Traffic Trace Info
DumpFile: 201006201400.dump
FileSize: 1948.26MB
Id: 201006201400
StartTime: Sun Jun 20 14:00:01 2010
EndTime: Sun Jun 20 14:15:01 2010
TotalTime: 899.97 seconds
TotalCapSize: 1531.59MB CapLen: 96 bytes
# of packets: 27303593 (17803.09MB)
AvgRate: 165.94Mbps stddev:11.18M
IP flow (unique src/dst pair) Information
# of flows: 807726 (avg. 33.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.2% 1.6% 1.6% 1.0% 1.0% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 467783
Top 10 bandwidth usage (bytes/total in %):
14.8% 10.6% 7.4% 6.3% 5.6% 5.6% 3.5% 2.4% 2.3% 2.3%
# of IPv6 addresses: 964
Top 10 bandwidth usage (bytes/total in %):
34.4% 34.2% 20.5% 20.5% 12.9% 12.9% 5.1% 2.8% 1.9% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006201400.pktlen.png)
detailed numbers
[ 32- 63]: 3969673
[ 64- 127]: 7815620
[ 128- 255]: 1726661
[ 256- 511]: 1461237
[ 512- 1023]: 911828
[ 1024- 2047]: 11418574
Protocol Breakdown
![[protocol breakdown chart]](201006201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27303593 (100.00%) 18667889352 (100.00%) 683.72
ip 27231515 ( 99.74%) 18657416914 ( 99.94%) 685.14
tcp 15832037 ( 57.99%) 13015971800 ( 69.72%) 822.13
http(s) 6635161 ( 24.30%) 9012228930 ( 48.28%) 1358.25
http(c) 3818565 ( 13.99%) 411471024 ( 2.20%) 107.76
squid 269318 ( 0.99%) 113439841 ( 0.61%) 421.21
smtp 194214 ( 0.71%) 51659621 ( 0.28%) 265.99
ftp 18589 ( 0.07%) 4425885 ( 0.02%) 238.09
pop3 4624 ( 0.02%) 2579115 ( 0.01%) 557.77
imap 1125 ( 0.00%) 143357 ( 0.00%) 127.43
telnet 1208 ( 0.00%) 87985 ( 0.00%) 72.84
ssh 225292 ( 0.83%) 25028047 ( 0.13%) 111.09
dns 83147 ( 0.30%) 5645282 ( 0.03%) 67.90
bgp 130 ( 0.00%) 41620 ( 0.00%) 320.15
napster 106 ( 0.00%) 26173 ( 0.00%) 246.92
realaud 166 ( 0.00%) 30682 ( 0.00%) 184.83
rtsp 23672 ( 0.09%) 16098423 ( 0.09%) 680.06
icecast 749 ( 0.00%) 61010 ( 0.00%) 81.46
other 4555971 ( 16.69%) 3373004805 ( 18.07%) 740.35
udp 7570004 ( 27.73%) 3619451040 ( 19.39%) 478.13
dns 640801 ( 2.35%) 112411761 ( 0.60%) 175.42
rip 11 ( 0.00%) 825 ( 0.00%) 75.00
realaud 855 ( 0.00%) 52878 ( 0.00%) 61.85
halflif 8626 ( 0.03%) 2641391 ( 0.01%) 306.21
starcra 53 ( 0.00%) 9057 ( 0.00%) 170.89
everque 418 ( 0.00%) 83379 ( 0.00%) 199.47
unreal 30 ( 0.00%) 4835 ( 0.00%) 161.17
quake 30 ( 0.00%) 3195 ( 0.00%) 106.50
cuseeme 4 ( 0.00%) 348 ( 0.00%) 87.00
other 6918903 ( 25.34%) 3504100252 ( 18.77%) 506.45
icmp 408897 ( 1.50%) 37001842 ( 0.20%) 90.49
ipip 149 ( 0.00%) 18818 ( 0.00%) 126.30
ipsec 586 ( 0.00%) 105740 ( 0.00%) 180.44
ip6 3414916 ( 12.51%) 1982961299 ( 10.62%) 580.68
other 4926 ( 0.02%) 1906375 ( 0.01%) 387.00
frag 7093 ( 0.03%) 9107683 ( 0.05%) 1284.04
ip6 72078 ( 0.26%) 10472438 ( 0.06%) 145.29
tcp6 57592 ( 0.21%) 7459412 ( 0.04%) 129.52
http(s) 48 ( 0.00%) 24961 ( 0.00%) 520.02
http(c) 48782 ( 0.18%) 3728826 ( 0.02%) 76.44
smtp 12 ( 0.00%) 1407 ( 0.00%) 117.25
imap 363 ( 0.00%) 42210 ( 0.00%) 116.28
ssh 6 ( 0.00%) 868 ( 0.00%) 144.67
dns 90 ( 0.00%) 16176 ( 0.00%) 179.73
bgp 119 ( 0.00%) 17551 ( 0.00%) 147.49
other 8172 ( 0.03%) 3627413 ( 0.02%) 443.88
udp6 10001 ( 0.04%) 2278685 ( 0.01%) 227.85
dns 9645 ( 0.04%) 2227108 ( 0.01%) 230.91
other 356 ( 0.00%) 51577 ( 0.00%) 144.88
icmp6 4440 ( 0.02%) 721168 ( 0.00%) 162.43
rtopt6 4 ( 0.00%) 560 ( 0.00%) 140.00
dstopt6 1 ( 0.00%) 140 ( 0.00%) 140.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8393 ( 0.00%) 839.30
tcpdump file: 201006201400.dump.gz (702.27 MB)