Traffic Trace Info
DumpFile: 201007051400.dump
FileSize: 2968.01MB
Id: 201007051400
StartTime: Mon Jul 5 14:00:01 2010
EndTime: Mon Jul 5 14:15:01 2010
TotalTime: 899.73 seconds
TotalCapSize: -1768.81MB CapLen: 96 bytes
# of packets: 41996601 (26787.14MB)
AvgRate: 249.75Mbps stddev:27.11M
IP flow (unique src/dst pair) Information
# of flows: 1114980 (avg. 37.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 1.8% 1.5% 0.9% 0.9% 0.8% 0.8% 0.8% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 498024
Top 10 bandwidth usage (bytes/total in %):
11.7% 10.0% 6.3% 6.0% 5.2% 4.5% 3.5% 3.5% 2.8% 2.1%
# of IPv6 addresses: 1380
Top 10 bandwidth usage (bytes/total in %):
8.2% 5.4% 5.4% 5.4% 5.4% 5.0% 4.8% 3.7% 3.7% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007051400.pktlen.png)
detailed numbers
[ 32- 63]: 6911338
[ 64- 127]: 12154482
[ 128- 255]: 2606328
[ 256- 511]: 1819203
[ 512- 1023]: 1405436
[ 1024- 2047]: 17099814
Protocol Breakdown
![[protocol breakdown chart]](201007051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41996601 (100.00%) 28088347599 (100.00%) 668.82
ip 41964826 ( 99.92%) 28081012106 ( 99.97%) 669.16
tcp 27323758 ( 65.06%) 20441944836 ( 72.78%) 748.14
http(s) 11778737 ( 28.05%) 15774371126 ( 56.16%) 1339.22
http(c) 9635891 ( 22.94%) 1516127599 ( 5.40%) 157.34
squid 236580 ( 0.56%) 101590698 ( 0.36%) 429.41
smtp 480713 ( 1.14%) 302957988 ( 1.08%) 630.23
nntp 188 ( 0.00%) 13067 ( 0.00%) 69.51
ftp 29290 ( 0.07%) 7806599 ( 0.03%) 266.53
pop3 21883 ( 0.05%) 7062336 ( 0.03%) 322.73
imap 4622 ( 0.01%) 1776692 ( 0.01%) 384.40
telnet 191263 ( 0.46%) 14049272 ( 0.05%) 73.46
ssh 82927 ( 0.20%) 12870795 ( 0.05%) 155.21
dns 65409 ( 0.16%) 4529581 ( 0.02%) 69.25
bgp 155 ( 0.00%) 44306 ( 0.00%) 285.85
napster 43128 ( 0.10%) 41911567 ( 0.15%) 971.79
realaud 33 ( 0.00%) 5872 ( 0.00%) 177.94
rtsp 260 ( 0.00%) 221322 ( 0.00%) 851.24
icecast 8244 ( 0.02%) 587116 ( 0.00%) 71.22
hotline 13600 ( 0.03%) 967203 ( 0.00%) 71.12
other 4730802 ( 11.26%) 2655049717 ( 9.45%) 561.23
udp 10774300 ( 25.66%) 5759588929 ( 20.51%) 534.57
dns 877927 ( 2.09%) 153449004 ( 0.55%) 174.79
realaud 28 ( 0.00%) 3667 ( 0.00%) 130.96
halflif 30 ( 0.00%) 2960 ( 0.00%) 98.67
starcra 39 ( 0.00%) 6230 ( 0.00%) 159.74
everque 26632 ( 0.06%) 8022241 ( 0.03%) 301.23
unreal 68 ( 0.00%) 6812 ( 0.00%) 100.18
quake 86 ( 0.00%) 13883 ( 0.00%) 161.43
cuseeme 5 ( 0.00%) 492 ( 0.00%) 98.40
other 9855307 ( 23.47%) 5597096485 ( 19.93%) 567.93
icmp 478079 ( 1.14%) 95118315 ( 0.34%) 198.96
ipip 398 ( 0.00%) 49145 ( 0.00%) 123.48
ipsec 9866 ( 0.02%) 2346232 ( 0.01%) 237.81
ip6 3374658 ( 8.04%) 1781355379 ( 6.34%) 527.86
other 3767 ( 0.01%) 609270 ( 0.00%) 161.74
frag 62284 ( 0.15%) 48720541 ( 0.17%) 782.23
ip6 31775 ( 0.08%) 7335493 ( 0.03%) 230.86
tcp6 8779 ( 0.02%) 1929569 ( 0.01%) 219.79
http(s) 382 ( 0.00%) 405011 ( 0.00%) 1060.24
http(c) 2736 ( 0.01%) 272164 ( 0.00%) 99.48
smtp 153 ( 0.00%) 64572 ( 0.00%) 422.04
ftp 2 ( 0.00%) 148 ( 0.00%) 74.00
imap 275 ( 0.00%) 32797 ( 0.00%) 119.26
ssh 3130 ( 0.01%) 585980 ( 0.00%) 187.21
dns 101 ( 0.00%) 19512 ( 0.00%) 193.19
bgp 423 ( 0.00%) 271587 ( 0.00%) 642.05
other 1577 ( 0.00%) 277798 ( 0.00%) 176.16
udp6 17740 ( 0.04%) 4482134 ( 0.02%) 252.66
dns 17054 ( 0.04%) 4354774 ( 0.02%) 255.35
realaud 1 ( 0.00%) 168 ( 0.00%) 168.00
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 683 ( 0.00%) 126987 ( 0.00%) 185.93
icmp6 5083 ( 0.01%) 782009 ( 0.00%) 153.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 143 ( 0.00%) 137701 ( 0.00%) 962.94
tcpdump file: 201007051400.dump.gz (1089.13 MB)