Traffic Trace Info
DumpFile: 201006221400.dump
FileSize: 3413.63MB
Id: 201006221400
StartTime: Tue Jun 22 14:00:01 2010
EndTime: Tue Jun 22 14:15:01 2010
TotalTime: 899.80 seconds
TotalCapSize: -1406.00MB CapLen: 96 bytes
# of packets: 47422815 (31848.87MB)
AvgRate: 296.94Mbps stddev:22.95M
IP flow (unique src/dst pair) Information
# of flows: 1184292 (avg. 40.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.8% 1.8% 1.8% 1.7% 1.7% 1.3% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 698596
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.4% 9.1% 8.4% 6.0% 2.5% 2.3% 1.9% 1.9% 1.9%
# of IPv6 addresses: 1166
Top 10 bandwidth usage (bytes/total in %):
63.6% 37.4% 26.2% 3.7% 2.4% 2.3% 2.2% 2.1% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006221400.pktlen.png)
detailed numbers
[ 32- 63]: 6347915
[ 64- 127]: 14180074
[ 128- 255]: 2882558
[ 256- 511]: 1900059
[ 512- 1023]: 1497311
[ 1024- 2047]: 20614898
Protocol Breakdown
![[protocol breakdown chart]](201006221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47422815 (100.00%) 33395958262 (100.00%) 704.22
ip 47389596 ( 99.93%) 33380040005 ( 99.95%) 704.37
tcp 30272845 ( 63.84%) 23931518205 ( 71.66%) 790.53
http(s) 12922834 ( 27.25%) 17752040560 ( 53.16%) 1373.70
http(c) 9380761 ( 19.78%) 1379616691 ( 4.13%) 147.07
squid 814696 ( 1.72%) 643276460 ( 1.93%) 789.59
smtp 308505 ( 0.65%) 143287270 ( 0.43%) 464.46
nntp 139 ( 0.00%) 10002 ( 0.00%) 71.96
ftp 24922 ( 0.05%) 8474288 ( 0.03%) 340.03
pop3 11645 ( 0.02%) 2360930 ( 0.01%) 202.74
imap 68699 ( 0.14%) 67175043 ( 0.20%) 977.82
telnet 1394 ( 0.00%) 103795 ( 0.00%) 74.46
ssh 534803 ( 1.13%) 84123088 ( 0.25%) 157.30
dns 72930 ( 0.15%) 5055628 ( 0.02%) 69.32
bgp 182 ( 0.00%) 65979 ( 0.00%) 362.52
napster 40 ( 0.00%) 3575 ( 0.00%) 89.38
realaud 45 ( 0.00%) 3598 ( 0.00%) 79.96
rtsp 7063 ( 0.01%) 7743679 ( 0.02%) 1096.37
icecast 12452 ( 0.03%) 854912 ( 0.00%) 68.66
hotline 14 ( 0.00%) 1216 ( 0.00%) 86.86
other 6111721 ( 12.89%) 3837321491 ( 11.49%) 627.86
udp 11956341 ( 25.21%) 6579845639 ( 19.70%) 550.32
dns 996398 ( 2.10%) 195257727 ( 0.58%) 195.96
realaud 864 ( 0.00%) 54472 ( 0.00%) 63.05
halflif 205 ( 0.00%) 65480 ( 0.00%) 319.41
starcra 48 ( 0.00%) 5719 ( 0.00%) 119.15
everque 25953 ( 0.05%) 23293468 ( 0.07%) 897.53
unreal 30 ( 0.00%) 4378 ( 0.00%) 145.93
quake 29 ( 0.00%) 2790 ( 0.00%) 96.21
cuseeme 20 ( 0.00%) 1592 ( 0.00%) 79.60
other 10932093 ( 23.05%) 6360522294 ( 19.05%) 581.82
icmp 387559 ( 0.82%) 33967411 ( 0.10%) 87.64
ipip 162 ( 0.00%) 20340 ( 0.00%) 125.56
ipsec 588 ( 0.00%) 145192 ( 0.00%) 246.93
ip6 4769309 ( 10.06%) 2833843669 ( 8.49%) 594.18
other 2792 ( 0.01%) 699549 ( 0.00%) 250.55
frag 16290 ( 0.03%) 21454803 ( 0.06%) 1317.05
ip6 33219 ( 0.07%) 15918257 ( 0.05%) 479.19
tcp6 14479 ( 0.03%) 11589328 ( 0.03%) 800.42
http(s) 128 ( 0.00%) 131805 ( 0.00%) 1029.73
http(c) 1474 ( 0.00%) 172465 ( 0.00%) 117.00
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 217 ( 0.00%) 46058 ( 0.00%) 212.25
ftp 20 ( 0.00%) 1794 ( 0.00%) 89.70
imap 250 ( 0.00%) 29031 ( 0.00%) 116.12
ssh 1868 ( 0.00%) 336176 ( 0.00%) 179.97
dns 168 ( 0.00%) 25423 ( 0.00%) 151.33
bgp 113 ( 0.00%) 14752 ( 0.00%) 130.55
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 10238 ( 0.02%) 10831602 ( 0.03%) 1057.98
udp6 13379 ( 0.03%) 3437828 ( 0.01%) 256.96
dns 12432 ( 0.03%) 3300517 ( 0.01%) 265.49
realaud 2 ( 0.00%) 220 ( 0.00%) 110.00
other 945 ( 0.00%) 137091 ( 0.00%) 145.07
icmp6 5275 ( 0.01%) 836198 ( 0.00%) 158.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 55 ( 0.00%) 50687 ( 0.00%) 921.58
tcpdump file: 201006221400.dump.gz (1221.29 MB)