Traffic Trace Info
DumpFile: 201006141400.dump
FileSize: 2389.86MB
Id: 201006141400
StartTime: Mon Jun 14 14:00:01 2010
EndTime: Mon Jun 14 14:15:00 2010
TotalTime: 899.60 seconds
TotalCapSize: 1874.11MB CapLen: 96 bytes
# of packets: 33795909 (20641.51MB)
AvgRate: 192.48Mbps stddev:18.92M
IP flow (unique src/dst pair) Information
# of flows: 787600 (avg. 42.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.4% 1.1% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 454690
Top 10 bandwidth usage (bytes/total in %):
14.6% 10.1% 4.5% 4.2% 4.2% 3.8% 2.8% 2.7% 2.7% 2.5%
# of IPv6 addresses: 1172
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.7% 7.5% 7.4% 6.7% 6.6% 5.3% 4.2% 3.6% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006141400.pktlen.png)
detailed numbers
[ 32- 63]: 6152882
[ 64- 127]: 9151331
[ 128- 255]: 2512085
[ 256- 511]: 1529778
[ 512- 1023]: 1246098
[ 1024- 2047]: 13203735
Protocol Breakdown
![[protocol breakdown chart]](201006141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33795909 (100.00%) 21644193386 (100.00%) 640.44
ip 33759237 ( 99.89%) 21635577223 ( 99.96%) 640.88
tcp 20929315 ( 61.93%) 14661854582 ( 67.74%) 700.54
http(s) 8463231 ( 25.04%) 11209479089 ( 51.79%) 1324.49
http(c) 7147754 ( 21.15%) 997996580 ( 4.61%) 139.62
squid 186836 ( 0.55%) 67717665 ( 0.31%) 362.44
smtp 227357 ( 0.67%) 73954685 ( 0.34%) 325.28
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 26044 ( 0.08%) 7260328 ( 0.03%) 278.77
pop3 15672 ( 0.05%) 5398328 ( 0.02%) 344.46
imap 4552 ( 0.01%) 1769376 ( 0.01%) 388.70
telnet 1988 ( 0.01%) 146114 ( 0.00%) 73.50
ssh 1235242 ( 3.66%) 167874602 ( 0.78%) 135.90
dns 51328 ( 0.15%) 3506461 ( 0.02%) 68.31
bgp 145 ( 0.00%) 57703 ( 0.00%) 397.95
napster 79 ( 0.00%) 12349 ( 0.00%) 156.32
realaud 25 ( 0.00%) 3832 ( 0.00%) 153.28
rtsp 37269 ( 0.11%) 52438297 ( 0.24%) 1407.02
icecast 29316 ( 0.09%) 27664523 ( 0.13%) 943.67
hotline 93 ( 0.00%) 8746 ( 0.00%) 94.04
other 3502382 ( 10.36%) 2046565782 ( 9.46%) 584.34
udp 8807177 ( 26.06%) 4752111428 ( 21.96%) 539.57
dns 827075 ( 2.45%) 172670458 ( 0.80%) 208.77
rip 2 ( 0.00%) 547 ( 0.00%) 273.50
realaud 29 ( 0.00%) 4586 ( 0.00%) 158.14
halflif 499 ( 0.00%) 50790 ( 0.00%) 101.78
starcra 48 ( 0.00%) 6693 ( 0.00%) 139.44
everque 1028 ( 0.00%) 271670 ( 0.00%) 264.27
unreal 53 ( 0.00%) 8923 ( 0.00%) 168.36
quake 12 ( 0.00%) 1127 ( 0.00%) 93.92
cuseeme 4 ( 0.00%) 633 ( 0.00%) 158.25
other 7978235 ( 23.61%) 4579008096 ( 21.16%) 573.94
icmp 229234 ( 0.68%) 19099026 ( 0.09%) 83.32
ipip 166 ( 0.00%) 21144 ( 0.00%) 127.37
ipsec 576 ( 0.00%) 117328 ( 0.00%) 203.69
ip6 3790833 ( 11.22%) 2202003184 ( 10.17%) 580.88
other 1936 ( 0.01%) 370531 ( 0.00%) 191.39
frag 1413 ( 0.00%) 1392928 ( 0.01%) 985.79
ip6 36672 ( 0.11%) 8616163 ( 0.04%) 234.95
tcp6 9601 ( 0.03%) 3074479 ( 0.01%) 320.22
http(s) 2007 ( 0.01%) 1926764 ( 0.01%) 960.02
http(c) 1344 ( 0.00%) 151134 ( 0.00%) 112.45
smtp 182 ( 0.00%) 85063 ( 0.00%) 467.38
imap 405 ( 0.00%) 46259 ( 0.00%) 114.22
ssh 823 ( 0.00%) 246474 ( 0.00%) 299.48
dns 319 ( 0.00%) 60994 ( 0.00%) 191.20
bgp 117 ( 0.00%) 16535 ( 0.00%) 141.32
other 4404 ( 0.01%) 541256 ( 0.00%) 122.90
udp6 16954 ( 0.05%) 4099281 ( 0.02%) 241.79
dns 16147 ( 0.05%) 3947484 ( 0.02%) 244.47
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 806 ( 0.00%) 151687 ( 0.00%) 188.20
icmp6 9953 ( 0.03%) 1387676 ( 0.01%) 139.42
dstopt6 95 ( 0.00%) 13490 ( 0.00%) 142.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 39 ( 0.00%) 37157 ( 0.00%) 952.74
tcpdump file: 201006141400.dump.gz (880.70 MB)