Traffic Trace Info
DumpFile: 201006261400.dump
FileSize: 2442.82MB
Id: 201006261400
StartTime: Sat Jun 26 14:00:01 2010
EndTime: Sat Jun 26 14:15:01 2010
TotalTime: 899.71 seconds
TotalCapSize: 1906.51MB CapLen: 96 bytes
# of packets: 35147447 (22453.87MB)
AvgRate: 209.33Mbps stddev:16.20M
IP flow (unique src/dst pair) Information
# of flows: 841510 (avg. 41.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 3.1% 2.2% 1.9% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 471759
Top 10 bandwidth usage (bytes/total in %):
12.7% 8.7% 7.4% 6.5% 4.9% 4.1% 3.2% 3.1% 2.3% 2.3%
# of IPv6 addresses: 1071
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.3% 6.8% 6.0% 6.0% 5.8% 5.4% 5.3% 4.9% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006261400.pktlen.png)
detailed numbers
[ 32- 63]: 5548574
[ 64- 127]: 10250935
[ 128- 255]: 2234497
[ 256- 511]: 1527697
[ 512- 1023]: 966728
[ 1024- 2047]: 14619016
Protocol Breakdown
![[protocol breakdown chart]](201006261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35147447 (100.00%) 23544593402 (100.00%) 669.88
ip 35121784 ( 99.93%) 23539055232 ( 99.98%) 670.21
tcp 20682952 ( 58.85%) 16445824726 ( 69.85%) 795.14
http(s) 7977381 ( 22.70%) 10821178893 ( 45.96%) 1356.48
http(c) 5275280 ( 15.01%) 725412527 ( 3.08%) 137.51
squid 214244 ( 0.61%) 105692374 ( 0.45%) 493.33
smtp 236836 ( 0.67%) 40682385 ( 0.17%) 171.77
nntp 6 ( 0.00%) 388 ( 0.00%) 64.67
ftp 34736 ( 0.10%) 9076962 ( 0.04%) 261.31
pop3 11458 ( 0.03%) 4536428 ( 0.02%) 395.92
imap 2353 ( 0.01%) 951761 ( 0.00%) 404.49
telnet 17402 ( 0.05%) 1065762 ( 0.00%) 61.24
ssh 959196 ( 2.73%) 165636486 ( 0.70%) 172.68
dns 67192 ( 0.19%) 4630348 ( 0.02%) 68.91
bgp 162 ( 0.00%) 55302 ( 0.00%) 341.37
napster 21 ( 0.00%) 1559 ( 0.00%) 74.24
realaud 232 ( 0.00%) 26646 ( 0.00%) 114.85
rtsp 1282 ( 0.00%) 755802 ( 0.00%) 589.55
icecast 5226 ( 0.01%) 399926 ( 0.00%) 76.53
other 5879940 ( 16.73%) 4565720877 ( 19.39%) 776.49
udp 10504300 ( 29.89%) 5230176725 ( 22.21%) 497.91
dns 685302 ( 1.95%) 112454681 ( 0.48%) 164.10
realaud 8 ( 0.00%) 977 ( 0.00%) 122.12
halflif 518 ( 0.00%) 172768 ( 0.00%) 333.53
starcra 11653 ( 0.03%) 785501 ( 0.00%) 67.41
everque 487 ( 0.00%) 90061 ( 0.00%) 184.93
unreal 72 ( 0.00%) 7028 ( 0.00%) 97.61
quake 18 ( 0.00%) 1538 ( 0.00%) 85.44
cuseeme 4 ( 0.00%) 677 ( 0.00%) 169.25
other 9805933 ( 27.90%) 5116612496 ( 21.73%) 521.79
icmp 524121 ( 1.49%) 116745061 ( 0.50%) 222.74
ipip 330 ( 0.00%) 39680 ( 0.00%) 120.24
ipsec 615 ( 0.00%) 110498 ( 0.00%) 179.67
ip6 3406897 ( 9.69%) 1745688862 ( 7.41%) 512.40
other 2569 ( 0.01%) 469680 ( 0.00%) 182.83
frag 1182 ( 0.00%) 902070 ( 0.00%) 763.17
ip6 25663 ( 0.07%) 5538170 ( 0.02%) 215.80
tcp6 8663 ( 0.02%) 1805408 ( 0.01%) 208.40
http(s) 642 ( 0.00%) 673298 ( 0.00%) 1048.75
http(c) 1485 ( 0.00%) 148322 ( 0.00%) 99.88
smtp 137 ( 0.00%) 41959 ( 0.00%) 306.27
ftp 25 ( 0.00%) 2236 ( 0.00%) 89.44
imap 304 ( 0.00%) 35038 ( 0.00%) 115.26
ssh 1854 ( 0.01%) 334612 ( 0.00%) 180.48
dns 58 ( 0.00%) 18062 ( 0.00%) 311.41
bgp 117 ( 0.00%) 16626 ( 0.00%) 142.10
other 4041 ( 0.01%) 535255 ( 0.00%) 132.46
udp6 12188 ( 0.03%) 3009501 ( 0.01%) 246.92
dns 11949 ( 0.03%) 2976126 ( 0.01%) 249.07
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 238 ( 0.00%) 33268 ( 0.00%) 139.78
icmp6 4707 ( 0.01%) 646673 ( 0.00%) 137.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 75 ( 0.00%) 72508 ( 0.00%) 966.77
tcpdump file: 201006261400.dump.gz (899.40 MB)