Traffic Trace Info
DumpFile: 201007011400.dump
FileSize: 2721.30MB
Id: 201007011400
StartTime: Thu Jul 1 14:00:00 2010
EndTime: Thu Jul 1 14:15:01 2010
TotalTime: 900.73 seconds
TotalCapSize: -1967.60MB CapLen: 96 bytes
# of packets: 38855763 (24137.72MB)
AvgRate: 224.79Mbps stddev:15.37M
IP flow (unique src/dst pair) Information
# of flows: 1075542 (avg. 36.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.4% 1.1% 1.0% 1.0% 1.0% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 565755
Top 10 bandwidth usage (bytes/total in %):
14.0% 6.8% 6.6% 2.8% 2.7% 2.6% 2.4% 2.4% 2.1% 2.0%
# of IPv6 addresses: 1172
Top 10 bandwidth usage (bytes/total in %):
19.0% 18.8% 6.5% 6.5% 5.8% 4.4% 4.0% 3.9% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007011400.pktlen.png)
detailed numbers
[ 32- 63]: 6525816
[ 64- 127]: 11268352
[ 128- 255]: 2644606
[ 256- 511]: 1784151
[ 512- 1023]: 1115027
[ 1024- 2047]: 15517811
Protocol Breakdown
![[protocol breakdown chart]](201007011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38855763 (100.00%) 25310230323 (100.00%) 651.39
ip 38825355 ( 99.92%) 25302417134 ( 99.97%) 651.70
tcp 24322021 ( 62.60%) 17932394281 ( 70.85%) 737.29
http(s) 9801344 ( 25.22%) 12841322104 ( 50.74%) 1310.16
http(c) 8655563 ( 22.28%) 1405012611 ( 5.55%) 162.32
squid 182494 ( 0.47%) 56652482 ( 0.22%) 310.43
smtp 323270 ( 0.83%) 192568988 ( 0.76%) 595.69
nntp 51 ( 0.00%) 4033 ( 0.00%) 79.08
ftp 180811 ( 0.47%) 154616640 ( 0.61%) 855.13
pop3 18196 ( 0.05%) 7033062 ( 0.03%) 386.52
imap 7962 ( 0.02%) 1260198 ( 0.00%) 158.28
telnet 792 ( 0.00%) 58773 ( 0.00%) 74.21
ssh 74613 ( 0.19%) 12336386 ( 0.05%) 165.34
dns 67350 ( 0.17%) 4690038 ( 0.02%) 69.64
bgp 303 ( 0.00%) 178519 ( 0.00%) 589.17
napster 9 ( 0.00%) 616 ( 0.00%) 68.44
realaud 68 ( 0.00%) 7807 ( 0.00%) 114.81
rtsp 40648 ( 0.10%) 41576471 ( 0.16%) 1022.84
icecast 35512 ( 0.09%) 23748308 ( 0.09%) 668.74
hotline 7 ( 0.00%) 578 ( 0.00%) 82.57
other 4933027 ( 12.70%) 3191326607 ( 12.61%) 646.93
udp 10878715 ( 28.00%) 5581425201 ( 22.05%) 513.06
dns 862250 ( 2.22%) 152161485 ( 0.60%) 176.47
realaud 23 ( 0.00%) 3657 ( 0.00%) 159.00
halflif 36882 ( 0.09%) 8429734 ( 0.03%) 228.56
starcra 120 ( 0.00%) 20932 ( 0.00%) 174.43
everque 3964 ( 0.01%) 1828667 ( 0.01%) 461.32
unreal 69 ( 0.00%) 9875 ( 0.00%) 143.12
quake 113 ( 0.00%) 13589 ( 0.00%) 120.26
cuseeme 6 ( 0.00%) 592 ( 0.00%) 98.67
other 9960021 ( 25.63%) 5417706751 ( 21.41%) 543.95
icmp 452491 ( 1.16%) 92917528 ( 0.37%) 205.35
ipip 386 ( 0.00%) 46984 ( 0.00%) 121.72
ipsec 9886 ( 0.03%) 2351356 ( 0.01%) 237.85
ip6 3151394 ( 8.11%) 1690983878 ( 6.68%) 536.58
other 10462 ( 0.03%) 2297906 ( 0.01%) 219.64
frag 62935 ( 0.16%) 48818959 ( 0.19%) 775.70
ip6 30408 ( 0.08%) 7813189 ( 0.03%) 256.95
tcp6 8659 ( 0.02%) 1617495 ( 0.01%) 186.80
http(s) 336 ( 0.00%) 283705 ( 0.00%) 844.36
http(c) 1174 ( 0.00%) 148946 ( 0.00%) 126.87
smtp 297 ( 0.00%) 101082 ( 0.00%) 340.34
imap 301 ( 0.00%) 34819 ( 0.00%) 115.68
ssh 1794 ( 0.00%) 518492 ( 0.00%) 289.01
dns 182 ( 0.00%) 57060 ( 0.00%) 313.52
bgp 123 ( 0.00%) 20076 ( 0.00%) 163.22
other 4452 ( 0.01%) 453315 ( 0.00%) 101.82
udp6 16264 ( 0.04%) 4487095 ( 0.02%) 275.89
dns 14600 ( 0.04%) 3809243 ( 0.02%) 260.91
quake 2 ( 0.00%) 233 ( 0.00%) 116.50
other 1662 ( 0.00%) 677619 ( 0.00%) 407.71
icmp6 3937 ( 0.01%) 549782 ( 0.00%) 139.64
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1517 ( 0.00%) 1154601 ( 0.00%) 761.11
tcpdump file: 201007011400.dump.gz (1007.22 MB)