Traffic Trace Info
DumpFile: 201006161400.dump
FileSize: 2405.36MB
Id: 201006161400
StartTime: Wed Jun 16 14:00:00 2010
EndTime: Wed Jun 16 14:15:01 2010
TotalTime: 900.67 seconds
TotalCapSize: 1886.55MB CapLen: 96 bytes
# of packets: 33996346 (21445.27MB)
AvgRate: 199.75Mbps stddev:20.28M
IP flow (unique src/dst pair) Information
# of flows: 778564 (avg. 43.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.1% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 416273
Top 10 bandwidth usage (bytes/total in %):
11.0% 11.0% 5.5% 5.2% 3.6% 3.4% 2.4% 2.3% 2.2% 2.2%
# of IPv6 addresses: 1258
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.2% 10.2% 8.7% 8.2% 5.4% 5.3% 5.0% 4.3% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006161400.pktlen.png)
detailed numbers
[ 32- 63]: 6029961
[ 64- 127]: 9196820
[ 128- 255]: 2285543
[ 256- 511]: 1644202
[ 512- 1023]: 1160097
[ 1024- 2047]: 13679723
Protocol Breakdown
![[protocol breakdown chart]](201006161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33996346 (100.00%) 22486997515 (100.00%) 661.45
ip 33966567 ( 99.91%) 22479739186 ( 99.97%) 661.82
tcp 20419661 ( 60.06%) 15455653198 ( 68.73%) 756.90
http(s) 8433138 ( 24.81%) 11123316196 ( 49.47%) 1319.00
http(c) 6417197 ( 18.88%) 941103503 ( 4.19%) 146.65
squid 201960 ( 0.59%) 77947210 ( 0.35%) 385.95
smtp 201245 ( 0.59%) 50481063 ( 0.22%) 250.84
nntp 16 ( 0.00%) 1335 ( 0.00%) 83.44
ftp 22238 ( 0.07%) 3623766 ( 0.02%) 162.95
pop3 21317 ( 0.06%) 6158560 ( 0.03%) 288.90
imap 5935 ( 0.02%) 3305686 ( 0.01%) 556.98
telnet 745 ( 0.00%) 62087 ( 0.00%) 83.34
ssh 262441 ( 0.77%) 45562375 ( 0.20%) 173.61
dns 55683 ( 0.16%) 3850050 ( 0.02%) 69.14
bgp 172 ( 0.00%) 76838 ( 0.00%) 446.73
napster 13 ( 0.00%) 1638 ( 0.00%) 126.00
realaud 57 ( 0.00%) 10473 ( 0.00%) 183.74
rtsp 6199 ( 0.02%) 7919606 ( 0.04%) 1277.56
icecast 69065 ( 0.20%) 54325956 ( 0.24%) 786.59
other 4722225 ( 13.89%) 3137905904 ( 13.95%) 664.50
udp 9146475 ( 26.90%) 4506316188 ( 20.04%) 492.68
dns 957146 ( 2.82%) 199515271 ( 0.89%) 208.45
rip 1 ( 0.00%) 107 ( 0.00%) 107.00
realaud 903 ( 0.00%) 57502 ( 0.00%) 63.68
halflif 980 ( 0.00%) 73822 ( 0.00%) 75.33
starcra 52 ( 0.00%) 7571 ( 0.00%) 145.60
everque 503 ( 0.00%) 95186 ( 0.00%) 189.24
unreal 34 ( 0.00%) 5669 ( 0.00%) 166.74
quake 25 ( 0.00%) 1985 ( 0.00%) 79.40
cuseeme 6 ( 0.00%) 479 ( 0.00%) 79.83
other 8186538 ( 24.08%) 4306383315 ( 19.15%) 526.03
icmp 236715 ( 0.70%) 19647991 ( 0.09%) 83.00
ipip 154 ( 0.00%) 19212 ( 0.00%) 124.75
ipsec 1867 ( 0.01%) 1193678 ( 0.01%) 639.36
ip6 4146181 ( 12.20%) 2490438736 ( 11.08%) 600.66
other 15514 ( 0.05%) 6470183 ( 0.03%) 417.05
frag 7627 ( 0.02%) 8123752 ( 0.04%) 1065.13
ip6 29779 ( 0.09%) 7258329 ( 0.03%) 243.74
tcp6 8138 ( 0.02%) 2099979 ( 0.01%) 258.05
http(s) 744 ( 0.00%) 1020566 ( 0.00%) 1371.73
http(c) 2034 ( 0.01%) 197492 ( 0.00%) 97.10
smtp 124 ( 0.00%) 78498 ( 0.00%) 633.05
imap 314 ( 0.00%) 34650 ( 0.00%) 110.35
ssh 1942 ( 0.01%) 386372 ( 0.00%) 198.96
dns 153 ( 0.00%) 30111 ( 0.00%) 196.80
bgp 125 ( 0.00%) 17420 ( 0.00%) 139.36
other 2702 ( 0.01%) 334870 ( 0.00%) 123.93
udp6 16417 ( 0.05%) 4249737 ( 0.02%) 258.86
dns 16074 ( 0.05%) 4184680 ( 0.02%) 260.34
other 343 ( 0.00%) 65057 ( 0.00%) 189.67
icmp6 5010 ( 0.01%) 800806 ( 0.00%) 159.84
rtopt6 5 ( 0.00%) 700 ( 0.00%) 140.00
dstopt6 74 ( 0.00%) 10360 ( 0.00%) 140.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 105 ( 0.00%) 92667 ( 0.00%) 882.54
tcpdump file: 201006161400.dump.gz (876.26 MB)