Traffic Trace Info
DumpFile: 201007281400.dump
FileSize: 2585.88MB
Id: 201007281400
StartTime: Wed Jul 28 14:00:00 2010
EndTime: Wed Jul 28 14:15:00 2010
TotalTime: 899.91 seconds
TotalCapSize: 2030.26MB CapLen: 96 bytes
# of packets: 36412299 (23426.41MB)
AvgRate: 218.37Mbps stddev:23.71M
IP flow (unique src/dst pair) Information
# of flows: 939469 (avg. 38.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.8% 1.3% 1.1% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 514494
Top 10 bandwidth usage (bytes/total in %):
11.3% 7.8% 6.7% 5.5% 5.3% 4.3% 2.7% 2.6% 2.4% 2.4%
# of IPv6 addresses: 1823
Top 10 bandwidth usage (bytes/total in %):
31.0% 31.0% 20.2% 20.2% 17.2% 17.0% 3.5% 3.5% 3.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007281400.pktlen.png)
detailed numbers
[ 32- 63]: 6031049
[ 64- 127]: 10288478
[ 128- 255]: 2403338
[ 256- 511]: 1668837
[ 512- 1023]: 1057758
[ 1024- 2047]: 14962839
Protocol Breakdown
![[protocol breakdown chart]](201007281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36412299 (100.00%) 24564374696 (100.00%) 674.62
ip 36328883 ( 99.77%) 24528909257 ( 99.86%) 675.19
tcp 23513631 ( 64.58%) 17827672812 ( 72.58%) 758.18
http(s) 10084494 ( 27.70%) 13551454600 ( 55.17%) 1343.79
http(c) 7269536 ( 19.96%) 911714306 ( 3.71%) 125.42
squid 339799 ( 0.93%) 205371473 ( 0.84%) 604.39
smtp 553142 ( 1.52%) 145893907 ( 0.59%) 263.75
nntp 32 ( 0.00%) 2511 ( 0.00%) 78.47
ftp 57717 ( 0.16%) 9557690 ( 0.04%) 165.60
pop3 22007 ( 0.06%) 11531214 ( 0.05%) 523.98
imap 3181 ( 0.01%) 1219547 ( 0.00%) 383.38
telnet 1329 ( 0.00%) 98102 ( 0.00%) 73.82
ssh 199929 ( 0.55%) 65029254 ( 0.26%) 325.26
dns 3078 ( 0.01%) 233477 ( 0.00%) 75.85
bgp 166 ( 0.00%) 70171 ( 0.00%) 422.72
napster 95 ( 0.00%) 14644 ( 0.00%) 154.15
realaud 121 ( 0.00%) 19015 ( 0.00%) 157.15
rtsp 13439 ( 0.04%) 14312129 ( 0.06%) 1064.97
icecast 32428 ( 0.09%) 23573184 ( 0.10%) 726.94
hotline 6 ( 0.00%) 404 ( 0.00%) 67.33
other 4933132 ( 13.55%) 2887577184 ( 11.76%) 585.34
udp 8518576 ( 23.39%) 4671025354 ( 19.02%) 548.33
dns 1078322 ( 2.96%) 212931188 ( 0.87%) 197.47
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 1881 ( 0.01%) 116718 ( 0.00%) 62.05
halflif 77 ( 0.00%) 9123 ( 0.00%) 118.48
starcra 44 ( 0.00%) 4939 ( 0.00%) 112.25
everque 17734 ( 0.05%) 3553196 ( 0.01%) 200.36
unreal 64 ( 0.00%) 9844 ( 0.00%) 153.81
quake 30 ( 0.00%) 3027 ( 0.00%) 100.90
cuseeme 16 ( 0.00%) 1685 ( 0.00%) 105.31
other 7420259 ( 20.38%) 4454320715 ( 18.13%) 600.29
icmp 615380 ( 1.69%) 55660943 ( 0.23%) 90.45
igmp 2 ( 0.00%) 120 ( 0.00%) 60.00
ipip 349 ( 0.00%) 40006 ( 0.00%) 114.63
ipsec 355960 ( 0.98%) 49473480 ( 0.20%) 138.99
ip6 3324204 ( 9.13%) 1924925544 ( 7.84%) 579.06
other 781 ( 0.00%) 110998 ( 0.00%) 142.12
frag 2825 ( 0.01%) 2338247 ( 0.01%) 827.70
ip6 83416 ( 0.23%) 35465439 ( 0.14%) 425.16
tcp6 42538 ( 0.12%) 28314122 ( 0.12%) 665.62
http(s) 470 ( 0.00%) 424820 ( 0.00%) 903.87
http(c) 888 ( 0.00%) 92474 ( 0.00%) 104.14
smtp 287 ( 0.00%) 125785 ( 0.00%) 438.28
imap 275 ( 0.00%) 31897 ( 0.00%) 115.99
ssh 2304 ( 0.01%) 499468 ( 0.00%) 216.78
dns 317 ( 0.00%) 54860 ( 0.00%) 173.06
bgp 123 ( 0.00%) 21063 ( 0.00%) 171.24
other 37874 ( 0.10%) 27063755 ( 0.11%) 714.57
udp6 36008 ( 0.10%) 6111953 ( 0.02%) 169.74
dns 17178 ( 0.05%) 4156401 ( 0.02%) 241.96
starcra 4 ( 0.00%) 941 ( 0.00%) 235.25
other 18826 ( 0.05%) 1954611 ( 0.01%) 103.83
icmp6 4745 ( 0.01%) 945799 ( 0.00%) 199.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 95 ( 0.00%) 89485 ( 0.00%) 941.95
tcpdump file: 201007281400.dump.gz (931.43 MB)