Traffic Trace Info
DumpFile: 201007151400.dump
FileSize: 2698.40MB
Id: 201007151400
StartTime: Thu Jul 15 14:00:01 2010
EndTime: Thu Jul 15 14:15:00 2010
TotalTime: 899.86 seconds
TotalCapSize: -1987.76MB CapLen: 96 bytes
# of packets: 38676394 (23830.63MB)
AvgRate: 222.17Mbps stddev:17.63M
IP flow (unique src/dst pair) Information
# of flows: 1076730 (avg. 35.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.2% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 574098
Top 10 bandwidth usage (bytes/total in %):
14.1% 7.7% 6.1% 4.7% 4.5% 3.9% 3.4% 2.3% 1.9% 1.8%
# of IPv6 addresses: 2017
Top 10 bandwidth usage (bytes/total in %):
32.2% 32.2% 17.7% 17.7% 17.6% 17.4% 6.0% 6.0% 5.8% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007151400.pktlen.png)
detailed numbers
[ 32- 63]: 6862837
[ 64- 127]: 10976960
[ 128- 255]: 2732849
[ 256- 511]: 1764044
[ 512- 1023]: 1032389
[ 1024- 2047]: 15307315
Protocol Breakdown
![[protocol breakdown chart]](201007151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38676394 (100.00%) 24988223007 (100.00%) 646.08
ip 38551800 ( 99.68%) 24912196779 ( 99.70%) 646.20
tcp 23447374 ( 60.62%) 17089076342 ( 68.39%) 728.83
http(s) 9460441 ( 24.46%) 12278026469 ( 49.14%) 1297.83
http(c) 8903487 ( 23.02%) 1734740546 ( 6.94%) 194.84
squid 246623 ( 0.64%) 89381115 ( 0.36%) 362.42
smtp 364745 ( 0.94%) 193348172 ( 0.77%) 530.09
nntp 366 ( 0.00%) 67277 ( 0.00%) 183.82
ftp 12672 ( 0.03%) 1236622 ( 0.00%) 97.59
pop3 19454 ( 0.05%) 9181364 ( 0.04%) 471.95
imap 2858 ( 0.01%) 579555 ( 0.00%) 202.78
telnet 2484 ( 0.01%) 177221 ( 0.00%) 71.35
ssh 54578 ( 0.14%) 23577374 ( 0.09%) 431.99
dns 69356 ( 0.18%) 4873647 ( 0.02%) 70.27
bgp 179 ( 0.00%) 77051 ( 0.00%) 430.45
napster 227 ( 0.00%) 46293 ( 0.00%) 203.93
realaud 43 ( 0.00%) 5599 ( 0.00%) 130.21
rtsp 54162 ( 0.14%) 40124868 ( 0.16%) 740.83
icecast 12013 ( 0.03%) 4653171 ( 0.02%) 387.34
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 4243670 ( 10.97%) 2708979032 ( 10.84%) 638.36
udp 11069536 ( 28.62%) 5772613074 ( 23.10%) 521.49
dns 871061 ( 2.25%) 154362283 ( 0.62%) 177.21
realaud 919 ( 0.00%) 55734 ( 0.00%) 60.65
halflif 98 ( 0.00%) 10520 ( 0.00%) 107.35
starcra 95 ( 0.00%) 15649 ( 0.00%) 164.73
everque 41990 ( 0.11%) 35728869 ( 0.14%) 850.89
unreal 1463 ( 0.00%) 111762 ( 0.00%) 76.39
quake 22 ( 0.00%) 3108 ( 0.00%) 141.27
cuseeme 3 ( 0.00%) 315 ( 0.00%) 105.00
other 10153000 ( 26.25%) 5582153069 ( 22.34%) 549.80
icmp 532643 ( 1.38%) 113579872 ( 0.45%) 213.24
igmp 1 ( 0.00%) 77 ( 0.00%) 77.00
ipip 372 ( 0.00%) 44352 ( 0.00%) 119.23
ipsec 10131 ( 0.03%) 2445386 ( 0.01%) 241.38
ip6 3467802 ( 8.97%) 1929585077 ( 7.72%) 556.43
other 23941 ( 0.06%) 4852599 ( 0.02%) 202.69
frag 2493 ( 0.01%) 2126452 ( 0.01%) 852.97
ip6 124594 ( 0.32%) 76026228 ( 0.30%) 610.19
tcp6 37750 ( 0.10%) 30233908 ( 0.12%) 800.90
http(s) 459 ( 0.00%) 420695 ( 0.00%) 916.55
http(c) 1282 ( 0.00%) 129003 ( 0.00%) 100.63
smtp 532 ( 0.00%) 377143 ( 0.00%) 708.92
imap 350 ( 0.00%) 40326 ( 0.00%) 115.22
ssh 1930 ( 0.00%) 423676 ( 0.00%) 219.52
dns 150 ( 0.00%) 28470 ( 0.00%) 189.80
bgp 456 ( 0.00%) 286740 ( 0.00%) 628.82
other 32591 ( 0.08%) 28527855 ( 0.11%) 875.33
udp6 27183 ( 0.07%) 7003021 ( 0.03%) 257.63
dns 17121 ( 0.04%) 4167811 ( 0.02%) 243.43
unreal 4 ( 0.00%) 360 ( 0.00%) 90.00
other 10058 ( 0.03%) 2834850 ( 0.01%) 281.85
icmp6 5925 ( 0.02%) 1067615 ( 0.00%) 180.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 53706 ( 0.14%) 37717604 ( 0.15%) 702.30
tcpdump file: 201007151400.dump.gz (980.73 MB)