Traffic Trace Info
DumpFile: 201007031400.dump
FileSize: 2485.58MB
Id: 201007031400
StartTime: Sat Jul 3 14:00:01 2010
EndTime: Sat Jul 3 14:15:00 2010
TotalTime: 899.55 seconds
TotalCapSize: 1953.50MB CapLen: 96 bytes
# of packets: 34869392 (22308.38MB)
AvgRate: 208.03Mbps stddev:19.52M
IP flow (unique src/dst pair) Information
# of flows: 892904 (avg. 39.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.2% 3.6% 2.1% 1.8% 1.2% 1.2% 0.9% 0.7% 0.5%
IP address Information
# of IPv4 addresses: 504985
Top 10 bandwidth usage (bytes/total in %):
13.4% 11.3% 7.8% 7.4% 6.8% 5.3% 5.0% 4.3% 3.7% 2.5%
# of IPv6 addresses: 1018
Top 10 bandwidth usage (bytes/total in %):
13.9% 13.9% 6.3% 5.0% 5.0% 4.9% 4.9% 4.8% 4.8% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007031400.pktlen.png)
detailed numbers
[ 32- 63]: 5571435
[ 64- 127]: 10511656
[ 128- 255]: 1864235
[ 256- 511]: 1705702
[ 512- 1023]: 849863
[ 1024- 2047]: 14366501
Protocol Breakdown
![[protocol breakdown chart]](201007031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34869392 (100.00%) 23392035383 (100.00%) 670.85
ip 34842762 ( 99.92%) 23385375544 ( 99.97%) 671.17
tcp 22107493 ( 63.40%) 17512518821 ( 74.87%) 792.15
http(s) 10259570 ( 29.42%) 14169294392 ( 60.57%) 1381.08
http(c) 7134945 ( 20.46%) 884283826 ( 3.78%) 123.94
squid 223642 ( 0.64%) 86563650 ( 0.37%) 387.06
smtp 196960 ( 0.56%) 69466717 ( 0.30%) 352.69
nntp 19 ( 0.00%) 1689 ( 0.00%) 88.89
ftp 26959 ( 0.08%) 8282887 ( 0.04%) 307.24
pop3 10618 ( 0.03%) 3598585 ( 0.02%) 338.91
imap 1958 ( 0.01%) 517064 ( 0.00%) 264.08
telnet 1426 ( 0.00%) 99656 ( 0.00%) 69.88
ssh 166357 ( 0.48%) 20948709 ( 0.09%) 125.93
dns 69413 ( 0.20%) 4802777 ( 0.02%) 69.19
bgp 157 ( 0.00%) 65388 ( 0.00%) 416.48
napster 178 ( 0.00%) 15691 ( 0.00%) 88.15
realaud 23 ( 0.00%) 3561 ( 0.00%) 154.83
rtsp 19200 ( 0.06%) 18317978 ( 0.08%) 954.06
icecast 726 ( 0.00%) 81303 ( 0.00%) 111.99
hotline 66 ( 0.00%) 5412 ( 0.00%) 82.00
other 3995270 ( 11.46%) 2246169176 ( 9.60%) 562.21
udp 8925767 ( 25.60%) 3912967297 ( 16.73%) 438.39
dns 609154 ( 1.75%) 105983558 ( 0.45%) 173.98
realaud 565 ( 0.00%) 35351 ( 0.00%) 62.57
halflif 134 ( 0.00%) 18628 ( 0.00%) 139.01
starcra 60 ( 0.00%) 6210 ( 0.00%) 103.50
everque 420 ( 0.00%) 73419 ( 0.00%) 174.81
unreal 11 ( 0.00%) 1320 ( 0.00%) 120.00
quake 16 ( 0.00%) 1491 ( 0.00%) 93.19
cuseeme 2 ( 0.00%) 210 ( 0.00%) 105.00
other 8315253 ( 23.85%) 3806779284 ( 16.27%) 457.81
icmp 561601 ( 1.61%) 125044856 ( 0.53%) 222.66
ipip 367 ( 0.00%) 42035 ( 0.00%) 114.54
ipsec 9875 ( 0.03%) 2347366 ( 0.01%) 237.71
ip6 3229914 ( 9.26%) 1828513018 ( 7.82%) 566.12
other 7745 ( 0.02%) 3942151 ( 0.02%) 508.99
frag 778 ( 0.00%) 751359 ( 0.00%) 965.76
ip6 26630 ( 0.08%) 6659839 ( 0.03%) 250.09
tcp6 9769 ( 0.03%) 2616322 ( 0.01%) 267.82
http(s) 672 ( 0.00%) 966151 ( 0.00%) 1437.72
http(c) 748 ( 0.00%) 75325 ( 0.00%) 100.70
smtp 11 ( 0.00%) 1209 ( 0.00%) 109.91
imap 329 ( 0.00%) 37339 ( 0.00%) 113.49
ssh 1862 ( 0.01%) 335972 ( 0.00%) 180.44
dns 133 ( 0.00%) 30352 ( 0.00%) 228.21
bgp 432 ( 0.00%) 279353 ( 0.00%) 646.65
other 5582 ( 0.02%) 890621 ( 0.00%) 159.55
udp6 12145 ( 0.03%) 3256657 ( 0.01%) 268.15
dns 11341 ( 0.03%) 2857788 ( 0.01%) 251.99
realaud 1 ( 0.00%) 97 ( 0.00%) 97.00
everque 1 ( 0.00%) 95 ( 0.00%) 95.00
other 802 ( 0.00%) 398677 ( 0.00%) 497.10
icmp6 4477 ( 0.01%) 606665 ( 0.00%) 135.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 209 ( 0.00%) 176115 ( 0.00%) 842.66
tcpdump file: 201007031400.dump.gz (888.09 MB)