Traffic Trace Info
DumpFile: 201006231400.dump
FileSize: 3145.91MB
Id: 201006231400
StartTime: Wed Jun 23 14:00:01 2010
EndTime: Wed Jun 23 14:15:01 2010
TotalTime: 900.75 seconds
TotalCapSize: -1630.50MB CapLen: 96 bytes
# of packets: 44590676 (28502.58MB)
AvgRate: 265.47Mbps stddev:19.73M
IP flow (unique src/dst pair) Information
# of flows: 1254181 (avg. 35.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.8% 1.7% 1.5% 1.3% 1.2% 1.1% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 515724
Top 10 bandwidth usage (bytes/total in %):
11.9% 9.7% 3.2% 2.9% 2.8% 2.8% 2.7% 2.4% 2.3% 2.3%
# of IPv6 addresses: 1195
Top 10 bandwidth usage (bytes/total in %):
96.6% 96.6% 0.3% 0.3% 0.3% 0.2% 0.2% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006231400.pktlen.png)
detailed numbers
[ 32- 63]: 7641133
[ 64- 127]: 11979886
[ 128- 255]: 3192187
[ 256- 511]: 1890348
[ 512- 1023]: 1546961
[ 1024- 2047]: 18340161
Protocol Breakdown
![[protocol breakdown chart]](201006231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44590676 (100.00%) 29887117376 (100.00%) 670.25
ip 44417207 ( 99.61%) 29658407266 ( 99.23%) 667.72
tcp 27241761 ( 61.09%) 20112591127 ( 67.30%) 738.30
http(s) 11110871 ( 24.92%) 14855253998 ( 49.70%) 1337.00
http(c) 9260469 ( 20.77%) 1161193373 ( 3.89%) 125.39
squid 441299 ( 0.99%) 306320800 ( 1.02%) 694.13
smtp 340472 ( 0.76%) 106935978 ( 0.36%) 314.08
nntp 161 ( 0.00%) 12007 ( 0.00%) 74.58
ftp 31706 ( 0.07%) 10660757 ( 0.04%) 336.24
pop3 23003 ( 0.05%) 13052989 ( 0.04%) 567.45
imap 3484 ( 0.01%) 1774134 ( 0.01%) 509.22
telnet 237681 ( 0.53%) 17436149 ( 0.06%) 73.36
ssh 272333 ( 0.61%) 34428855 ( 0.12%) 126.42
dns 72795 ( 0.16%) 5004619 ( 0.02%) 68.75
bgp 166 ( 0.00%) 72153 ( 0.00%) 434.66
napster 102 ( 0.00%) 25237 ( 0.00%) 247.42
realaud 94 ( 0.00%) 10847 ( 0.00%) 115.39
rtsp 17242 ( 0.04%) 15932848 ( 0.05%) 924.07
icecast 96513 ( 0.22%) 55459980 ( 0.19%) 574.64
other 5333364 ( 11.96%) 3529016043 ( 11.81%) 661.69
udp 11802090 ( 26.47%) 6629775009 ( 22.18%) 561.75
dns 982534 ( 2.20%) 188185069 ( 0.63%) 191.53
realaud 32 ( 0.00%) 5312 ( 0.00%) 166.00
halflif 1646 ( 0.00%) 738975 ( 0.00%) 448.95
starcra 43 ( 0.00%) 5927 ( 0.00%) 137.84
everque 5632 ( 0.01%) 1104704 ( 0.00%) 196.15
unreal 302 ( 0.00%) 28195 ( 0.00%) 93.36
quake 29 ( 0.00%) 3356 ( 0.00%) 115.72
cuseeme 2 ( 0.00%) 179 ( 0.00%) 89.50
other 10811643 ( 24.25%) 6439584501 ( 21.55%) 595.62
icmp 441065 ( 0.99%) 38096655 ( 0.13%) 86.37
ipip 161 ( 0.00%) 20526 ( 0.00%) 127.49
ipsec 770 ( 0.00%) 225292 ( 0.00%) 292.59
ip6 4923640 ( 11.04%) 2875828959 ( 9.62%) 584.09
other 7720 ( 0.02%) 1869698 ( 0.01%) 242.19
frag 1868 ( 0.00%) 2022539 ( 0.01%) 1082.73
ip6 173469 ( 0.39%) 228710110 ( 0.77%) 1318.45
tcp6 154039 ( 0.35%) 224332811 ( 0.75%) 1456.34
http(s) 147727 ( 0.33%) 223293953 ( 0.75%) 1511.53
http(c) 1863 ( 0.00%) 191294 ( 0.00%) 102.68
smtp 107 ( 0.00%) 39226 ( 0.00%) 366.60
ftp 48 ( 0.00%) 4419 ( 0.00%) 92.06
imap 261 ( 0.00%) 31746 ( 0.00%) 121.63
ssh 1925 ( 0.00%) 417222 ( 0.00%) 216.74
dns 163 ( 0.00%) 25901 ( 0.00%) 158.90
bgp 112 ( 0.00%) 14637 ( 0.00%) 130.69
other 1833 ( 0.00%) 314413 ( 0.00%) 171.53
udp6 13580 ( 0.03%) 3413511 ( 0.01%) 251.36
dns 12982 ( 0.03%) 3322180 ( 0.01%) 255.91
other 598 ( 0.00%) 91331 ( 0.00%) 152.73
icmp6 5752 ( 0.01%) 896228 ( 0.00%) 155.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 68 ( 0.00%) 63480 ( 0.00%) 933.53
tcpdump file: 201006231400.dump.gz (1152.42 MB)