Traffic Trace Info
DumpFile: 201007241400.dump
FileSize: 2497.08MB
Id: 201007241400
StartTime: Sat Jul 24 14:00:01 2010
EndTime: Sat Jul 24 14:15:01 2010
TotalTime: 899.53 seconds
TotalCapSize: 1964.77MB CapLen: 96 bytes
# of packets: 34885126 (22601.32MB)
AvgRate: 210.74Mbps stddev:31.59M
IP flow (unique src/dst pair) Information
# of flows: 1028427 (avg. 33.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.8% 2.1% 2.0% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 534831
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.0% 10.0% 7.0% 5.8% 3.1% 2.5% 2.5% 2.5% 2.1%
# of IPv6 addresses: 2008
Top 10 bandwidth usage (bytes/total in %):
31.1% 31.1% 28.3% 28.3% 7.7% 7.7% 4.1% 3.6% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007241400.pktlen.png)
detailed numbers
[ 32- 63]: 4810729
[ 64- 127]: 10622118
[ 128- 255]: 2070147
[ 256- 511]: 1866594
[ 512- 1023]: 1000316
[ 1024- 2047]: 14515222
Protocol Breakdown
![[protocol breakdown chart]](201007241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34885126 (100.00%) 23699201466 (100.00%) 679.35
ip 34794053 ( 99.74%) 23661405930 ( 99.84%) 680.04
tcp 22321910 ( 63.99%) 18064066814 ( 76.22%) 809.25
http(s) 8949882 ( 25.66%) 12008936917 ( 50.67%) 1341.80
http(c) 6130004 ( 17.57%) 996119912 ( 4.20%) 162.50
squid 297789 ( 0.85%) 125464772 ( 0.53%) 421.32
smtp 289792 ( 0.83%) 63459050 ( 0.27%) 218.98
nntp 117 ( 0.00%) 10991 ( 0.00%) 93.94
ftp 65072 ( 0.19%) 8317259 ( 0.04%) 127.82
pop3 12595 ( 0.04%) 3474204 ( 0.01%) 275.84
imap 2855 ( 0.01%) 788278 ( 0.00%) 276.10
telnet 159291 ( 0.46%) 11715186 ( 0.05%) 73.55
ssh 499309 ( 1.43%) 83568074 ( 0.35%) 167.37
dns 2437 ( 0.01%) 183237 ( 0.00%) 75.19
bgp 147 ( 0.00%) 41661 ( 0.00%) 283.41
napster 23 ( 0.00%) 1932 ( 0.00%) 84.00
realaud 116 ( 0.00%) 16744 ( 0.00%) 144.34
rtsp 110081 ( 0.32%) 101456702 ( 0.43%) 921.65
icecast 2554 ( 0.01%) 423440 ( 0.00%) 165.79
hotline 202 ( 0.00%) 33891 ( 0.00%) 167.78
other 5799644 ( 16.62%) 4660054564 ( 19.66%) 803.51
udp 8199933 ( 23.51%) 3778730780 ( 15.94%) 460.82
dns 949664 ( 2.72%) 187610010 ( 0.79%) 197.55
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 18 ( 0.00%) 1653 ( 0.00%) 91.83
halflif 258 ( 0.00%) 37062 ( 0.00%) 143.65
starcra 44 ( 0.00%) 7137 ( 0.00%) 162.20
everque 2258 ( 0.01%) 372096 ( 0.00%) 164.79
unreal 34 ( 0.00%) 3922 ( 0.00%) 115.35
quake 32 ( 0.00%) 4488 ( 0.00%) 140.25
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 7246513 ( 20.77%) 3590541733 ( 15.15%) 495.49
icmp 954797 ( 2.74%) 143712001 ( 0.61%) 150.52
ipip 381 ( 0.00%) 44648 ( 0.00%) 117.19
ipsec 5311 ( 0.02%) 835538 ( 0.00%) 157.32
ip6 3310921 ( 9.49%) 1673903859 ( 7.06%) 505.57
other 800 ( 0.00%) 112290 ( 0.00%) 140.36
frag 4139 ( 0.01%) 3373326 ( 0.01%) 815.01
ip6 91073 ( 0.26%) 37795536 ( 0.16%) 415.00
tcp6 29497 ( 0.08%) 8642107 ( 0.04%) 292.98
http(s) 354 ( 0.00%) 188490 ( 0.00%) 532.46
http(c) 506 ( 0.00%) 56938 ( 0.00%) 112.53
smtp 119 ( 0.00%) 40083 ( 0.00%) 336.83
pop3 22 ( 0.00%) 2028 ( 0.00%) 92.18
imap 321 ( 0.00%) 36477 ( 0.00%) 113.64
ssh 62 ( 0.00%) 13316 ( 0.00%) 214.77
dns 220 ( 0.00%) 86590 ( 0.00%) 393.59
bgp 116 ( 0.00%) 15065 ( 0.00%) 129.87
icecast 20 ( 0.00%) 3793 ( 0.00%) 189.65
other 27757 ( 0.08%) 8199327 ( 0.03%) 295.40
udp6 29370 ( 0.08%) 8562223 ( 0.04%) 291.53
dns 12308 ( 0.04%) 3078537 ( 0.01%) 250.12
starcra 3 ( 0.00%) 887 ( 0.00%) 295.67
other 17059 ( 0.05%) 5482799 ( 0.02%) 321.40
icmp6 4907 ( 0.01%) 952303 ( 0.00%) 194.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27269 ( 0.08%) 19634823 ( 0.08%) 720.04
tcpdump file: 201007241400.dump.gz (891.80 MB)