Traffic Trace Info
DumpFile: 201007171400.dump
FileSize: 2181.58MB
Id: 201007171400
StartTime: Sat Jul 17 14:00:01 2010
EndTime: Sat Jul 17 14:15:00 2010
TotalTime: 899.20 seconds
TotalCapSize: 1705.67MB CapLen: 96 bytes
# of packets: 31188981 (19923.23MB)
AvgRate: 185.85Mbps stddev:17.04M
IP flow (unique src/dst pair) Information
# of flows: 922621 (avg. 33.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.8% 1.4% 1.4% 1.4% 1.3% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 532203
Top 10 bandwidth usage (bytes/total in %):
16.4% 9.6% 8.0% 4.7% 2.8% 2.3% 2.2% 1.8% 1.8% 1.7%
# of IPv6 addresses: 1875
Top 10 bandwidth usage (bytes/total in %):
29.4% 29.4% 18.1% 18.1% 9.5% 9.5% 7.5% 7.5% 6.9% 6.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007171400.pktlen.png)
detailed numbers
[ 32- 63]: 5188128
[ 64- 127]: 8645240
[ 128- 255]: 1959113
[ 256- 511]: 1628255
[ 512- 1023]: 837038
[ 1024- 2047]: 12931207
Protocol Breakdown
![[protocol breakdown chart]](201007171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31188981 (100.00%) 20891020962 (100.00%) 669.82
ip 31024038 ( 99.47%) 20832346136 ( 99.72%) 671.49
tcp 17680828 ( 56.69%) 14193337856 ( 67.94%) 802.75
http(s) 7892289 ( 25.30%) 10593617524 ( 50.71%) 1342.27
http(c) 5372876 ( 17.23%) 955337424 ( 4.57%) 177.81
squid 344918 ( 1.11%) 149921510 ( 0.72%) 434.66
smtp 179247 ( 0.57%) 53329914 ( 0.26%) 297.52
nntp 19 ( 0.00%) 1702 ( 0.00%) 89.58
ftp 23506 ( 0.08%) 6527053 ( 0.03%) 277.68
pop3 6632 ( 0.02%) 2650810 ( 0.01%) 399.70
imap 1902 ( 0.01%) 557872 ( 0.00%) 293.31
telnet 1895 ( 0.01%) 164587 ( 0.00%) 86.85
ssh 66242 ( 0.21%) 12452716 ( 0.06%) 187.99
dns 4380 ( 0.01%) 297384 ( 0.00%) 67.90
bgp 161 ( 0.00%) 52214 ( 0.00%) 324.31
realaud 43 ( 0.00%) 3819 ( 0.00%) 88.81
rtsp 24781 ( 0.08%) 20617061 ( 0.10%) 831.97
icecast 16293 ( 0.05%) 12388251 ( 0.06%) 760.34
hotline 16 ( 0.00%) 990 ( 0.00%) 61.88
other 3745622 ( 12.01%) 2385416665 ( 11.42%) 636.85
udp 9572235 ( 30.69%) 4819306081 ( 23.07%) 503.47
dns 600119 ( 1.92%) 111852511 ( 0.54%) 186.38
realaud 32 ( 0.00%) 3977 ( 0.00%) 124.28
halflif 3154 ( 0.01%) 200785 ( 0.00%) 63.66
starcra 6468 ( 0.02%) 3605089 ( 0.02%) 557.37
everque 550 ( 0.00%) 110537 ( 0.00%) 200.98
unreal 2057 ( 0.01%) 153743 ( 0.00%) 74.74
quake 16 ( 0.00%) 2565 ( 0.00%) 160.31
cuseeme 8 ( 0.00%) 911 ( 0.00%) 113.88
other 8959601 ( 28.73%) 4703253775 ( 22.51%) 524.94
icmp 596952 ( 1.91%) 133692395 ( 0.64%) 223.96
ipip 373 ( 0.00%) 43648 ( 0.00%) 117.02
ipsec 14147 ( 0.05%) 2893166 ( 0.01%) 204.51
ip6 3142882 ( 10.08%) 1679526270 ( 8.04%) 534.39
other 16621 ( 0.05%) 3546720 ( 0.02%) 213.39
frag 1274 ( 0.00%) 1131577 ( 0.01%) 888.21
ip6 164943 ( 0.53%) 58674826 ( 0.28%) 355.73
tcp6 78669 ( 0.25%) 14052007 ( 0.07%) 178.62
http(s) 334 ( 0.00%) 157583 ( 0.00%) 471.81
http(c) 864 ( 0.00%) 94085 ( 0.00%) 108.89
smtp 31 ( 0.00%) 6580 ( 0.00%) 212.26
pop3 13 ( 0.00%) 1186 ( 0.00%) 91.23
imap 292 ( 0.00%) 34511 ( 0.00%) 118.19
ssh 1862 ( 0.01%) 335876 ( 0.00%) 180.38
dns 108 ( 0.00%) 16159 ( 0.00%) 149.62
bgp 126 ( 0.00%) 17210 ( 0.00%) 136.59
other 75039 ( 0.24%) 13388817 ( 0.06%) 178.42
udp6 29696 ( 0.10%) 8524240 ( 0.04%) 287.05
dns 11514 ( 0.04%) 2662041 ( 0.01%) 231.20
unreal 12 ( 0.00%) 1589 ( 0.00%) 132.42
other 18170 ( 0.06%) 5860610 ( 0.03%) 322.54
icmp6 7002 ( 0.02%) 1170442 ( 0.01%) 167.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 49546 ( 0.16%) 34924057 ( 0.17%) 704.88
tcpdump file: 201007171400.dump.gz (783.32 MB)