Traffic Trace Info
DumpFile: 201006251400.dump
FileSize: 2884.84MB
Id: 201006251400
StartTime: Fri Jun 25 14:00:01 2010
EndTime: Fri Jun 25 14:15:00 2010
TotalTime: 899.51 seconds
TotalCapSize: -1830.66MB CapLen: 96 bytes
# of packets: 40599043 (26373.05MB)
AvgRate: 245.94Mbps stddev:26.12M
IP flow (unique src/dst pair) Information
# of flows: 943616 (avg. 43.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.8% 1.6% 1.5% 1.3% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 490923
Top 10 bandwidth usage (bytes/total in %):
13.1% 7.8% 3.8% 3.4% 3.0% 3.0% 2.8% 2.8% 2.8% 2.7%
# of IPv6 addresses: 1160
Top 10 bandwidth usage (bytes/total in %):
37.2% 37.1% 20.3% 20.3% 14.4% 13.0% 2.8% 2.2% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006251400.pktlen.png)
detailed numbers
[ 32- 63]: 6717726
[ 64- 127]: 11044716
[ 128- 255]: 2740624
[ 256- 511]: 1749079
[ 512- 1023]: 1344114
[ 1024- 2047]: 17002784
Protocol Breakdown
![[protocol breakdown chart]](201006251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40599043 (100.00%) 27654152209 (100.00%) 681.15
ip 40467312 ( 99.68%) 27631554139 ( 99.92%) 682.81
tcp 26755557 ( 65.90%) 20129784877 ( 72.79%) 752.36
http(s) 10543946 ( 25.97%) 13963979379 ( 50.50%) 1324.36
http(c) 8120740 ( 20.00%) 1190862958 ( 4.31%) 146.64
squid 564305 ( 1.39%) 384765709 ( 1.39%) 681.84
smtp 316284 ( 0.78%) 96767108 ( 0.35%) 305.95
nntp 75 ( 0.00%) 5619 ( 0.00%) 74.92
ftp 31608 ( 0.08%) 7980594 ( 0.03%) 252.49
pop3 15020 ( 0.04%) 4537589 ( 0.02%) 302.10
imap 2806 ( 0.01%) 623276 ( 0.00%) 222.12
telnet 760 ( 0.00%) 62890 ( 0.00%) 82.75
ssh 1363101 ( 3.36%) 210662212 ( 0.76%) 154.55
dns 74102 ( 0.18%) 5138503 ( 0.02%) 69.34
bgp 181 ( 0.00%) 77045 ( 0.00%) 425.66
napster 5 ( 0.00%) 940 ( 0.00%) 188.00
realaud 127 ( 0.00%) 12929 ( 0.00%) 101.80
rtsp 14883 ( 0.04%) 21823536 ( 0.08%) 1466.34
icecast 27045 ( 0.07%) 23143529 ( 0.08%) 855.74
hotline 216 ( 0.00%) 14998 ( 0.00%) 69.44
other 5680352 ( 13.99%) 4219326003 ( 15.26%) 742.79
udp 9488068 ( 23.37%) 5176536403 ( 18.72%) 545.58
dns 830525 ( 2.05%) 138037544 ( 0.50%) 166.21
realaud 32 ( 0.00%) 4052 ( 0.00%) 126.62
halflif 254 ( 0.00%) 73045 ( 0.00%) 287.58
starcra 42 ( 0.00%) 6001 ( 0.00%) 142.88
everque 762 ( 0.00%) 138855 ( 0.00%) 182.22
unreal 63 ( 0.00%) 10614 ( 0.00%) 168.48
quake 20 ( 0.00%) 4145 ( 0.00%) 207.25
cuseeme 8 ( 0.00%) 1052 ( 0.00%) 131.50
other 8656101 ( 21.32%) 5038178148 ( 18.22%) 582.04
icmp 451786 ( 1.11%) 94432648 ( 0.34%) 209.02
ipip 358 ( 0.00%) 45406 ( 0.00%) 126.83
ipsec 461 ( 0.00%) 86958 ( 0.00%) 188.63
ip6 3714588 ( 9.15%) 2174058390 ( 7.86%) 585.28
other 56494 ( 0.14%) 56609457 ( 0.20%) 1002.04
frag 1343 ( 0.00%) 1330660 ( 0.00%) 990.81
ip6 131731 ( 0.32%) 22598070 ( 0.08%) 171.55
tcp6 105419 ( 0.26%) 12928117 ( 0.05%) 122.64
http(s) 669 ( 0.00%) 797501 ( 0.00%) 1192.08
http(c) 920 ( 0.00%) 98396 ( 0.00%) 106.95
smtp 237 ( 0.00%) 86272 ( 0.00%) 364.02
ftp 47 ( 0.00%) 4241 ( 0.00%) 90.23
imap 447 ( 0.00%) 52246 ( 0.00%) 116.88
ssh 6331 ( 0.02%) 3263906 ( 0.01%) 515.54
dns 184 ( 0.00%) 43273 ( 0.00%) 235.18
bgp 111 ( 0.00%) 14491 ( 0.00%) 130.55
other 96473 ( 0.24%) 8567791 ( 0.03%) 88.81
udp6 19161 ( 0.05%) 7218135 ( 0.03%) 376.71
dns 14453 ( 0.04%) 4319603 ( 0.02%) 298.87
other 4708 ( 0.01%) 2898532 ( 0.01%) 615.66
icmp6 4020 ( 0.01%) 592116 ( 0.00%) 147.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3100 ( 0.01%) 1855486 ( 0.01%) 598.54
tcpdump file: 201006251400.dump.gz (1046.80 MB)