Traffic Trace Info
DumpFile: 201007021400.dump
FileSize: 3101.07MB
Id: 201007021400
StartTime: Fri Jul 2 14:00:01 2010
EndTime: Fri Jul 2 14:15:01 2010
TotalTime: 900.09 seconds
TotalCapSize: -1654.78MB CapLen: 96 bytes
# of packets: 43243355 (28482.14MB)
AvgRate: 265.46Mbps stddev:17.51M
IP flow (unique src/dst pair) Information
# of flows: 1043767 (avg. 41.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.8% 1.3% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 555849
Top 10 bandwidth usage (bytes/total in %):
16.0% 11.1% 7.0% 6.2% 4.3% 4.3% 3.9% 2.9% 2.6% 2.5%
# of IPv6 addresses: 1230
Top 10 bandwidth usage (bytes/total in %):
8.4% 7.7% 7.7% 7.4% 7.0% 6.2% 5.4% 4.7% 4.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007021400.pktlen.png)
detailed numbers
[ 32- 63]: 6361724
[ 64- 127]: 12621777
[ 128- 255]: 2950753
[ 256- 511]: 1796160
[ 512- 1023]: 1177526
[ 1024- 2047]: 18335415
Protocol Breakdown
![[protocol breakdown chart]](201007021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43243355 (100.00%) 29865688677 (100.00%) 690.64
ip 43215806 ( 99.94%) 29859167437 ( 99.98%) 690.93
tcp 29937206 ( 69.23%) 23205207102 ( 77.70%) 775.13
http(s) 14497306 ( 33.52%) 19385274705 ( 64.91%) 1337.16
http(c) 10234336 ( 23.67%) 1217094006 ( 4.08%) 118.92
squid 298491 ( 0.69%) 139716789 ( 0.47%) 468.08
smtp 248354 ( 0.57%) 79878709 ( 0.27%) 321.63
nntp 22 ( 0.00%) 1882 ( 0.00%) 85.55
ftp 19994 ( 0.05%) 4140079 ( 0.01%) 207.07
pop3 18114 ( 0.04%) 11617875 ( 0.04%) 641.38
imap 4733 ( 0.01%) 1285468 ( 0.00%) 271.60
telnet 1098 ( 0.00%) 104281 ( 0.00%) 94.97
ssh 502026 ( 1.16%) 73496659 ( 0.25%) 146.40
dns 62621 ( 0.14%) 4342833 ( 0.01%) 69.35
bgp 157 ( 0.00%) 63706 ( 0.00%) 405.77
napster 1043 ( 0.00%) 760748 ( 0.00%) 729.38
realaud 166 ( 0.00%) 26836 ( 0.00%) 161.66
rtsp 6088 ( 0.01%) 5434453 ( 0.02%) 892.65
icecast 47239 ( 0.11%) 29928091 ( 0.10%) 633.55
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 3995366 ( 9.24%) 2252036856 ( 7.54%) 563.66
udp 9017903 ( 20.85%) 4423860046 ( 14.81%) 490.56
dns 825100 ( 1.91%) 146649198 ( 0.49%) 177.74
realaud 23 ( 0.00%) 7084 ( 0.00%) 308.00
halflif 339 ( 0.00%) 101155 ( 0.00%) 298.39
starcra 110 ( 0.00%) 14652 ( 0.00%) 133.20
everque 895 ( 0.00%) 162948 ( 0.00%) 182.06
unreal 47 ( 0.00%) 8077 ( 0.00%) 171.85
quake 22 ( 0.00%) 3076 ( 0.00%) 139.82
cuseeme 4 ( 0.00%) 331 ( 0.00%) 82.75
other 8189068 ( 18.94%) 4276642370 ( 14.32%) 522.24
icmp 588252 ( 1.36%) 119388991 ( 0.40%) 202.96
ipip 345 ( 0.00%) 41752 ( 0.00%) 121.02
ipsec 9847 ( 0.02%) 2340162 ( 0.01%) 237.65
ip6 3649343 ( 8.44%) 2106438940 ( 7.05%) 577.21
other 12910 ( 0.03%) 1890444 ( 0.01%) 146.43
frag 8448 ( 0.02%) 6800722 ( 0.02%) 805.01
ip6 27549 ( 0.06%) 6521240 ( 0.02%) 236.71
tcp6 5899 ( 0.01%) 1334279 ( 0.00%) 226.19
http(s) 205 ( 0.00%) 211712 ( 0.00%) 1032.74
http(c) 1281 ( 0.00%) 141953 ( 0.00%) 110.81
smtp 163 ( 0.00%) 82875 ( 0.00%) 508.44
imap 276 ( 0.00%) 31908 ( 0.00%) 115.61
ssh 1959 ( 0.00%) 515530 ( 0.00%) 263.16
dns 77 ( 0.00%) 16532 ( 0.00%) 214.70
bgp 105 ( 0.00%) 13513 ( 0.00%) 128.70
other 1833 ( 0.00%) 320256 ( 0.00%) 174.72
udp6 16755 ( 0.04%) 4385641 ( 0.01%) 261.75
dns 15040 ( 0.03%) 3832265 ( 0.01%) 254.80
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1714 ( 0.00%) 553272 ( 0.00%) 322.80
icmp6 4702 ( 0.01%) 633639 ( 0.00%) 134.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 163 ( 0.00%) 163601 ( 0.00%) 1003.69
tcpdump file: 201007021400.dump.gz (1100.74 MB)