.2% 0.8% 0.8% 0.8% 0.8% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 405482
Top 10 bandwidth usage (bytes/total in %):
16.5% 15.3% 6.5% 4.3% 4.3% 3.2% 2.8% 2.6% 2.4% 1.9%
# of IPv6 addresses: 1008
Top 10 bandwidth usage (bytes/total in %):
11.5% 11.3% 11.1% 10.3% 10.3% 6.8% 5.8% 4.9% 4.8% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006121400.pktlen.png)
detailed numbers
[ 32- 63]: 4282474
[ 64- 127]: 7445367
[ 128- 255]: 1808931
[ 256- 511]: 1609892
[ 512- 1023]: 807872
[ 1024- 2047]: 8202862
Protocol Breakdown
![[protocol breakdown chart]](201006121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24157398 (100.00%) 14000457093 (100.00%) 579.55
ip 24122767 ( 99.86%) 13994254336 ( 99.96%) 580.13
tcp 13214319 ( 54.70%) 8774476643 ( 62.67%) 664.01
http(s) 5390333 ( 22.31%) 7152663852 ( 51.09%) 1326.94
http(c) 4156559 ( 17.21%) 442641422 ( 3.16%) 106.49
squid 288807 ( 1.20%) 129104283 ( 0.92%) 447.03
smtp 203096 ( 0.84%) 48248491 ( 0.34%) 237.56
nntp 6 ( 0.00%) 362 ( 0.00%) 60.33
ftp 28118 ( 0.12%) 9435292 ( 0.07%) 335.56
pop3 9477 ( 0.04%) 3963800 ( 0.03%) 418.25
imap 3846 ( 0.02%) 2143012 ( 0.02%) 557.21
telnet 878 ( 0.00%) 61512 ( 0.00%) 70.06
ssh 963984 ( 3.99%) 139660579 ( 1.00%) 144.88
dns 50595 ( 0.21%) 3440751 ( 0.02%) 68.01
bgp 184 ( 0.00%) 83740 ( 0.00%) 455.11
napster 23 ( 0.00%) 3746 ( 0.00%) 162.87
realaud 28 ( 0.00%) 2802 ( 0.00%) 100.07
rtsp 300 ( 0.00%) 33646 ( 0.00%) 112.15
icecast 11771 ( 0.05%) 15189691 ( 0.11%) 1290.43
hotline 19 ( 0.00%) 1562 ( 0.00%) 82.21
other 2106294 ( 8.72%) 827798040 ( 5.91%) 393.01
udp 6806911 ( 28.18%) 3048415922 ( 21.77%) 447.84
dns 702819 ( 2.91%) 150655995 ( 1.08%) 214.36
realaud 21 ( 0.00%) 1837 ( 0.00%) 87.48
halflif 63329 ( 0.26%) 9955778 ( 0.07%) 157.21
starcra 58 ( 0.00%) 7526 ( 0.00%) 129.76
everque 618 ( 0.00%) 121185 ( 0.00%) 196.09
unreal 17 ( 0.00%) 3471 ( 0.00%) 204.18
quake 10 ( 0.00%) 1148 ( 0.00%) 114.80
cuseeme 2 ( 0.00%) 426 ( 0.00%) 213.00
other 6039866 ( 25.00%) 2887591830 ( 20.62%) 478.09
icmp 283947 ( 1.18%) 27114358 ( 0.19%) 95.49
ipip 160 ( 0.00%) 20292 ( 0.00%) 126.83
ipsec 499 ( 0.00%) 92914 ( 0.00%) 186.20
ip6 3816578 ( 15.80%) 2144092025 ( 15.31%) 561.78
other 353 ( 0.00%) 42182 ( 0.00%) 119.50
frag 883 ( 0.00%) 879788 ( 0.01%) 996.36
ip6 34631 ( 0.14%) 6202757 ( 0.04%) 179.11
tcp6 8785 ( 0.04%) 1068037 ( 0.01%) 121.58
http(s) 129 ( 0.00%) 102108 ( 0.00%) 791.53
http(c) 1421 ( 0.01%) 141589 ( 0.00%) 99.64
smtp 170 ( 0.00%) 73612 ( 0.00%) 433.01
ftp 21 ( 0.00%) 1914 ( 0.00%) 91.14
imap 382 ( 0.00%) 44966 ( 0.00%) 117.71
ssh 6 ( 0.00%) 852 ( 0.00%) 142.00
dns 280 ( 0.00%) 44312 ( 0.00%) 158.26
bgp 126 ( 0.00%) 18915 ( 0.00%) 150.12
other 6250 ( 0.03%) 639769 ( 0.00%) 102.36
udp6 14982 ( 0.06%) 3588304 ( 0.03%) 239.51
dns 14567 ( 0.06%) 3526473 ( 0.03%) 242.09
starcra 16 ( 0.00%) 1969 ( 0.00%) 123.06
other 399 ( 0.00%) 59862 ( 0.00%) 150.03
icmp6 10703 ( 0.04%) 1473743 ( 0.01%) 137.69
rtopt6 1 ( 0.00%) 142 ( 0.00%) 142.00
dstopt6 62 ( 0.00%) 8804 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 68 ( 0.00%) 59647 ( 0.00%) 877.16
tcpdump file: 201006121400.dump.gz (655.28 MB)