Traffic Trace Info
DumpFile: 201006271400.dump
FileSize: 2234.06MB
Id: 201006271400
StartTime: Sun Jun 27 14:00:01 2010
EndTime: Sun Jun 27 14:15:00 2010
TotalTime: 899.56 seconds
TotalCapSize: 1756.87MB CapLen: 96 bytes
# of packets: 31272445 (21509.89MB)
AvgRate: 200.58Mbps stddev:15.17M
IP flow (unique src/dst pair) Information
# of flows: 800455 (avg. 39.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 2.5% 2.1% 1.9% 1.9% 1.8% 1.7% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 464139
Top 10 bandwidth usage (bytes/total in %):
15.5% 12.4% 9.7% 8.4% 6.4% 5.7% 3.6% 2.6% 2.4% 2.1%
# of IPv6 addresses: 1039
Top 10 bandwidth usage (bytes/total in %):
16.1% 7.4% 6.7% 6.7% 6.3% 5.9% 5.5% 3.8% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006271400.pktlen.png)
detailed numbers
[ 32- 63]: 4046100
[ 64- 127]: 9136576
[ 128- 255]: 1870355
[ 256- 511]: 1352487
[ 512- 1023]: 758401
[ 1024- 2047]: 14108526
Protocol Breakdown
![[protocol breakdown chart]](201006271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31272445 (100.00%) 22554754871 (100.00%) 721.23
ip 31250435 ( 99.93%) 22549746290 ( 99.98%) 721.58
tcp 19468601 ( 62.25%) 16734209768 ( 74.19%) 859.55
http(s) 9647057 ( 30.85%) 13255068341 ( 58.77%) 1374.00
http(c) 5324193 ( 17.03%) 1015722871 ( 4.50%) 190.77
squid 130751 ( 0.42%) 60605564 ( 0.27%) 463.52
smtp 207308 ( 0.66%) 41889072 ( 0.19%) 202.06
ftp 33058 ( 0.11%) 8712108 ( 0.04%) 263.54
pop3 6613 ( 0.02%) 3579225 ( 0.02%) 541.24
imap 2960 ( 0.01%) 578164 ( 0.00%) 195.33
telnet 2777 ( 0.01%) 197893 ( 0.00%) 71.26
ssh 765409 ( 2.45%) 111812471 ( 0.50%) 146.08
dns 65628 ( 0.21%) 4536118 ( 0.02%) 69.12
bgp 143 ( 0.00%) 57451 ( 0.00%) 401.76
napster 5390 ( 0.02%) 4983791 ( 0.02%) 924.64
realaud 519 ( 0.00%) 548855 ( 0.00%) 1057.52
rtsp 57 ( 0.00%) 12746 ( 0.00%) 223.61
icecast 1095 ( 0.00%) 109378 ( 0.00%) 99.89
hotline 10 ( 0.00%) 1459 ( 0.00%) 145.90
other 3275629 ( 10.47%) 2225794005 ( 9.87%) 679.50
udp 7930663 ( 25.36%) 3804085039 ( 16.87%) 479.67
dns 604237 ( 1.93%) 104839908 ( 0.46%) 173.51
realaud 17 ( 0.00%) 1493 ( 0.00%) 87.82
halflif 13763 ( 0.04%) 1963313 ( 0.01%) 142.65
starcra 49 ( 0.00%) 5329 ( 0.00%) 108.76
everque 406 ( 0.00%) 66499 ( 0.00%) 163.79
unreal 16 ( 0.00%) 2677 ( 0.00%) 167.31
quake 13 ( 0.00%) 1527 ( 0.00%) 117.46
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 7311558 ( 23.38%) 3696961873 ( 16.39%) 505.63
icmp 537801 ( 1.72%) 113728567 ( 0.50%) 211.47
ipip 297 ( 0.00%) 35706 ( 0.00%) 120.22
ipsec 524 ( 0.00%) 94888 ( 0.00%) 181.08
ip6 3272325 ( 10.46%) 1893713321 ( 8.40%) 578.71
other 40224 ( 0.13%) 3879001 ( 0.02%) 96.43
frag 2134 ( 0.01%) 2109307 ( 0.01%) 988.43
ip6 22010 ( 0.07%) 5008581 ( 0.02%) 227.56
tcp6 6858 ( 0.02%) 1198742 ( 0.01%) 174.79
http(s) 288 ( 0.00%) 239133 ( 0.00%) 830.32
http(c) 1177 ( 0.00%) 132958 ( 0.00%) 112.96
smtp 163 ( 0.00%) 86080 ( 0.00%) 528.10
imap 252 ( 0.00%) 29685 ( 0.00%) 117.80
ssh 1858 ( 0.01%) 335340 ( 0.00%) 180.48
dns 146 ( 0.00%) 41486 ( 0.00%) 284.15
bgp 115 ( 0.00%) 16109 ( 0.00%) 140.08
other 2859 ( 0.01%) 317951 ( 0.00%) 111.21
udp6 11266 ( 0.04%) 3052363 ( 0.01%) 270.94
dns 10749 ( 0.03%) 2957592 ( 0.01%) 275.15
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 121 ( 0.00%) 121.00
other 515 ( 0.00%) 94538 ( 0.00%) 183.57
icmp6 3623 ( 0.01%) 515055 ( 0.00%) 142.16
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 232 ( 0.00%) 238205 ( 0.00%) 1026.75
tcpdump file: 201006271400.dump.gz (790.19 MB)