Traffic Trace Info
DumpFile: 201007221400.dump
FileSize: 2716.74MB
Id: 201007221400
StartTime: Thu Jul 22 14:00:01 2010
EndTime: Thu Jul 22 14:15:01 2010
TotalTime: 900.01 seconds
TotalCapSize: -1965.76MB CapLen: 96 bytes
# of packets: 38436252 (24577.18MB)
AvgRate: 229.07Mbps stddev:16.87M
IP flow (unique src/dst pair) Information
# of flows: 1101393 (avg. 34.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.6% 1.5% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 576516
Top 10 bandwidth usage (bytes/total in %):
11.8% 8.8% 4.4% 4.4% 4.3% 4.2% 3.8% 3.6% 2.9% 2.7%
# of IPv6 addresses: 2144
Top 10 bandwidth usage (bytes/total in %):
32.7% 31.9% 16.9% 16.9% 10.0% 10.0% 5.1% 5.1% 4.6% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007221400.pktlen.png)
detailed numbers
[ 32- 63]: 6929233
[ 64- 127]: 9904555
[ 128- 255]: 2825307
[ 256- 511]: 1880693
[ 512- 1023]: 1068465
[ 1024- 2047]: 15827999
Protocol Breakdown
![[protocol breakdown chart]](201007221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38436252 (100.00%) 25771042438 (100.00%) 670.49
ip 38239727 ( 99.49%) 25684566525 ( 99.66%) 671.67
tcp 24392725 ( 63.46%) 18968554574 ( 73.60%) 777.63
http(s) 10469992 ( 27.24%) 13627137055 ( 52.88%) 1301.54
http(c) 7531789 ( 19.60%) 1348084801 ( 5.23%) 178.99
squid 295478 ( 0.77%) 154432895 ( 0.60%) 522.65
smtp 383849 ( 1.00%) 143033828 ( 0.56%) 372.63
nntp 21 ( 0.00%) 1810 ( 0.00%) 86.19
ftp 29947 ( 0.08%) 8664202 ( 0.03%) 289.32
pop3 16616 ( 0.04%) 4838016 ( 0.02%) 291.17
imap 11419 ( 0.03%) 11599187 ( 0.05%) 1015.78
telnet 2694 ( 0.01%) 227867 ( 0.00%) 84.58
ssh 83243 ( 0.22%) 42607643 ( 0.17%) 511.85
dns 3085 ( 0.01%) 231757 ( 0.00%) 75.12
bgp 169 ( 0.00%) 61163 ( 0.00%) 361.91
napster 43 ( 0.00%) 6071 ( 0.00%) 141.19
realaud 42 ( 0.00%) 4607 ( 0.00%) 109.69
rtsp 33245 ( 0.09%) 45430685 ( 0.18%) 1366.54
icecast 15354 ( 0.04%) 4784481 ( 0.02%) 311.61
other 5515738 ( 14.35%) 3577408446 ( 13.88%) 648.58
udp 9417081 ( 24.50%) 4349190711 ( 16.88%) 461.84
dns 1322267 ( 3.44%) 213033698 ( 0.83%) 161.11
realaud 115 ( 0.00%) 14024 ( 0.00%) 121.95
halflif 52 ( 0.00%) 5591 ( 0.00%) 107.52
starcra 596 ( 0.00%) 55147 ( 0.00%) 92.53
everque 12207 ( 0.03%) 1479513 ( 0.01%) 121.20
unreal 67 ( 0.00%) 11879 ( 0.00%) 177.30
quake 31 ( 0.00%) 3839 ( 0.00%) 123.84
cuseeme 16 ( 0.00%) 1974 ( 0.00%) 123.38
other 8081390 ( 21.03%) 4134482177 ( 16.04%) 511.61
icmp 442751 ( 1.15%) 92635161 ( 0.36%) 209.23
ipip 392 ( 0.00%) 46951 ( 0.00%) 119.77
ipsec 9802 ( 0.03%) 2328800 ( 0.01%) 237.58
ip6 3971808 ( 10.33%) 2271055306 ( 8.81%) 571.79
other 5168 ( 0.01%) 755022 ( 0.00%) 146.10
frag 25389 ( 0.07%) 20732083 ( 0.08%) 816.58
ip6 196525 ( 0.51%) 86475913 ( 0.34%) 440.02
tcp6 67013 ( 0.17%) 35354570 ( 0.14%) 527.58
http(s) 2087 ( 0.01%) 1766619 ( 0.01%) 846.49
http(c) 929 ( 0.00%) 91839 ( 0.00%) 98.86
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 452 ( 0.00%) 208144 ( 0.00%) 460.50
imap 280 ( 0.00%) 33319 ( 0.00%) 119.00
ssh 352 ( 0.00%) 105424 ( 0.00%) 299.50
dns 197 ( 0.00%) 33947 ( 0.00%) 172.32
bgp 114 ( 0.00%) 14664 ( 0.00%) 128.63
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 62599 ( 0.16%) 33100392 ( 0.13%) 528.77
udp6 90422 ( 0.24%) 26493740 ( 0.10%) 293.00
dns 17843 ( 0.05%) 4368771 ( 0.02%) 244.85
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
other 72578 ( 0.19%) 22124858 ( 0.09%) 304.84
icmp6 5434 ( 0.01%) 991189 ( 0.00%) 182.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 33626 ( 0.09%) 23632334 ( 0.09%) 702.80
tcpdump file: 201007221400.dump.gz (991.39 MB)