Traffic Trace Info
DumpFile: 201006171400.dump
FileSize: 2718.14MB
Id: 201006171400
StartTime: Thu Jun 17 14:00:01 2010
EndTime: Thu Jun 17 14:15:00 2010
TotalTime: 899.53 seconds
TotalCapSize: -1957.24MB CapLen: 96 bytes
# of packets: 37965773 (25352.81MB)
AvgRate: 236.40Mbps stddev:21.69M
IP flow (unique src/dst pair) Information
# of flows: 857334 (avg. 44.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 3.2% 2.0% 2.0% 2.0% 1.9% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 486235
Top 10 bandwidth usage (bytes/total in %):
9.3% 8.7% 7.5% 7.0% 5.3% 3.3% 3.1% 3.0% 2.9% 2.8%
# of IPv6 addresses: 1246
Top 10 bandwidth usage (bytes/total in %):
36.9% 36.7% 7.8% 5.9% 5.6% 4.7% 3.8% 3.5% 3.4% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006171400.pktlen.png)
detailed numbers
[ 32- 63]: 7329436
[ 64- 127]: 9406562
[ 128- 255]: 2124992
[ 256- 511]: 1617169
[ 512- 1023]: 1081560
[ 1024- 2047]: 16406054
Protocol Breakdown
![[protocol breakdown chart]](201006171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37965773 (100.00%) 26584353112 (100.00%) 700.22
ip 37889084 ( 99.80%) 26573330242 ( 99.96%) 701.35
tcp 26121212 ( 68.80%) 20793583039 ( 78.22%) 796.04
http(s) 11089022 ( 29.21%) 14747767876 ( 55.48%) 1329.94
http(c) 7564986 ( 19.93%) 957344292 ( 3.60%) 126.55
squid 173296 ( 0.46%) 47695297 ( 0.18%) 275.22
smtp 269501 ( 0.71%) 110809453 ( 0.42%) 411.17
ftp 77283 ( 0.20%) 11306049 ( 0.04%) 146.29
pop3 17123 ( 0.05%) 7384399 ( 0.03%) 431.26
imap 4165 ( 0.01%) 1280928 ( 0.00%) 307.55
telnet 1772 ( 0.00%) 144809 ( 0.00%) 81.72
ssh 802771 ( 2.11%) 582110728 ( 2.19%) 725.13
dns 52255 ( 0.14%) 3608114 ( 0.01%) 69.05
bgp 163 ( 0.00%) 62492 ( 0.00%) 383.39
napster 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 27 ( 0.00%) 3563 ( 0.00%) 131.96
rtsp 41360 ( 0.11%) 50414127 ( 0.19%) 1218.91
icecast 73643 ( 0.19%) 54509562 ( 0.21%) 740.19
hotline 12 ( 0.00%) 742 ( 0.00%) 61.83
other 5953827 ( 15.68%) 4219139694 ( 15.87%) 708.64
udp 7360626 ( 19.39%) 3264534256 ( 12.28%) 443.51
dns 835255 ( 2.20%) 176647160 ( 0.66%) 211.49
realaud 979 ( 0.00%) 62692 ( 0.00%) 64.04
halflif 78 ( 0.00%) 18532 ( 0.00%) 237.59
starcra 91 ( 0.00%) 20188 ( 0.00%) 221.85
everque 5859 ( 0.02%) 1906081 ( 0.01%) 325.33
unreal 28 ( 0.00%) 4746 ( 0.00%) 169.50
quake 282 ( 0.00%) 53030 ( 0.00%) 188.05
cuseeme 5 ( 0.00%) 444 ( 0.00%) 88.80
other 6517735 ( 17.17%) 3085581967 ( 11.61%) 473.41
icmp 262538 ( 0.69%) 22587259 ( 0.08%) 86.03
ipip 172 ( 0.00%) 21304 ( 0.00%) 123.86
ipsec 1842 ( 0.00%) 1164124 ( 0.00%) 631.99
ip6 4141083 ( 10.91%) 2491237450 ( 9.37%) 601.59
other 1611 ( 0.00%) 202810 ( 0.00%) 125.89
frag 5296 ( 0.01%) 6738686 ( 0.03%) 1272.41
ip6 76689 ( 0.20%) 11022870 ( 0.04%) 143.73
tcp6 53767 ( 0.14%) 5568944 ( 0.02%) 103.58
http(s) 219 ( 0.00%) 196983 ( 0.00%) 899.47
http(c) 46794 ( 0.12%) 4191123 ( 0.02%) 89.57
smtp 206 ( 0.00%) 92006 ( 0.00%) 446.63
imap 391 ( 0.00%) 42423 ( 0.00%) 108.50
ssh 3509 ( 0.01%) 740974 ( 0.00%) 211.16
dns 208 ( 0.00%) 39885 ( 0.00%) 191.75
bgp 115 ( 0.00%) 16248 ( 0.00%) 141.29
other 2325 ( 0.01%) 249302 ( 0.00%) 107.23
udp6 17209 ( 0.05%) 4442222 ( 0.02%) 258.13
dns 16904 ( 0.04%) 4381501 ( 0.02%) 259.20
other 305 ( 0.00%) 60721 ( 0.00%) 199.09
icmp6 5489 ( 0.01%) 891144 ( 0.00%) 162.35
rtopt6 4 ( 0.00%) 560 ( 0.00%) 140.00
dstopt6 69 ( 0.00%) 9660 ( 0.00%) 140.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 121 ( 0.00%) 106260 ( 0.00%) 878.18
tcpdump file: 201006171400.dump.gz (981.74 MB)