Traffic Trace Info
DumpFile: 201006241400.dump
FileSize: 2856.66MB
Id: 201006241400
StartTime: Thu Jun 24 14:00:01 2010
EndTime: Thu Jun 24 14:15:01 2010
TotalTime: 900.32 seconds
TotalCapSize: -1858.19MB CapLen: 96 bytes
# of packets: 40556389 (24970.56MB)
AvgRate: 232.67Mbps stddev:15.64M
IP flow (unique src/dst pair) Information
# of flows: 1087490 (avg. 37.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.8% 1.6% 1.3% 1.1% 1.1% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 586482
Top 10 bandwidth usage (bytes/total in %):
13.0% 9.8% 4.6% 3.8% 3.6% 3.0% 2.9% 2.8% 2.6% 2.5%
# of IPv6 addresses: 1241
Top 10 bandwidth usage (bytes/total in %):
77.4% 73.2% 5.6% 5.6% 4.3% 1.9% 1.8% 1.3% 1.1% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006241400.pktlen.png)
detailed numbers
[ 32- 63]: 7316267
[ 64- 127]: 11000563
[ 128- 255]: 3182817
[ 256- 511]: 1812582
[ 512- 1023]: 1297110
[ 1024- 2047]: 15947050
Protocol Breakdown
![[protocol breakdown chart]](201006241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40556389 (100.00%) 26183525972 (100.00%) 645.61
ip 40188408 ( 99.09%) 26145111829 ( 99.85%) 650.56
tcp 24562825 ( 60.56%) 17707946117 ( 67.63%) 720.92
http(s) 9789289 ( 24.14%) 12932048465 ( 49.39%) 1321.04
http(c) 8004646 ( 19.74%) 1308251719 ( 5.00%) 163.44
squid 241413 ( 0.60%) 137036084 ( 0.52%) 567.64
smtp 344322 ( 0.85%) 105824861 ( 0.40%) 307.34
nntp 30 ( 0.00%) 2738 ( 0.00%) 91.27
ftp 26764 ( 0.07%) 8607527 ( 0.03%) 321.61
pop3 16189 ( 0.04%) 4050492 ( 0.02%) 250.20
imap 3522 ( 0.01%) 670767 ( 0.00%) 190.45
telnet 4385 ( 0.01%) 1591767 ( 0.01%) 363.00
ssh 1046347 ( 2.58%) 138595937 ( 0.53%) 132.46
dns 68914 ( 0.17%) 6032829 ( 0.02%) 87.54
bgp 156 ( 0.00%) 69675 ( 0.00%) 446.63
napster 37 ( 0.00%) 5023 ( 0.00%) 135.76
realaud 125 ( 0.00%) 17913 ( 0.00%) 143.30
icecast 69345 ( 0.17%) 50562923 ( 0.19%) 729.15
hotline 13 ( 0.00%) 2054 ( 0.00%) 158.00
other 4947307 ( 12.20%) 3014574083 ( 11.51%) 609.34
udp 10792791 ( 26.61%) 5804023906 ( 22.17%) 537.77
dns 974602 ( 2.40%) 193554204 ( 0.74%) 198.60
realaud 16 ( 0.00%) 2146 ( 0.00%) 134.12
halflif 233 ( 0.00%) 49408 ( 0.00%) 212.05
starcra 48 ( 0.00%) 9789 ( 0.00%) 203.94
everque 539 ( 0.00%) 109528 ( 0.00%) 203.21
unreal 28 ( 0.00%) 3921 ( 0.00%) 140.04
quake 17 ( 0.00%) 1808 ( 0.00%) 106.35
cuseeme 8 ( 0.00%) 712 ( 0.00%) 89.00
other 9815878 ( 24.20%) 5610152361 ( 21.43%) 571.54
icmp 450859 ( 1.11%) 38681613 ( 0.15%) 85.80
ipip 170 ( 0.00%) 22092 ( 0.00%) 129.95
ipsec 527 ( 0.00%) 97386 ( 0.00%) 184.79
ip6 4375609 ( 10.79%) 2593152162 ( 9.90%) 592.64
other 5627 ( 0.01%) 1188553 ( 0.00%) 211.22
frag 8466 ( 0.02%) 6702693 ( 0.03%) 791.72
ip6 367981 ( 0.91%) 38414143 ( 0.15%) 104.39
tcp6 347715 ( 0.86%) 33764644 ( 0.13%) 97.10
http(s) 332 ( 0.00%) 405573 ( 0.00%) 1221.61
http(c) 1275 ( 0.00%) 143516 ( 0.00%) 112.56
smtp 275 ( 0.00%) 82910 ( 0.00%) 301.49
ftp 24 ( 0.00%) 2156 ( 0.00%) 89.83
imap 275 ( 0.00%) 32709 ( 0.00%) 118.94
ssh 4806 ( 0.01%) 2147908 ( 0.01%) 446.92
dns 141 ( 0.00%) 19040 ( 0.00%) 135.04
bgp 120 ( 0.00%) 15885 ( 0.00%) 132.38
other 340467 ( 0.84%) 30914947 ( 0.12%) 90.80
udp6 15206 ( 0.04%) 3894932 ( 0.01%) 256.14
dns 13493 ( 0.03%) 3526109 ( 0.01%) 261.33
other 1713 ( 0.00%) 368823 ( 0.00%) 215.31
icmp6 4958 ( 0.01%) 682046 ( 0.00%) 137.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 72 ( 0.00%) 68441 ( 0.00%) 950.57
tcpdump file: 201006241400.dump.gz (1039.47 MB)