Traffic Trace Info
DumpFile: 201007111400.dump
FileSize: 1999.19MB
Id: 201007111400
StartTime: Sun Jul 11 14:00:01 2010
EndTime: Sun Jul 11 14:15:00 2010
TotalTime: 899.49 seconds
TotalCapSize: 1565.60MB CapLen: 96 bytes
# of packets: 28415068 (18937.52MB)
AvgRate: 176.62Mbps stddev:46.63M
IP flow (unique src/dst pair) Information
# of flows: 839729 (avg. 33.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.2% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 459298
Top 10 bandwidth usage (bytes/total in %):
13.4% 8.9% 7.2% 7.1% 4.7% 4.1% 2.8% 2.6% 2.4% 2.3%
# of IPv6 addresses: 1159
Top 10 bandwidth usage (bytes/total in %):
11.2% 11.2% 11.0% 5.2% 5.2% 5.1% 5.0% 5.0% 4.7% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007111400.pktlen.png)
detailed numbers
[ 32- 63]: 4222731
[ 64- 127]: 7843773
[ 128- 255]: 1727030
[ 256- 511]: 1497583
[ 512- 1023]: 777648
[ 1024- 2047]: 12346303
Protocol Breakdown
![[protocol breakdown chart]](201007111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28415068 (100.00%) 19857425366 (100.00%) 698.83
ip 28390258 ( 99.91%) 19851036384 ( 99.97%) 699.22
tcp 16269346 ( 57.26%) 13880393393 ( 69.90%) 853.16
http(s) 8372160 ( 29.46%) 11338051899 ( 57.10%) 1354.26
http(c) 4659339 ( 16.40%) 743862985 ( 3.75%) 159.65
squid 230148 ( 0.81%) 109191712 ( 0.55%) 474.44
smtp 183742 ( 0.65%) 53216590 ( 0.27%) 289.63
ftp 19978 ( 0.07%) 3608804 ( 0.02%) 180.64
pop3 5015 ( 0.02%) 1541431 ( 0.01%) 307.36
imap 1746 ( 0.01%) 1039723 ( 0.01%) 595.49
telnet 62807 ( 0.22%) 4642188 ( 0.02%) 73.91
ssh 85868 ( 0.30%) 12970007 ( 0.07%) 151.05
dns 70818 ( 0.25%) 4893730 ( 0.02%) 69.10
bgp 181 ( 0.00%) 63485 ( 0.00%) 350.75
napster 7 ( 0.00%) 793 ( 0.00%) 113.29
realaud 34 ( 0.00%) 4955 ( 0.00%) 145.74
rtsp 105274 ( 0.37%) 117265420 ( 0.59%) 1113.91
icecast 27062 ( 0.10%) 23203983 ( 0.12%) 857.44
hotline 77 ( 0.00%) 5319 ( 0.00%) 69.08
other 2445084 ( 8.60%) 1466829943 ( 7.39%) 599.91
udp 8363902 ( 29.43%) 4077959371 ( 20.54%) 487.57
dns 611840 ( 2.15%) 106296378 ( 0.54%) 173.73
realaud 33 ( 0.00%) 4777 ( 0.00%) 144.76
halflif 52 ( 0.00%) 5359 ( 0.00%) 103.06
starcra 25 ( 0.00%) 2614 ( 0.00%) 104.56
everque 656 ( 0.00%) 130179 ( 0.00%) 198.44
unreal 20 ( 0.00%) 2351 ( 0.00%) 117.55
quake 24 ( 0.00%) 2716 ( 0.00%) 113.17
cuseeme 1 ( 0.00%) 98 ( 0.00%) 98.00
other 7751100 ( 27.28%) 3971437553 ( 20.00%) 512.37
icmp 556252 ( 1.96%) 106021372 ( 0.53%) 190.60
ipip 384 ( 0.00%) 45584 ( 0.00%) 118.71
ipsec 9960 ( 0.04%) 2373256 ( 0.01%) 238.28
ip6 3187580 ( 11.22%) 1783737662 ( 8.98%) 559.59
other 2834 ( 0.01%) 505746 ( 0.00%) 178.46
frag 723 ( 0.00%) 712255 ( 0.00%) 985.14
ip6 24810 ( 0.09%) 6388982 ( 0.03%) 257.52
tcp6 6807 ( 0.02%) 2574446 ( 0.01%) 378.21
http(s) 1007 ( 0.00%) 1198311 ( 0.01%) 1189.98
http(c) 857 ( 0.00%) 94863 ( 0.00%) 110.69
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 301 ( 0.00%) 111688 ( 0.00%) 371.06
imap 272 ( 0.00%) 32388 ( 0.00%) 119.07
ssh 1860 ( 0.01%) 335656 ( 0.00%) 180.46
dns 86 ( 0.00%) 15808 ( 0.00%) 183.81
bgp 301 ( 0.00%) 162180 ( 0.00%) 538.80
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2120 ( 0.01%) 623330 ( 0.00%) 294.02
udp6 11951 ( 0.04%) 2832254 ( 0.01%) 236.99
dns 10254 ( 0.04%) 2632454 ( 0.01%) 256.72
halflif 1 ( 0.00%) 93 ( 0.00%) 93.00
other 1696 ( 0.01%) 199707 ( 0.00%) 117.75
icmp6 5930 ( 0.02%) 891627 ( 0.00%) 150.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 92 ( 0.00%) 86575 ( 0.00%) 941.03
tcpdump file: 201007111400.dump.gz (718.56 MB)