Traffic Trace Info
DumpFile: 201007091400.dump
FileSize: 2762.79MB
Id: 201007091400
StartTime: Fri Jul 9 14:00:01 2010
EndTime: Fri Jul 9 14:15:01 2010
TotalTime: 899.81 seconds
TotalCapSize: -1931.48MB CapLen: 96 bytes
# of packets: 39208046 (25234.81MB)
AvgRate: 235.25Mbps stddev:18.94M
IP flow (unique src/dst pair) Information
# of flows: 1246442 (avg. 31.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.5% 1.2% 1.2% 1.1% 1.0% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 645667
Top 10 bandwidth usage (bytes/total in %):
13.0% 8.3% 5.1% 5.1% 3.9% 2.3% 2.3% 2.0% 1.7% 1.7%
# of IPv6 addresses: 1241
Top 10 bandwidth usage (bytes/total in %):
29.3% 29.3% 8.2% 8.1% 5.4% 5.1% 4.8% 4.4% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007091400.pktlen.png)
detailed numbers
[ 32- 63]: 6537188
[ 64- 127]: 10613082
[ 128- 255]: 2839674
[ 256- 511]: 1856484
[ 512- 1023]: 1213074
[ 1024- 2047]: 16148544
Protocol Breakdown
![[protocol breakdown chart]](201007091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39208046 (100.00%) 26460620451 (100.00%) 674.88
ip 39180802 ( 99.93%) 26451362158 ( 99.97%) 675.11
tcp 23575794 ( 60.13%) 17933148053 ( 67.77%) 760.66
http(s) 9568439 ( 24.40%) 12373407965 ( 46.76%) 1293.15
http(c) 7521787 ( 19.18%) 1550312022 ( 5.86%) 206.11
squid 390707 ( 1.00%) 211490833 ( 0.80%) 541.30
smtp 317841 ( 0.81%) 142751282 ( 0.54%) 449.13
nntp 42 ( 0.00%) 3534 ( 0.00%) 84.14
ftp 34629 ( 0.09%) 10182656 ( 0.04%) 294.05
pop3 15984 ( 0.04%) 4312401 ( 0.02%) 269.79
imap 3742 ( 0.01%) 810969 ( 0.00%) 216.72
telnet 131101 ( 0.33%) 9671477 ( 0.04%) 73.77
ssh 192059 ( 0.49%) 22447561 ( 0.08%) 116.88
dns 69085 ( 0.18%) 4787279 ( 0.02%) 69.30
bgp 208 ( 0.00%) 88200 ( 0.00%) 424.04
napster 28 ( 0.00%) 3244 ( 0.00%) 115.86
realaud 48 ( 0.00%) 7621 ( 0.00%) 158.77
rtsp 11284 ( 0.03%) 12107806 ( 0.05%) 1073.01
icecast 53679 ( 0.14%) 39368846 ( 0.15%) 733.41
hotline 7 ( 0.00%) 520 ( 0.00%) 74.29
other 5265118 ( 13.43%) 3551393477 ( 13.42%) 674.51
udp 10749152 ( 27.42%) 6016677151 ( 22.74%) 559.74
dns 904079 ( 2.31%) 156504204 ( 0.59%) 173.11
realaud 917 ( 0.00%) 55647 ( 0.00%) 60.68
halflif 49 ( 0.00%) 4327 ( 0.00%) 88.31
starcra 23 ( 0.00%) 3199 ( 0.00%) 139.09
everque 28004 ( 0.07%) 10656316 ( 0.04%) 380.53
unreal 29 ( 0.00%) 3498 ( 0.00%) 120.62
quake 25 ( 0.00%) 3201 ( 0.00%) 128.04
cuseeme 5 ( 0.00%) 508 ( 0.00%) 101.60
other 9815741 ( 25.04%) 5849237564 ( 22.11%) 595.90
icmp 706313 ( 1.80%) 136029600 ( 0.51%) 192.59
ipip 385 ( 0.00%) 46398 ( 0.00%) 120.51
ipsec 170646 ( 0.44%) 160621940 ( 0.61%) 941.26
ip6 3974980 ( 10.14%) 2204236704 ( 8.33%) 554.53
other 3532 ( 0.01%) 602312 ( 0.00%) 170.53
frag 3429 ( 0.01%) 3360196 ( 0.01%) 979.93
ip6 27244 ( 0.07%) 9258293 ( 0.03%) 339.83
tcp6 7806 ( 0.02%) 4373686 ( 0.02%) 560.30
http(s) 873 ( 0.00%) 1042036 ( 0.00%) 1193.63
http(c) 824 ( 0.00%) 86065 ( 0.00%) 104.45
smtp 137 ( 0.00%) 68536 ( 0.00%) 500.26
imap 427 ( 0.00%) 46746 ( 0.00%) 109.48
ssh 3944 ( 0.01%) 2710112 ( 0.01%) 687.15
dns 87 ( 0.00%) 32935 ( 0.00%) 378.56
bgp 421 ( 0.00%) 261039 ( 0.00%) 620.05
other 1093 ( 0.00%) 126217 ( 0.00%) 115.48
udp6 16085 ( 0.04%) 4146502 ( 0.02%) 257.79
dns 15536 ( 0.04%) 4075499 ( 0.02%) 262.33
other 549 ( 0.00%) 71003 ( 0.00%) 129.33
icmp6 3156 ( 0.01%) 565945 ( 0.00%) 179.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 167 ( 0.00%) 168080 ( 0.00%) 1006.47
tcpdump file: 201007091400.dump.gz (1015.74 MB)