Traffic Trace Info
DumpFile: 201007081400.dump
FileSize: 2778.62MB
Id: 201007081400
StartTime: Thu Jul 8 14:00:01 2010
EndTime: Thu Jul 8 14:15:00 2010
TotalTime: 899.74 seconds
TotalCapSize: -1915.64MB CapLen: 96 bytes
# of packets: 39206899 (24545.72MB)
AvgRate: 228.83Mbps stddev:21.28M
IP flow (unique src/dst pair) Information
# of flows: 1008807 (avg. 38.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.0% 1.7% 1.7% 1.5% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 537693
Top 10 bandwidth usage (bytes/total in %):
12.4% 8.1% 8.0% 5.4% 4.1% 3.0% 2.7% 2.7% 2.6% 2.3%
# of IPv6 addresses: 1379
Top 10 bandwidth usage (bytes/total in %):
18.0% 17.7% 7.2% 7.2% 5.1% 4.6% 4.1% 3.9% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007081400.pktlen.png)
detailed numbers
[ 32- 63]: 6515478
[ 64- 127]: 11501705
[ 128- 255]: 2537909
[ 256- 511]: 1833666
[ 512- 1023]: 1073953
[ 1024- 2047]: 15744188
Protocol Breakdown
![[protocol breakdown chart]](201007081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39206899 (100.00%) 25738055931 (100.00%) 656.47
ip 39175367 ( 99.92%) 25728760686 ( 99.96%) 656.76
tcp 24723536 ( 63.06%) 18618390457 ( 72.34%) 753.06
http(s) 10310993 ( 26.30%) 13546766130 ( 52.63%) 1313.82
http(c) 8596270 ( 21.93%) 1496519327 ( 5.81%) 174.09
squid 249525 ( 0.64%) 120897291 ( 0.47%) 484.51
smtp 272546 ( 0.70%) 100357221 ( 0.39%) 368.22
nntp 47 ( 0.00%) 3367 ( 0.00%) 71.64
ftp 41619 ( 0.11%) 9620702 ( 0.04%) 231.16
pop3 19016 ( 0.05%) 10334180 ( 0.04%) 543.45
imap 287954 ( 0.73%) 266686216 ( 1.04%) 926.14
telnet 1504 ( 0.00%) 112563 ( 0.00%) 74.84
ssh 126564 ( 0.32%) 16567727 ( 0.06%) 130.90
dns 69083 ( 0.18%) 4787402 ( 0.02%) 69.30
bgp 196 ( 0.00%) 91479 ( 0.00%) 466.73
napster 218 ( 0.00%) 17150 ( 0.00%) 78.67
realaud 65 ( 0.00%) 7573 ( 0.00%) 116.51
rtsp 4382 ( 0.01%) 2896751 ( 0.01%) 661.06
icecast 56580 ( 0.14%) 38639166 ( 0.15%) 682.91
hotline 16 ( 0.00%) 4932 ( 0.00%) 308.25
other 4686958 ( 11.95%) 3004081280 ( 11.67%) 640.94
udp 9772021 ( 24.92%) 4904465454 ( 19.06%) 501.89
dns 917632 ( 2.34%) 159608727 ( 0.62%) 173.94
realaud 37 ( 0.00%) 4631 ( 0.00%) 125.16
halflif 65 ( 0.00%) 5376 ( 0.00%) 82.71
starcra 113 ( 0.00%) 13128 ( 0.00%) 116.18
everque 750 ( 0.00%) 131535 ( 0.00%) 175.38
unreal 35 ( 0.00%) 5812 ( 0.00%) 166.06
quake 78 ( 0.00%) 8914 ( 0.00%) 114.28
cuseeme 7 ( 0.00%) 648 ( 0.00%) 92.57
other 8852482 ( 22.58%) 4743801461 ( 18.43%) 535.87
icmp 570552 ( 1.46%) 103937731 ( 0.40%) 182.17
ipip 325 ( 0.00%) 38745 ( 0.00%) 119.22
ipsec 10624 ( 0.03%) 2507308 ( 0.01%) 236.00
ip6 3828578 ( 9.77%) 2072918941 ( 8.05%) 541.43
other 269731 ( 0.69%) 26502050 ( 0.10%) 98.25
frag 6177 ( 0.02%) 7709952 ( 0.03%) 1248.17
ip6 31532 ( 0.08%) 9295245 ( 0.04%) 294.79
tcp6 9676 ( 0.02%) 3938273 ( 0.02%) 407.01
http(s) 2018 ( 0.01%) 2532034 ( 0.01%) 1254.72
http(c) 1136 ( 0.00%) 115440 ( 0.00%) 101.62
smtp 372 ( 0.00%) 199708 ( 0.00%) 536.85
nntp 2 ( 0.00%) 168 ( 0.00%) 84.00
ftp 13 ( 0.00%) 1191 ( 0.00%) 91.62
pop3 9 ( 0.00%) 892 ( 0.00%) 99.11
imap 286 ( 0.00%) 34696 ( 0.00%) 121.31
telnet 2 ( 0.00%) 168 ( 0.00%) 84.00
ssh 1873 ( 0.00%) 336973 ( 0.00%) 179.91
dns 131 ( 0.00%) 25406 ( 0.00%) 193.94
bgp 478 ( 0.00%) 321328 ( 0.00%) 672.23
other 3356 ( 0.01%) 370269 ( 0.00%) 110.33
udp6 17414 ( 0.04%) 4520318 ( 0.02%) 259.58
dns 16407 ( 0.04%) 4365939 ( 0.02%) 266.10
other 1007 ( 0.00%) 154379 ( 0.00%) 153.31
icmp6 4155 ( 0.01%) 581186 ( 0.00%) 139.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 257 ( 0.00%) 251388 ( 0.00%) 978.16
tcpdump file: 201007081400.dump.gz (1017.43 MB)