Traffic Trace Info
DumpFile: 201007061400.dump
FileSize: 3156.49MB
Id: 201007061400
StartTime: Tue Jul 6 14:00:00 2010
EndTime: Tue Jul 6 14:15:00 2010
TotalTime: 899.91 seconds
TotalCapSize: -1612.59MB CapLen: 96 bytes
# of packets: 44110463 (28371.35MB)
AvgRate: 264.49Mbps stddev:22.09M
IP flow (unique src/dst pair) Information
# of flows: 1070800 (avg. 41.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.2% 1.1% 1.0% 0.9% 0.7% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 518307
Top 10 bandwidth usage (bytes/total in %):
10.6% 7.6% 6.7% 5.7% 3.2% 3.1% 2.5% 2.4% 2.3% 2.2%
# of IPv6 addresses: 1336
Top 10 bandwidth usage (bytes/total in %):
62.4% 62.4% 9.8% 6.1% 3.7% 2.3% 1.8% 1.7% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007061400.pktlen.png)
detailed numbers
[ 32- 63]: 6269087
[ 64- 127]: 13779198
[ 128- 255]: 2524721
[ 256- 511]: 1910853
[ 512- 1023]: 1393135
[ 1024- 2047]: 18233469
Protocol Breakdown
![[protocol breakdown chart]](201007061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44110463 (100.00%) 29749516656 (100.00%) 674.43
ip 44051379 ( 99.87%) 29723292677 ( 99.91%) 674.74
tcp 29712078 ( 67.36%) 22216020803 ( 74.68%) 747.71
http(s) 12385320 ( 28.08%) 16731994312 ( 56.24%) 1350.95
http(c) 9568436 ( 21.69%) 1433250976 ( 4.82%) 149.79
squid 301657 ( 0.68%) 110429322 ( 0.37%) 366.08
smtp 401710 ( 0.91%) 216715225 ( 0.73%) 539.48
nntp 83 ( 0.00%) 7412 ( 0.00%) 89.30
ftp 26894 ( 0.06%) 8875690 ( 0.03%) 330.02
pop3 18642 ( 0.04%) 8558607 ( 0.03%) 459.10
imap 20191 ( 0.05%) 4377978 ( 0.01%) 216.83
telnet 103854 ( 0.24%) 7663490 ( 0.03%) 73.79
ssh 1128759 ( 2.56%) 163921561 ( 0.55%) 145.22
dns 64313 ( 0.15%) 4458815 ( 0.01%) 69.33
bgp 155 ( 0.00%) 54335 ( 0.00%) 350.55
napster 242 ( 0.00%) 34208 ( 0.00%) 141.36
realaud 33 ( 0.00%) 3465 ( 0.00%) 105.00
rtsp 46 ( 0.00%) 3404 ( 0.00%) 74.00
icecast 33225 ( 0.08%) 23946979 ( 0.08%) 720.75
hotline 5 ( 0.00%) 310 ( 0.00%) 62.00
other 5658509 ( 12.83%) 3501724442 ( 11.77%) 618.84
udp 10139449 ( 22.99%) 5404663728 ( 18.17%) 533.03
dns 858590 ( 1.95%) 147354869 ( 0.50%) 171.62
realaud 219 ( 0.00%) 28074 ( 0.00%) 128.19
halflif 62 ( 0.00%) 5701 ( 0.00%) 91.95
starcra 107 ( 0.00%) 12081 ( 0.00%) 112.91
everque 610 ( 0.00%) 113550 ( 0.00%) 186.15
unreal 30 ( 0.00%) 4063 ( 0.00%) 135.43
quake 38 ( 0.00%) 4237 ( 0.00%) 111.50
cuseeme 9 ( 0.00%) 707 ( 0.00%) 78.56
other 9277292 ( 21.03%) 5256835233 ( 17.67%) 566.63
icmp 561619 ( 1.27%) 102248290 ( 0.34%) 182.06
ipip 361 ( 0.00%) 45967 ( 0.00%) 127.33
ipsec 9659 ( 0.02%) 2306198 ( 0.01%) 238.76
ip6 3579073 ( 8.11%) 1991189643 ( 6.69%) 556.34
other 49140 ( 0.11%) 6818048 ( 0.02%) 138.75
frag 41346 ( 0.09%) 26506476 ( 0.09%) 641.09
ip6 59082 ( 0.13%) 26223859 ( 0.09%) 443.86
tcp6 9384 ( 0.02%) 4254538 ( 0.01%) 453.38
http(s) 600 ( 0.00%) 649218 ( 0.00%) 1082.03
http(c) 1265 ( 0.00%) 125222 ( 0.00%) 98.99
smtp 134 ( 0.00%) 46367 ( 0.00%) 346.02
imap 351 ( 0.00%) 43301 ( 0.00%) 123.36
ssh 1860 ( 0.00%) 335656 ( 0.00%) 180.46
dns 111 ( 0.00%) 25815 ( 0.00%) 232.57
bgp 317 ( 0.00%) 183019 ( 0.00%) 577.35
other 4746 ( 0.01%) 2845940 ( 0.01%) 599.65
udp6 22096 ( 0.05%) 5152477 ( 0.02%) 233.19
dns 18055 ( 0.04%) 4547918 ( 0.02%) 251.89
other 4041 ( 0.01%) 604559 ( 0.00%) 149.61
icmp6 4804 ( 0.01%) 769637 ( 0.00%) 160.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22768 ( 0.05%) 16043127 ( 0.05%) 704.63
tcpdump file: 201007061400.dump.gz (1162.07 MB)