Traffic Trace Info
DumpFile: 201007211400.dump
FileSize: 2844.92MB
Id: 201007211400
StartTime: Wed Jul 21 14:00:01 2010
EndTime: Wed Jul 21 14:15:01 2010
TotalTime: 899.21 seconds
TotalCapSize: -1877.72MB CapLen: 96 bytes
# of packets: 41067071 (27666.95MB)
AvgRate: 258.10Mbps stddev:25.30M
IP flow (unique src/dst pair) Information
# of flows: 925340 (avg. 44.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 3.7% 1.6% 1.4% 1.4% 1.2% 1.0% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 494545
Top 10 bandwidth usage (bytes/total in %):
13.2% 6.5% 6.5% 5.6% 4.6% 4.2% 3.9% 3.9% 3.8% 2.9%
# of IPv6 addresses: 1976
Top 10 bandwidth usage (bytes/total in %):
69.0% 69.0% 7.7% 7.7% 7.1% 7.1% 4.8% 4.8% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007211400.pktlen.png)
detailed numbers
[ 32- 63]: 6311132
[ 64- 127]: 9592701
[ 128- 255]: 2786330
[ 256- 511]: 2614096
[ 512- 1023]: 2898673
[ 1024- 2047]: 16864139
Protocol Breakdown
![[protocol breakdown chart]](201007211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41067071 (100.00%) 29010900909 (100.00%) 706.43
ip 40828628 ( 99.42%) 28864637915 ( 99.50%) 706.97
tcp 25167571 ( 61.28%) 20407027291 ( 70.34%) 810.85
http(s) 11623080 ( 28.30%) 15596600284 ( 53.76%) 1341.86
http(c) 7375181 ( 17.96%) 1177248046 ( 4.06%) 159.62
squid 311489 ( 0.76%) 106776860 ( 0.37%) 342.79
smtp 330530 ( 0.80%) 85623546 ( 0.30%) 259.05
nntp 32 ( 0.00%) 2619 ( 0.00%) 81.84
ftp 16778 ( 0.04%) 2049286 ( 0.01%) 122.14
pop3 13967 ( 0.03%) 6324939 ( 0.02%) 452.85
imap 18017 ( 0.04%) 3393169 ( 0.01%) 188.33
telnet 2632 ( 0.01%) 219709 ( 0.00%) 83.48
ssh 185229 ( 0.45%) 42883544 ( 0.15%) 231.52
dns 3579 ( 0.01%) 270100 ( 0.00%) 75.47
bgp 165 ( 0.00%) 66096 ( 0.00%) 400.58
napster 11 ( 0.00%) 1087 ( 0.00%) 98.82
realaud 35 ( 0.00%) 3382 ( 0.00%) 96.63
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 38003 ( 0.09%) 27504780 ( 0.09%) 723.75
hotline 11 ( 0.00%) 2098 ( 0.00%) 190.73
other 5248828 ( 12.78%) 3358057506 ( 11.58%) 639.77
udp 12111949 ( 29.49%) 6717095783 ( 23.15%) 554.58
dns 839714 ( 2.04%) 149187883 ( 0.51%) 177.67
rip 2304 ( 0.01%) 1680248 ( 0.01%) 729.27
realaud 28 ( 0.00%) 3999 ( 0.00%) 142.82
halflif 105 ( 0.00%) 16313 ( 0.00%) 155.36
starcra 74 ( 0.00%) 7946 ( 0.00%) 107.38
everque 785 ( 0.00%) 162090 ( 0.00%) 206.48
unreal 31 ( 0.00%) 4532 ( 0.00%) 146.19
quake 41 ( 0.00%) 5090 ( 0.00%) 124.15
cuseeme 9 ( 0.00%) 728 ( 0.00%) 80.89
other 11268347 ( 27.44%) 6565932844 ( 22.63%) 582.69
icmp 467373 ( 1.14%) 109390940 ( 0.38%) 234.05
ipip 380 ( 0.00%) 46626 ( 0.00%) 122.70
ipsec 9849 ( 0.02%) 2343106 ( 0.01%) 237.90
ip6 3066441 ( 7.47%) 1627966089 ( 5.61%) 530.90
other 5065 ( 0.01%) 768080 ( 0.00%) 151.64
frag 2695 ( 0.01%) 2306885 ( 0.01%) 855.99
ip6 238443 ( 0.58%) 146262994 ( 0.50%) 613.41
tcp6 51569 ( 0.13%) 31066241 ( 0.11%) 602.42
http(s) 9681 ( 0.02%) 13471511 ( 0.05%) 1391.54
http(c) 1388 ( 0.00%) 176100 ( 0.00%) 126.87
smtp 251 ( 0.00%) 108003 ( 0.00%) 430.29
ftp 28 ( 0.00%) 2614 ( 0.00%) 93.36
imap 361 ( 0.00%) 41701 ( 0.00%) 115.52
ssh 1948 ( 0.00%) 424456 ( 0.00%) 217.89
dns 106 ( 0.00%) 20739 ( 0.00%) 195.65
bgp 104 ( 0.00%) 13109 ( 0.00%) 126.05
other 37702 ( 0.09%) 16808008 ( 0.06%) 445.81
udp6 31556 ( 0.08%) 9416364 ( 0.03%) 298.40
dns 17313 ( 0.04%) 4286506 ( 0.01%) 247.59
other 14243 ( 0.03%) 5129858 ( 0.02%) 360.17
icmp6 6214 ( 0.02%) 1089714 ( 0.00%) 175.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 149074 ( 0.36%) 104686595 ( 0.36%) 702.25
tcpdump file: 201007211400.dump.gz (993.25 MB)