Traffic Trace Info
DumpFile: 201006281400.dump
FileSize: 3029.22MB
Id: 201006281400
StartTime: Mon Jun 28 14:00:00 2010
EndTime: Mon Jun 28 14:15:01 2010
TotalTime: 900.90 seconds
TotalCapSize: -1721.91MB CapLen: 96 bytes
# of packets: 42933395 (26662.12MB)
AvgRate: 248.25Mbps stddev:15.97M
IP flow (unique src/dst pair) Information
# of flows: 1106772 (avg. 38.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.6% 1.3% 1.2% 1.2% 0.9% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 604824
Top 10 bandwidth usage (bytes/total in %):
12.2% 8.1% 4.8% 3.7% 3.0% 2.5% 2.4% 2.3% 2.0% 1.8%
# of IPv6 addresses: 1288
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.5% 7.2% 6.5% 6.5% 4.7% 4.4% 3.5% 3.5% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201006281400.pktlen.png)
detailed numbers
[ 32- 63]: 8073545
[ 64- 127]: 11784408
[ 128- 255]: 3003710
[ 256- 511]: 1663202
[ 512- 1023]: 1242105
[ 1024- 2047]: 17166425
Protocol Breakdown
![[protocol breakdown chart]](201006281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42933395 (100.00%) 27957261674 (100.00%) 651.18
ip 42901655 ( 99.93%) 27947569194 ( 99.97%) 651.43
tcp 27826397 ( 64.81%) 19912606807 ( 71.23%) 715.60
http(s) 10231604 ( 23.83%) 13172494911 ( 47.12%) 1287.43
http(c) 9099530 ( 21.19%) 1354104781 ( 4.84%) 148.81
squid 205049 ( 0.48%) 81726296 ( 0.29%) 398.57
smtp 372785 ( 0.87%) 150652218 ( 0.54%) 404.13
nntp 344 ( 0.00%) 26486 ( 0.00%) 76.99
ftp 31949 ( 0.07%) 8477047 ( 0.03%) 265.33
pop3 13916 ( 0.03%) 4544849 ( 0.02%) 326.59
imap 20087 ( 0.05%) 3856870 ( 0.01%) 192.01
telnet 1327 ( 0.00%) 105515 ( 0.00%) 79.51
ssh 886897 ( 2.07%) 127592090 ( 0.46%) 143.86
dns 71729 ( 0.17%) 4962168 ( 0.02%) 69.18
bgp 179 ( 0.00%) 69666 ( 0.00%) 389.20
napster 70 ( 0.00%) 7591 ( 0.00%) 108.44
realaud 165 ( 0.00%) 23483 ( 0.00%) 142.32
rtsp 6278 ( 0.01%) 6177566 ( 0.02%) 984.00
icecast 19652 ( 0.05%) 6425178 ( 0.02%) 326.95
hotline 26 ( 0.00%) 2087 ( 0.00%) 80.27
other 6864808 ( 15.99%) 4991357885 ( 17.85%) 727.09
udp 10854234 ( 25.28%) 5653099138 ( 20.22%) 520.82
dns 905972 ( 2.11%) 150655479 ( 0.54%) 166.29
realaud 462 ( 0.00%) 30856 ( 0.00%) 66.79
halflif 574 ( 0.00%) 106685 ( 0.00%) 185.86
starcra 1005 ( 0.00%) 959281 ( 0.00%) 954.51
everque 2625 ( 0.01%) 1743149 ( 0.01%) 664.06
unreal 41 ( 0.00%) 5992 ( 0.00%) 146.15
quake 43 ( 0.00%) 6179 ( 0.00%) 143.70
cuseeme 3 ( 0.00%) 338 ( 0.00%) 112.67
other 9939992 ( 23.15%) 5499257723 ( 19.67%) 553.25
icmp 562287 ( 1.31%) 116454677 ( 0.42%) 207.11
ipip 347 ( 0.00%) 41512 ( 0.00%) 119.63
ipsec 473 ( 0.00%) 89014 ( 0.00%) 188.19
ip6 3653760 ( 8.51%) 2264699067 ( 8.10%) 619.83
other 4157 ( 0.01%) 578979 ( 0.00%) 139.28
frag 30515 ( 0.07%) 24446903 ( 0.09%) 801.14
ip6 31740 ( 0.07%) 9692480 ( 0.03%) 305.37
tcp6 9546 ( 0.02%) 4236524 ( 0.02%) 443.80
http(s) 1029 ( 0.00%) 1358703 ( 0.00%) 1320.41
http(c) 1488 ( 0.00%) 145119 ( 0.00%) 97.53
smtp 174 ( 0.00%) 52423 ( 0.00%) 301.28
imap 350 ( 0.00%) 41418 ( 0.00%) 118.34
ssh 1881 ( 0.00%) 339526 ( 0.00%) 180.50
dns 131 ( 0.00%) 24990 ( 0.00%) 190.76
bgp 115 ( 0.00%) 16491 ( 0.00%) 143.40
other 4378 ( 0.01%) 2257854 ( 0.01%) 515.73
udp6 16905 ( 0.04%) 4458571 ( 0.02%) 263.74
dns 16424 ( 0.04%) 4374881 ( 0.02%) 266.37
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
cuseeme 1 ( 0.00%) 119 ( 0.00%) 119.00
other 478 ( 0.00%) 83360 ( 0.00%) 174.39
icmp6 5083 ( 0.01%) 819964 ( 0.00%) 161.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 176 ( 0.00%) 173341 ( 0.00%) 984.89
tcpdump file: 201006281400.dump.gz (1127.34 MB)