Traffic Trace Info
DumpFile: 201006131400.dump
FileSize: 1829.16MB
Id: 201006131400
StartTime: Sun Jun 13 14:00:00 2010
EndTime: Sun Jun 13 14:15:01 2010
TotalTime: 900.44 seconds
TotalCapSize: 1440.70MB CapLen: 96 bytes
# of packets: 25453279 (15776.64MB)
AvgRate: 146.98Mbps stddev:13.04M
IP flow (unique src/dst pair) Information
# of flows: 669206 (avg. 38.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.4% 1.3% 1.0% 1.0% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 412497
Top 10 bandwidth usage (bytes/total in %):
14.6% 14.0% 4.8% 4.0% 3.9% 3.3% 3.2% 2.6% 2.5% 2.5%
# of IPv6 addresses: 1014
Top 10 bandwidth usage (bytes/total in %):
11.4% 11.3% 10.3% 9.3% 8.4% 6.3% 5.3% 5.2% 5.0% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006131400.pktlen.png)
detailed numbers
[ 32- 63]: 3564768
[ 64- 127]: 7654388
[ 128- 255]: 1910329
[ 256- 511]: 1496081
[ 512- 1023]: 799768
[ 1024- 2047]: 10027945
Protocol Breakdown
![[protocol breakdown chart]](201006131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25453279 (100.00%) 16543010004 (100.00%) 649.94
ip 25420491 ( 99.87%) 16537384779 ( 99.97%) 650.55
tcp 13999374 ( 55.00%) 10602576117 ( 64.09%) 757.36
http(s) 6108285 ( 24.00%) 8327302021 ( 50.34%) 1363.28
http(c) 3641585 ( 14.31%) 439921832 ( 2.66%) 120.81
squid 158977 ( 0.62%) 47050597 ( 0.28%) 295.96
smtp 162095 ( 0.64%) 33459033 ( 0.20%) 206.42
ftp 25125 ( 0.10%) 7456432 ( 0.05%) 296.77
pop3 5861 ( 0.02%) 4388438 ( 0.03%) 748.75
imap 844 ( 0.00%) 98710 ( 0.00%) 116.95
telnet 596 ( 0.00%) 44812 ( 0.00%) 75.19
ssh 1042707 ( 4.10%) 134702827 ( 0.81%) 129.19
dns 48410 ( 0.19%) 3302641 ( 0.02%) 68.22
bgp 147 ( 0.00%) 50686 ( 0.00%) 344.80
napster 62 ( 0.00%) 22956 ( 0.00%) 370.26
realaud 55 ( 0.00%) 9640 ( 0.00%) 175.27
rtsp 110 ( 0.00%) 18569 ( 0.00%) 168.81
icecast 11685 ( 0.05%) 15190994 ( 0.09%) 1300.04
hotline 12 ( 0.00%) 853 ( 0.00%) 71.08
other 2792816 ( 10.97%) 1589554956 ( 9.61%) 569.16
udp 6996207 ( 27.49%) 3488897356 ( 21.09%) 498.68
dns 546338 ( 2.15%) 100856975 ( 0.61%) 184.61
realaud 950 ( 0.00%) 59151 ( 0.00%) 62.26
halflif 346 ( 0.00%) 102721 ( 0.00%) 296.88
starcra 25 ( 0.00%) 2646 ( 0.00%) 105.84
everque 296 ( 0.00%) 62239 ( 0.00%) 210.27
unreal 95 ( 0.00%) 7610 ( 0.00%) 80.11
quake 8 ( 0.00%) 1358 ( 0.00%) 169.75
cuseeme 14 ( 0.00%) 1079 ( 0.00%) 77.07
other 6447885 ( 25.33%) 3387678482 ( 20.48%) 525.39
icmp 214673 ( 0.84%) 17634642 ( 0.11%) 82.15
ipip 161 ( 0.00%) 20138 ( 0.00%) 125.08
ipsec 559 ( 0.00%) 101610 ( 0.00%) 181.77
ip6 4202934 ( 16.51%) 2425445708 ( 14.66%) 577.08
other 6583 ( 0.03%) 2709208 ( 0.02%) 411.55
frag 1106 ( 0.00%) 1112478 ( 0.01%) 1005.86
ip6 32788 ( 0.13%) 5625225 ( 0.03%) 171.56
tcp6 10890 ( 0.04%) 1362119 ( 0.01%) 125.08
http(s) 209 ( 0.00%) 254564 ( 0.00%) 1218.01
http(c) 1275 ( 0.01%) 130452 ( 0.00%) 102.32
smtp 5 ( 0.00%) 430 ( 0.00%) 86.00
imap 338 ( 0.00%) 41158 ( 0.00%) 121.77
ssh 6 ( 0.00%) 868 ( 0.00%) 144.67
dns 287 ( 0.00%) 62475 ( 0.00%) 217.68
bgp 115 ( 0.00%) 19121 ( 0.00%) 166.27
other 8655 ( 0.03%) 853051 ( 0.01%) 98.56
udp6 11799 ( 0.05%) 2760665 ( 0.02%) 233.97
dns 11116 ( 0.04%) 2670244 ( 0.02%) 240.22
starcra 4 ( 0.00%) 368 ( 0.00%) 92.00
other 679 ( 0.00%) 90053 ( 0.00%) 132.63
icmp6 9876 ( 0.04%) 1386490 ( 0.01%) 140.39
rtopt6 4 ( 0.00%) 568 ( 0.00%) 142.00
dstopt6 89 ( 0.00%) 12638 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 100 ( 0.00%) 98665 ( 0.00%) 986.65
tcpdump file: 201006131400.dump.gz (679.85 MB)