Traffic Trace Info
DumpFile: 201007261400.dump
FileSize: 3019.39MB
Id: 201007261400
StartTime: Mon Jul 26 14:00:01 2010
EndTime: Mon Jul 26 14:15:01 2010
TotalTime: 900.07 seconds
TotalCapSize: -1731.40MB CapLen: 96 bytes
# of packets: 42911542 (27215.18MB)
AvgRate: 253.66Mbps stddev:18.05M
IP flow (unique src/dst pair) Information
# of flows: 955022 (avg. 44.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.8% 3.1% 0.9% 0.7% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 543718
Top 10 bandwidth usage (bytes/total in %):
11.7% 10.9% 10.8% 8.3% 6.1% 4.2% 3.8% 3.2% 2.8% 2.5%
# of IPv6 addresses: 2215
Top 10 bandwidth usage (bytes/total in %):
27.8% 27.8% 20.2% 20.2% 16.9% 16.9% 11.6% 11.6% 4.4% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007261400.pktlen.png)
detailed numbers
[ 32- 63]: 6191639
[ 64- 127]: 10254085
[ 128- 255]: 2259507
[ 256- 511]: 1861273
[ 512- 1023]: 6599208
[ 1024- 2047]: 15745830
Protocol Breakdown
![[protocol breakdown chart]](201007261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42911542 (100.00%) 28537189266 (100.00%) 665.02
ip 42778100 ( 99.69%) 28441831795 ( 99.67%) 664.87
tcp 23537557 ( 54.85%) 18108741563 ( 63.46%) 769.36
http(s) 9987946 ( 23.28%) 13140742172 ( 46.05%) 1315.66
http(c) 8133289 ( 18.95%) 1710897001 ( 6.00%) 210.36
squid 246899 ( 0.58%) 134203835 ( 0.47%) 543.56
smtp 481220 ( 1.12%) 127422068 ( 0.45%) 264.79
nntp 19 ( 0.00%) 1789 ( 0.00%) 94.16
ftp 48557 ( 0.11%) 8543172 ( 0.03%) 175.94
pop3 31568 ( 0.07%) 12861728 ( 0.05%) 407.43
imap 4988 ( 0.01%) 2385815 ( 0.01%) 478.31
telnet 1680 ( 0.00%) 152455 ( 0.00%) 90.75
ssh 97145 ( 0.23%) 15958017 ( 0.06%) 164.27
dns 2292 ( 0.01%) 184615 ( 0.00%) 80.55
bgp 143 ( 0.00%) 48246 ( 0.00%) 337.38
napster 18 ( 0.00%) 5012 ( 0.00%) 278.44
realaud 48 ( 0.00%) 3446 ( 0.00%) 71.79
rtsp 8074 ( 0.02%) 7789449 ( 0.03%) 964.76
icecast 32099 ( 0.07%) 16533341 ( 0.06%) 515.07
other 4461541 ( 10.40%) 2931007542 ( 10.27%) 656.95
udp 14717041 ( 34.30%) 7879782401 ( 27.61%) 535.42
dns 6585990 ( 15.35%) 3278225386 ( 11.49%) 497.76
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 26 ( 0.00%) 7229 ( 0.00%) 278.04
halflif 61 ( 0.00%) 6567 ( 0.00%) 107.66
starcra 42 ( 0.00%) 4634 ( 0.00%) 110.33
everque 607 ( 0.00%) 106785 ( 0.00%) 175.92
unreal 27 ( 0.00%) 3359 ( 0.00%) 124.41
quake 33 ( 0.00%) 7794 ( 0.00%) 236.18
cuseeme 6 ( 0.00%) 734 ( 0.00%) 122.33
other 8130144 ( 18.95%) 4601354838 ( 16.12%) 565.96
icmp 475828 ( 1.11%) 40499491 ( 0.14%) 85.11
igmp 2 ( 0.00%) 120 ( 0.00%) 60.00
ipip 358 ( 0.00%) 42730 ( 0.00%) 119.36
ipsec 5412 ( 0.01%) 1205802 ( 0.00%) 222.80
ip6 3988394 ( 9.29%) 2391815516 ( 8.38%) 599.69
other 53508 ( 0.12%) 19744172 ( 0.07%) 368.99
frag 9035 ( 0.02%) 10433601 ( 0.04%) 1154.80
ip6 133442 ( 0.31%) 95357471 ( 0.33%) 714.60
tcp6 76593 ( 0.18%) 71690417 ( 0.25%) 935.99
http(s) 853 ( 0.00%) 674253 ( 0.00%) 790.45
http(c) 2101 ( 0.00%) 207416 ( 0.00%) 98.72
squid 54 ( 0.00%) 7376 ( 0.00%) 136.59
smtp 412 ( 0.00%) 268221 ( 0.00%) 651.02
imap 281 ( 0.00%) 33267 ( 0.00%) 118.39
dns 215 ( 0.00%) 53827 ( 0.00%) 250.36
bgp 109 ( 0.00%) 13859 ( 0.00%) 127.15
other 72568 ( 0.17%) 70432198 ( 0.25%) 970.57
udp6 32396 ( 0.08%) 8942600 ( 0.03%) 276.04
dns 17353 ( 0.04%) 4218965 ( 0.01%) 243.13
other 15043 ( 0.04%) 4723635 ( 0.02%) 314.01
icmp6 4974 ( 0.01%) 990605 ( 0.00%) 199.16
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 19448 ( 0.05%) 13729633 ( 0.05%) 705.97
tcpdump file: 201007261400.dump.gz (1080.21 MB)