Traffic Trace Info
DumpFile: 201007121400.dump
FileSize: 2672.91MB
Id: 201007121400
StartTime: Mon Jul 12 14:00:01 2010
EndTime: Mon Jul 12 14:15:00 2010
TotalTime: 899.56 seconds
TotalCapSize: -2005.00MB CapLen: 96 bytes
# of packets: 38134929 (23892.30MB)
AvgRate: 222.79Mbps stddev:20.95M
IP flow (unique src/dst pair) Information
# of flows: 1111159 (avg. 34.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.3% 1.3% 1.0% 0.9% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 619064
Top 10 bandwidth usage (bytes/total in %):
15.5% 7.5% 5.6% 3.7% 3.6% 2.5% 2.0% 1.9% 1.9% 1.7%
# of IPv6 addresses: 1314
Top 10 bandwidth usage (bytes/total in %):
12.3% 12.3% 9.6% 7.9% 7.9% 6.4% 3.8% 3.8% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007121400.pktlen.png)
detailed numbers
[ 32- 63]: 6404367
[ 64- 127]: 10527298
[ 128- 255]: 2632629
[ 256- 511]: 2032838
[ 512- 1023]: 1163952
[ 1024- 2047]: 15373845
Protocol Breakdown
![[protocol breakdown chart]](201007121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38134929 (100.00%) 25052889693 (100.00%) 656.95
ip 38099195 ( 99.91%) 25042859251 ( 99.96%) 657.31
tcp 22960025 ( 60.21%) 17357957429 ( 69.29%) 756.01
http(s) 9158948 ( 24.02%) 11869440699 ( 47.38%) 1295.94
http(c) 7231658 ( 18.96%) 1340929695 ( 5.35%) 185.42
squid 879438 ( 2.31%) 697428219 ( 2.78%) 793.04
smtp 319772 ( 0.84%) 178156443 ( 0.71%) 557.14
nntp 33 ( 0.00%) 2600 ( 0.00%) 78.79
ftp 27394 ( 0.07%) 5711026 ( 0.02%) 208.48
pop3 16370 ( 0.04%) 4944737 ( 0.02%) 302.06
imap 5466 ( 0.01%) 2279012 ( 0.01%) 416.94
telnet 1437 ( 0.00%) 105036 ( 0.00%) 73.09
ssh 263301 ( 0.69%) 63247384 ( 0.25%) 240.21
dns 67555 ( 0.18%) 4710207 ( 0.02%) 69.72
bgp 148 ( 0.00%) 60040 ( 0.00%) 405.68
napster 223 ( 0.00%) 22783 ( 0.00%) 102.17
realaud 14 ( 0.00%) 3615 ( 0.00%) 258.21
rtsp 5714 ( 0.01%) 3153785 ( 0.01%) 551.94
icecast 28012 ( 0.07%) 23335044 ( 0.09%) 833.04
other 4954507 ( 12.99%) 3164425004 ( 12.63%) 638.70
udp 10752941 ( 28.20%) 5576721415 ( 22.26%) 518.62
dns 898810 ( 2.36%) 153620028 ( 0.61%) 170.91
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 46 ( 0.00%) 7223 ( 0.00%) 157.02
halflif 80 ( 0.00%) 8963 ( 0.00%) 112.04
starcra 148 ( 0.00%) 21818 ( 0.00%) 147.42
everque 892 ( 0.00%) 146920 ( 0.00%) 164.71
unreal 19 ( 0.00%) 2345 ( 0.00%) 123.42
quake 38 ( 0.00%) 4947 ( 0.00%) 130.18
cuseeme 7 ( 0.00%) 566 ( 0.00%) 80.86
other 9852510 ( 25.84%) 5422661372 ( 21.64%) 550.38
icmp 728732 ( 1.91%) 146309160 ( 0.58%) 200.77
ipip 379 ( 0.00%) 44975 ( 0.00%) 118.67
ipsec 10236 ( 0.03%) 2416252 ( 0.01%) 236.05
ip6 3550583 ( 9.31%) 1897730991 ( 7.57%) 534.48
other 96299 ( 0.25%) 61679029 ( 0.25%) 640.50
frag 1855 ( 0.00%) 1789445 ( 0.01%) 964.66
ip6 35734 ( 0.09%) 10030442 ( 0.04%) 280.70
tcp6 6209 ( 0.02%) 3058430 ( 0.01%) 492.58
http(s) 827 ( 0.00%) 1041669 ( 0.00%) 1259.58
http(c) 794 ( 0.00%) 82815 ( 0.00%) 104.30
smtp 260 ( 0.00%) 87861 ( 0.00%) 337.93
pop3 12 ( 0.00%) 1100 ( 0.00%) 91.67
imap 404 ( 0.00%) 42815 ( 0.00%) 105.98
ssh 1937 ( 0.01%) 1244790 ( 0.00%) 642.64
dns 146 ( 0.00%) 44461 ( 0.00%) 304.53
bgp 442 ( 0.00%) 284774 ( 0.00%) 644.29
other 1387 ( 0.00%) 228145 ( 0.00%) 164.49
udp6 23222 ( 0.06%) 5931175 ( 0.02%) 255.41
dns 20498 ( 0.05%) 5059740 ( 0.02%) 246.84
other 2724 ( 0.01%) 871435 ( 0.00%) 319.91
icmp6 6147 ( 0.02%) 918695 ( 0.00%) 149.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 126 ( 0.00%) 118062 ( 0.00%) 937.00
tcpdump file: 201007121400.dump.gz (983.00 MB)