Traffic Trace Info
DumpFile: 201007181400.dump
FileSize: 2073.37MB
Id: 201007181400
StartTime: Sun Jul 18 14:00:01 2010
EndTime: Sun Jul 18 14:15:01 2010
TotalTime: 899.98 seconds
TotalCapSize: 1630.66MB CapLen: 96 bytes
# of packets: 29012607 (18976.77MB)
AvgRate: 176.80Mbps stddev:23.11M
IP flow (unique src/dst pair) Information
# of flows: 881157 (avg. 32.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.5% 3.8% 2.2% 2.0% 2.0% 1.5% 1.1% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 530104
Top 10 bandwidth usage (bytes/total in %):
15.4% 12.2% 12.0% 8.7% 6.8% 3.9% 3.9% 3.3% 3.0% 2.6%
# of IPv6 addresses: 1833
Top 10 bandwidth usage (bytes/total in %):
30.9% 30.9% 17.6% 17.6% 13.1% 13.1% 10.3% 8.1% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007181400.pktlen.png)
detailed numbers
[ 32- 63]: 4118336
[ 64- 127]: 8757680
[ 128- 255]: 1681197
[ 256- 511]: 1510766
[ 512- 1023]: 720674
[ 1024- 2047]: 12223954
Protocol Breakdown
![[protocol breakdown chart]](201007181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29012607 (100.00%) 19898588709 (100.00%) 685.86
ip 28873213 ( 99.52%) 19820794678 ( 99.61%) 686.48
tcp 17597439 ( 60.65%) 14323697147 ( 71.98%) 813.96
http(s) 8139671 ( 28.06%) 11160629264 ( 56.09%) 1371.14
http(c) 5227008 ( 18.02%) 837813982 ( 4.21%) 160.29
squid 398028 ( 1.37%) 141946015 ( 0.71%) 356.62
smtp 186069 ( 0.64%) 30331368 ( 0.15%) 163.01
ftp 23222 ( 0.08%) 7620054 ( 0.04%) 328.14
pop3 3929 ( 0.01%) 1912812 ( 0.01%) 486.84
imap 1521 ( 0.01%) 396320 ( 0.00%) 260.57
telnet 1115 ( 0.00%) 110620 ( 0.00%) 99.21
ssh 50994 ( 0.18%) 12592776 ( 0.06%) 246.95
dns 5583 ( 0.02%) 389307 ( 0.00%) 69.73
bgp 190 ( 0.00%) 73208 ( 0.00%) 385.31
napster 25 ( 0.00%) 2937 ( 0.00%) 117.48
realaud 19 ( 0.00%) 1732 ( 0.00%) 91.16
rtsp 5582 ( 0.02%) 4134533 ( 0.02%) 740.69
icecast 6807 ( 0.02%) 4121030 ( 0.02%) 605.41
hotline 20 ( 0.00%) 1616 ( 0.00%) 80.80
other 3547654 ( 12.23%) 2121619453 ( 10.66%) 598.03
udp 7586504 ( 26.15%) 3593170573 ( 18.06%) 473.63
dns 586303 ( 2.02%) 108222712 ( 0.54%) 184.58
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 1832 ( 0.01%) 111664 ( 0.00%) 60.95
halflif 377 ( 0.00%) 25073 ( 0.00%) 66.51
starcra 120 ( 0.00%) 12264 ( 0.00%) 102.20
everque 478 ( 0.00%) 92000 ( 0.00%) 192.47
unreal 11 ( 0.00%) 1735 ( 0.00%) 157.73
quake 14 ( 0.00%) 2398 ( 0.00%) 171.29
cuseeme 4 ( 0.00%) 304 ( 0.00%) 76.00
other 6997297 ( 24.12%) 3484641956 ( 17.51%) 498.00
icmp 491273 ( 1.69%) 96931930 ( 0.49%) 197.31
ipip 377 ( 0.00%) 44109 ( 0.00%) 117.00
ipsec 14179 ( 0.05%) 2908290 ( 0.01%) 205.11
ip6 3171893 ( 10.93%) 1800365168 ( 9.05%) 567.60
other 11548 ( 0.04%) 3677461 ( 0.02%) 318.45
frag 372 ( 0.00%) 387940 ( 0.00%) 1042.85
ip6 139394 ( 0.48%) 77794031 ( 0.39%) 558.09
tcp6 42533 ( 0.15%) 31783334 ( 0.16%) 747.26
http(s) 613 ( 0.00%) 507042 ( 0.00%) 827.15
http(c) 999 ( 0.00%) 106747 ( 0.00%) 106.85
squid 1 ( 0.00%) 74 ( 0.00%) 74.00
smtp 118 ( 0.00%) 55653 ( 0.00%) 471.64
imap 319 ( 0.00%) 37559 ( 0.00%) 117.74
ssh 6 ( 0.00%) 868 ( 0.00%) 144.67
dns 124 ( 0.00%) 27290 ( 0.00%) 220.08
bgp 118 ( 0.00%) 15676 ( 0.00%) 132.85
other 40235 ( 0.14%) 31032425 ( 0.16%) 771.28
udp6 43050 ( 0.15%) 11994358 ( 0.06%) 278.61
dns 9900 ( 0.03%) 2310091 ( 0.01%) 233.34
starcra 3 ( 0.00%) 862 ( 0.00%) 287.33
unreal 4 ( 0.00%) 360 ( 0.00%) 90.00
other 33143 ( 0.11%) 9683045 ( 0.05%) 292.16
icmp6 6990 ( 0.02%) 1156493 ( 0.01%) 165.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 46791 ( 0.16%) 32855766 ( 0.17%) 702.18
tcpdump file: 201007181400.dump.gz (729.67 MB)