Traffic Trace Info
DumpFile: 201007231400.dump
FileSize: 2734.45MB
Id: 201007231400
StartTime: Fri Jul 23 14:00:01 2010
EndTime: Fri Jul 23 14:15:01 2010
TotalTime: 900.22 seconds
TotalCapSize: -1953.10MB CapLen: 96 bytes
# of packets: 38767612 (25050.63MB)
AvgRate: 233.42Mbps stddev:21.03M
IP flow (unique src/dst pair) Information
# of flows: 1019569 (avg. 38.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 546171
Top 10 bandwidth usage (bytes/total in %):
13.1% 8.2% 4.3% 4.1% 3.1% 2.9% 2.6% 2.3% 1.9% 1.8%
# of IPv6 addresses: 2134
Top 10 bandwidth usage (bytes/total in %):
33.5% 33.5% 17.6% 17.6% 8.7% 8.7% 2.8% 2.8% 2.6% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007231400.pktlen.png)
detailed numbers
[ 32- 63]: 5638642
[ 64- 127]: 11358508
[ 128- 255]: 2655040
[ 256- 511]: 1867588
[ 512- 1023]: 1112859
[ 1024- 2047]: 16134975
Protocol Breakdown
![[protocol breakdown chart]](201007231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38767612 (100.00%) 26267491033 (100.00%) 677.56
ip 38670630 ( 99.75%) 26226914569 ( 99.85%) 678.21
tcp 22759428 ( 58.71%) 18527372116 ( 70.53%) 814.05
http(s) 10828482 ( 27.93%) 14587477345 ( 55.53%) 1347.14
http(c) 7564726 ( 19.51%) 1378614569 ( 5.25%) 182.24
squid 390567 ( 1.01%) 250383579 ( 0.95%) 641.08
smtp 346386 ( 0.89%) 100734157 ( 0.38%) 290.81
nntp 19 ( 0.00%) 1687 ( 0.00%) 88.79
ftp 25372 ( 0.07%) 3856208 ( 0.01%) 151.99
pop3 10802 ( 0.03%) 4825769 ( 0.02%) 446.75
imap 3359 ( 0.01%) 434680 ( 0.00%) 129.41
telnet 2358 ( 0.01%) 203205 ( 0.00%) 86.18
ssh 82914 ( 0.21%) 14564967 ( 0.06%) 175.66
dns 3775 ( 0.01%) 289203 ( 0.00%) 76.61
bgp 185 ( 0.00%) 71630 ( 0.00%) 387.19
napster 109 ( 0.00%) 12212 ( 0.00%) 112.04
realaud 43 ( 0.00%) 4314 ( 0.00%) 100.33
icecast 25939 ( 0.07%) 1815415 ( 0.01%) 69.99
other 3474392 ( 8.96%) 2184083176 ( 8.31%) 628.62
udp 10538875 ( 27.18%) 5358772031 ( 20.40%) 508.48
dns 1055617 ( 2.72%) 195261821 ( 0.74%) 184.97
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 38 ( 0.00%) 4270 ( 0.00%) 112.37
halflif 77 ( 0.00%) 8279 ( 0.00%) 107.52
starcra 38 ( 0.00%) 5750 ( 0.00%) 151.32
everque 3186 ( 0.01%) 502286 ( 0.00%) 157.65
unreal 28 ( 0.00%) 3710 ( 0.00%) 132.50
quake 23 ( 0.00%) 4213 ( 0.00%) 183.17
cuseeme 6 ( 0.00%) 1198 ( 0.00%) 199.67
other 9478799 ( 24.45%) 5162823408 ( 19.65%) 544.67
icmp 1385855 ( 3.57%) 182386765 ( 0.69%) 131.61
ipip 387 ( 0.00%) 45800 ( 0.00%) 118.35
ipsec 10214 ( 0.03%) 2482984 ( 0.01%) 243.10
ip6 3974587 ( 10.25%) 2155676573 ( 8.21%) 542.36
other 1284 ( 0.00%) 178300 ( 0.00%) 138.86
frag 6800 ( 0.02%) 4772226 ( 0.02%) 701.80
ip6 96982 ( 0.25%) 40576464 ( 0.15%) 418.39
tcp6 31352 ( 0.08%) 12734680 ( 0.05%) 406.18
http(s) 2865 ( 0.01%) 3391530 ( 0.01%) 1183.78
http(c) 3539 ( 0.01%) 307059 ( 0.00%) 86.76
smtp 522 ( 0.00%) 324302 ( 0.00%) 621.27
pop3 22 ( 0.00%) 2028 ( 0.00%) 92.18
imap 352 ( 0.00%) 40577 ( 0.00%) 115.28
ssh 2808 ( 0.01%) 1138624 ( 0.00%) 405.49
dns 217 ( 0.00%) 27140 ( 0.00%) 125.07
bgp 121 ( 0.00%) 16033 ( 0.00%) 132.50
other 20906 ( 0.05%) 7487387 ( 0.03%) 358.15
udp6 39934 ( 0.10%) 12246802 ( 0.05%) 306.68
dns 17406 ( 0.04%) 4190881 ( 0.02%) 240.77
other 22528 ( 0.06%) 8055921 ( 0.03%) 357.60
icmp6 4823 ( 0.01%) 937554 ( 0.00%) 194.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20843 ( 0.05%) 14653348 ( 0.06%) 703.03
tcpdump file: 201007231400.dump.gz (981.55 MB)