Traffic Trace Info
DumpFile: 201007131400.dump
FileSize: 3163.75MB
Id: 201007131400
StartTime: Tue Jul 13 14:00:01 2010
EndTime: Tue Jul 13 14:15:01 2010
TotalTime: 899.52 seconds
TotalCapSize: -1607.00MB CapLen: 96 bytes
# of packets: 44219443 (29818.83MB)
AvgRate: 278.10Mbps stddev:35.93M
IP flow (unique src/dst pair) Information
# of flows: 1028162 (avg. 43.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.4% 1.3% 1.2% 1.2% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 541362
Top 10 bandwidth usage (bytes/total in %):
13.0% 11.6% 6.9% 3.6% 3.6% 3.1% 2.7% 2.2% 2.1% 2.0%
# of IPv6 addresses: 1288
Top 10 bandwidth usage (bytes/total in %):
10.5% 10.5% 8.4% 4.9% 4.4% 4.4% 4.1% 4.0% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007131400.pktlen.png)
detailed numbers
[ 32- 63]: 6308152
[ 64- 127]: 12913710
[ 128- 255]: 2417822
[ 256- 511]: 2058415
[ 512- 1023]: 1228381
[ 1024- 2047]: 19292963
Protocol Breakdown
![[protocol breakdown chart]](201007131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44219443 (100.00%) 31267310434 (100.00%) 707.09
ip 44184926 ( 99.92%) 31259688236 ( 99.98%) 707.47
tcp 29350909 ( 66.38%) 23307379842 ( 74.54%) 794.09
http(s) 13149993 ( 29.74%) 17624300343 ( 56.37%) 1340.25
http(c) 10306353 ( 23.31%) 2118224505 ( 6.77%) 205.53
squid 584073 ( 1.32%) 418343304 ( 1.34%) 716.25
smtp 341141 ( 0.77%) 125176314 ( 0.40%) 366.93
nntp 150 ( 0.00%) 17058 ( 0.00%) 113.72
ftp 25958 ( 0.06%) 7492180 ( 0.02%) 288.63
pop3 20607 ( 0.05%) 9215855 ( 0.03%) 447.22
imap 5259 ( 0.01%) 1744859 ( 0.01%) 331.79
telnet 1620 ( 0.00%) 119780 ( 0.00%) 73.94
ssh 85005 ( 0.19%) 12395469 ( 0.04%) 145.82
dns 67049 ( 0.15%) 4643081 ( 0.01%) 69.25
bgp 180 ( 0.00%) 77101 ( 0.00%) 428.34
napster 62 ( 0.00%) 5283 ( 0.00%) 85.21
realaud 40 ( 0.00%) 16771 ( 0.00%) 419.27
rtsp 25009 ( 0.06%) 25050294 ( 0.08%) 1001.65
icecast 37867 ( 0.09%) 26466163 ( 0.08%) 698.92
hotline 18 ( 0.00%) 1116 ( 0.00%) 62.00
other 4700525 ( 10.63%) 2934090366 ( 9.38%) 624.20
udp 10371837 ( 23.46%) 5634294563 ( 18.02%) 543.23
dns 973248 ( 2.20%) 163432437 ( 0.52%) 167.92
realaud 21 ( 0.00%) 2564 ( 0.00%) 122.10
halflif 142 ( 0.00%) 14974 ( 0.00%) 105.45
starcra 90 ( 0.00%) 15475 ( 0.00%) 171.94
everque 714 ( 0.00%) 136217 ( 0.00%) 190.78
unreal 46 ( 0.00%) 6676 ( 0.00%) 145.13
quake 34 ( 0.00%) 3776 ( 0.00%) 111.06
cuseeme 3 ( 0.00%) 281 ( 0.00%) 93.67
other 9397048 ( 21.25%) 5470576766 ( 17.50%) 582.16
icmp 464897 ( 1.05%) 96958229 ( 0.31%) 208.56
ipip 357 ( 0.00%) 42902 ( 0.00%) 120.17
ipsec 10055 ( 0.02%) 2380934 ( 0.01%) 236.79
ip6 3940372 ( 8.91%) 2211468842 ( 7.07%) 561.23
other 46499 ( 0.11%) 7162924 ( 0.02%) 154.04
frag 11915 ( 0.03%) 7067366 ( 0.02%) 593.15
ip6 34517 ( 0.08%) 7622198 ( 0.02%) 220.82
tcp6 8365 ( 0.02%) 1570271 ( 0.01%) 187.72
http(s) 333 ( 0.00%) 303991 ( 0.00%) 912.89
http(c) 3888 ( 0.01%) 359700 ( 0.00%) 92.52
smtp 146 ( 0.00%) 45041 ( 0.00%) 308.50
imap 272 ( 0.00%) 32888 ( 0.00%) 120.91
ssh 1855 ( 0.00%) 334778 ( 0.00%) 180.47
dns 166 ( 0.00%) 55702 ( 0.00%) 335.55
bgp 428 ( 0.00%) 276290 ( 0.00%) 645.54
other 1277 ( 0.00%) 161881 ( 0.00%) 126.77
udp6 20081 ( 0.05%) 5089170 ( 0.02%) 253.43
dns 17235 ( 0.04%) 4170936 ( 0.01%) 242.00
realaud 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2844 ( 0.01%) 918014 ( 0.00%) 322.79
icmp6 5958 ( 0.01%) 883212 ( 0.00%) 148.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 83 ( 0.00%) 75465 ( 0.00%) 909.22
tcpdump file: 201007131400.dump.gz (1134.99 MB)