Traffic Trace Info
DumpFile: 201006211400.dump
FileSize: 3201.71MB
Id: 201006211400
StartTime: Mon Jun 21 14:00:01 2010
EndTime: Mon Jun 21 14:15:01 2010
TotalTime: 900.40 seconds
TotalCapSize: -1583.63MB CapLen: 96 bytes
# of packets: 45176084 (28701.52MB)
AvgRate: 267.39Mbps stddev:24.32M
IP flow (unique src/dst pair) Information
# of flows: 2477020 (avg. 18.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.2% 1.6% 1.4% 0.9% 0.9% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 1341673
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.5% 6.6% 6.0% 4.5% 3.4% 3.3% 2.8% 2.6% 2.4%
# of IPv6 addresses: 1186
Top 10 bandwidth usage (bytes/total in %):
12.1% 10.9% 8.6% 5.9% 5.8% 5.5% 4.9% 4.3% 3.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006211400.pktlen.png)
detailed numbers
[ 32- 63]: 6944863
[ 64- 127]: 13457225
[ 128- 255]: 3083389
[ 256- 511]: 1702150
[ 512- 1023]: 1619417
[ 1024- 2047]: 18369040
Protocol Breakdown
![[protocol breakdown chart]](201006211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45176084 (100.00%) 30095720799 (100.00%) 666.19
ip 45150518 ( 99.94%) 30089535439 ( 99.98%) 666.43
tcp 29233026 ( 64.71%) 22204479315 ( 73.78%) 759.57
http(s) 9828027 ( 21.75%) 13059941717 ( 43.39%) 1328.85
http(c) 9583250 ( 21.21%) 1811341081 ( 6.02%) 189.01
squid 295583 ( 0.65%) 88121201 ( 0.29%) 298.13
smtp 314844 ( 0.70%) 127206802 ( 0.42%) 404.03
nntp 32 ( 0.00%) 2541 ( 0.00%) 79.41
ftp 25218 ( 0.06%) 8244330 ( 0.03%) 326.92
pop3 23489 ( 0.05%) 10749856 ( 0.04%) 457.65
imap 4400 ( 0.01%) 3045455 ( 0.01%) 692.15
telnet 2274 ( 0.01%) 313773 ( 0.00%) 137.98
ssh 261028 ( 0.58%) 26711601 ( 0.09%) 102.33
dns 68107 ( 0.15%) 4707062 ( 0.02%) 69.11
bgp 150 ( 0.00%) 53440 ( 0.00%) 356.27
napster 73 ( 0.00%) 7393 ( 0.00%) 101.27
realaud 241 ( 0.00%) 40598 ( 0.00%) 168.46
rtsp 9 ( 0.00%) 1512 ( 0.00%) 168.00
icecast 19869 ( 0.04%) 2400210 ( 0.01%) 120.80
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 8806415 ( 19.49%) 7061587814 ( 23.46%) 801.87
udp 11271714 ( 24.95%) 5789867255 ( 19.24%) 513.66
dns 1043565 ( 2.31%) 203489943 ( 0.68%) 194.99
realaud 57 ( 0.00%) 5622 ( 0.00%) 98.63
halflif 62837 ( 0.14%) 11488548 ( 0.04%) 182.83
starcra 194 ( 0.00%) 28431 ( 0.00%) 146.55
everque 11629 ( 0.03%) 9947381 ( 0.03%) 855.39
unreal 74 ( 0.00%) 11236 ( 0.00%) 151.84
quake 26 ( 0.00%) 3074 ( 0.00%) 118.23
cuseeme 10 ( 0.00%) 1327 ( 0.00%) 132.70
other 10137142 ( 22.44%) 5563710035 ( 18.49%) 548.84
icmp 996109 ( 2.20%) 85842104 ( 0.29%) 86.18
ipip 163 ( 0.00%) 20582 ( 0.00%) 126.27
ipsec 612 ( 0.00%) 123784 ( 0.00%) 202.26
ip6 3646788 ( 8.07%) 2008895727 ( 6.68%) 550.87
other 2106 ( 0.00%) 306672 ( 0.00%) 145.62
frag 85137 ( 0.19%) 66541817 ( 0.22%) 781.59
ip6 25566 ( 0.06%) 6185360 ( 0.02%) 241.94
tcp6 4246 ( 0.01%) 1500866 ( 0.00%) 353.48
http(s) 275 ( 0.00%) 266922 ( 0.00%) 970.63
http(c) 1189 ( 0.00%) 123825 ( 0.00%) 104.14
smtp 93 ( 0.00%) 26141 ( 0.00%) 281.09
pop3 60 ( 0.00%) 46102 ( 0.00%) 768.37
imap 68 ( 0.00%) 9103 ( 0.00%) 133.87
ssh 95 ( 0.00%) 19546 ( 0.00%) 205.75
dns 181 ( 0.00%) 25209 ( 0.00%) 139.28
bgp 116 ( 0.00%) 15828 ( 0.00%) 136.45
other 2169 ( 0.00%) 968190 ( 0.00%) 446.38
udp6 15607 ( 0.03%) 3861905 ( 0.01%) 247.45
dns 15096 ( 0.03%) 3764515 ( 0.01%) 249.37
other 511 ( 0.00%) 97390 ( 0.00%) 190.59
icmp6 5652 ( 0.01%) 791643 ( 0.00%) 140.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31 ( 0.00%) 26866 ( 0.00%) 866.65
tcpdump file: 201006211400.dump.gz (1167.65 MB)