Traffic Trace Info
DumpFile: 201006181400.dump
FileSize: 2947.49MB
Id: 201006181400
StartTime: Fri Jun 18 14:00:01 2010
EndTime: Fri Jun 18 14:15:01 2010
TotalTime: 900.32 seconds
TotalCapSize: -1795.51MB CapLen: 96 bytes
# of packets: 42397118 (27220.89MB)
AvgRate: 253.63Mbps stddev:24.21M
IP flow (unique src/dst pair) Information
# of flows: 1066125 (avg. 39.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.7% 1.5% 1.5% 1.2% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 620441
Top 10 bandwidth usage (bytes/total in %):
13.7% 7.3% 3.8% 3.8% 3.2% 2.6% 2.6% 2.6% 2.5% 2.0%
# of IPv6 addresses: 1211
Top 10 bandwidth usage (bytes/total in %):
13.4% 8.2% 7.7% 6.8% 6.8% 6.6% 5.7% 5.5% 5.3% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006181400.pktlen.png)
detailed numbers
[ 32- 63]: 7216200
[ 64- 127]: 11432391
[ 128- 255]: 2829461
[ 256- 511]: 1873465
[ 512- 1023]: 1223806
[ 1024- 2047]: 17821795
Protocol Breakdown
![[protocol breakdown chart]](201006181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42397118 (100.00%) 28543168386 (100.00%) 673.23
ip 42363778 ( 99.92%) 28535108192 ( 99.97%) 673.57
tcp 25084343 ( 59.17%) 19136628166 ( 67.04%) 762.89
http(s) 10066807 ( 23.74%) 13389904718 ( 46.91%) 1330.10
http(c) 8155597 ( 19.24%) 1430148731 ( 5.01%) 175.36
squid 304302 ( 0.72%) 64908798 ( 0.23%) 213.30
smtp 315254 ( 0.74%) 110074218 ( 0.39%) 349.16
nntp 149 ( 0.00%) 11608 ( 0.00%) 77.91
ftp 34952 ( 0.08%) 3213500 ( 0.01%) 91.94
pop3 24247 ( 0.06%) 18876876 ( 0.07%) 778.52
imap 4335 ( 0.01%) 1532654 ( 0.01%) 353.55
telnet 955 ( 0.00%) 72915 ( 0.00%) 76.35
ssh 400195 ( 0.94%) 76603233 ( 0.27%) 191.41
dns 70618 ( 0.17%) 4900220 ( 0.02%) 69.39
bgp 187 ( 0.00%) 87030 ( 0.00%) 465.40
napster 112 ( 0.00%) 11959 ( 0.00%) 106.78
realaud 237 ( 0.00%) 20261 ( 0.00%) 85.49
rtsp 6587 ( 0.02%) 7700492 ( 0.03%) 1169.04
icecast 2406 ( 0.01%) 1350205 ( 0.00%) 561.18
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 5697399 ( 13.44%) 4027210502 ( 14.11%) 706.85
udp 13061039 ( 30.81%) 7253401927 ( 25.41%) 555.35
dns 955054 ( 2.25%) 191015357 ( 0.67%) 200.00
realaud 21 ( 0.00%) 2189 ( 0.00%) 104.24
halflif 162612 ( 0.38%) 36546222 ( 0.13%) 224.74
starcra 66 ( 0.00%) 8163 ( 0.00%) 123.68
everque 474 ( 0.00%) 102026 ( 0.00%) 215.24
unreal 39 ( 0.00%) 6047 ( 0.00%) 155.05
quake 25 ( 0.00%) 2859 ( 0.00%) 114.36
cuseeme 20 ( 0.00%) 2274 ( 0.00%) 113.70
other 11942305 ( 28.17%) 7025380326 ( 24.61%) 588.28
icmp 395784 ( 0.93%) 33910008 ( 0.12%) 85.68
ipip 174 ( 0.00%) 21920 ( 0.00%) 125.98
ipsec 762 ( 0.00%) 223828 ( 0.00%) 293.74
ip6 3810894 ( 8.99%) 2106536294 ( 7.38%) 552.77
other 10782 ( 0.03%) 4386049 ( 0.02%) 406.79
frag 10927 ( 0.03%) 14096891 ( 0.05%) 1290.10
ip6 33340 ( 0.08%) 8060194 ( 0.03%) 241.76
tcp6 12143 ( 0.03%) 3258789 ( 0.01%) 268.37
http(s) 893 ( 0.00%) 848508 ( 0.00%) 950.18
http(c) 1511 ( 0.00%) 162137 ( 0.00%) 107.30
smtp 130 ( 0.00%) 48085 ( 0.00%) 369.88
imap 321 ( 0.00%) 36342 ( 0.00%) 113.21
ssh 1842 ( 0.00%) 338732 ( 0.00%) 183.89
dns 203 ( 0.00%) 38625 ( 0.00%) 190.27
bgp 125 ( 0.00%) 20398 ( 0.00%) 163.18
other 7118 ( 0.02%) 1765962 ( 0.01%) 248.10
udp6 15858 ( 0.04%) 3912054 ( 0.01%) 246.69
dns 15388 ( 0.04%) 3843166 ( 0.01%) 249.75
other 470 ( 0.00%) 68888 ( 0.00%) 146.57
icmp6 5157 ( 0.01%) 794249 ( 0.00%) 154.01
dstopt6 64 ( 0.00%) 8960 ( 0.00%) 140.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 87 ( 0.00%) 81926 ( 0.00%) 941.68
tcpdump file: 201006181400.dump.gz (1083.87 MB)