Traffic Trace Info
DumpFile: 201007301400.dump
FileSize: 2409.50MB
Id: 201007301400
StartTime: Fri Jul 30 14:00:01 2010
EndTime: Fri Jul 30 14:15:01 2010
TotalTime: 899.66 seconds
TotalCapSize: 1892.21MB CapLen: 96 bytes
# of packets: 33900444 (21908.99MB)
AvgRate: 204.22Mbps stddev:21.96M
IP flow (unique src/dst pair) Information
# of flows: 1153700 (avg. 29.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.4% 1.6% 1.4% 1.0% 1.0% 1.0% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 643076
Top 10 bandwidth usage (bytes/total in %):
12.8% 8.0% 6.1% 3.6% 3.3% 3.3% 3.0% 2.5% 2.5% 2.4%
# of IPv6 addresses: 2138
Top 10 bandwidth usage (bytes/total in %):
48.6% 44.7% 14.8% 14.8% 14.1% 14.1% 4.0% 3.7% 3.7% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201007301400.pktlen.png)
detailed numbers
[ 32- 63]: 5890260
[ 64- 127]: 9221535
[ 128- 255]: 1997182
[ 256- 511]: 1797909
[ 512- 1023]: 949911
[ 1024- 2047]: 14043647
Protocol Breakdown
![[protocol breakdown chart]](201007301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33900444 (100.00%) 22973238179 (100.00%) 677.67
ip 33700909 ( 99.41%) 22844155032 ( 99.44%) 677.85
tcp 21801399 ( 64.31%) 16749835511 ( 72.91%) 768.29
http(s) 8356058 ( 24.65%) 11205605805 ( 48.78%) 1341.02
http(c) 6695855 ( 19.75%) 1402150808 ( 6.10%) 209.41
squid 826046 ( 2.44%) 440546598 ( 1.92%) 533.32
smtp 508551 ( 1.50%) 97200495 ( 0.42%) 191.13
nntp 45 ( 0.00%) 3810 ( 0.00%) 84.67
ftp 17989 ( 0.05%) 2007642 ( 0.01%) 111.60
pop3 13540 ( 0.04%) 6959862 ( 0.03%) 514.02
imap 3479 ( 0.01%) 528273 ( 0.00%) 151.85
telnet 1410 ( 0.00%) 117055 ( 0.00%) 83.02
ssh 79301 ( 0.23%) 27231587 ( 0.12%) 343.40
dns 3283 ( 0.01%) 298168 ( 0.00%) 90.82
bgp 1542 ( 0.00%) 1154698 ( 0.01%) 748.83
napster 17 ( 0.00%) 1952 ( 0.00%) 114.82
realaud 45 ( 0.00%) 4383 ( 0.00%) 97.40
rtsp 23379 ( 0.07%) 25236683 ( 0.11%) 1079.46
icecast 18138 ( 0.05%) 15737744 ( 0.07%) 867.67
other 5252718 ( 15.49%) 3525049768 ( 15.34%) 671.09
udp 8157038 ( 24.06%) 4196280512 ( 18.27%) 514.44
dns 1041603 ( 3.07%) 203765249 ( 0.89%) 195.63
realaud 917 ( 0.00%) 57678 ( 0.00%) 62.90
halflif 85 ( 0.00%) 11831 ( 0.00%) 139.19
starcra 29 ( 0.00%) 3354 ( 0.00%) 115.66
everque 15607 ( 0.05%) 3215811 ( 0.01%) 206.05
unreal 73 ( 0.00%) 14450 ( 0.00%) 197.95
quake 27 ( 0.00%) 4020 ( 0.00%) 148.89
cuseeme 7 ( 0.00%) 1084 ( 0.00%) 154.86
other 7098492 ( 20.94%) 3989090312 ( 17.36%) 561.96
icmp 423032 ( 1.25%) 53132965 ( 0.23%) 125.60
ipip 386 ( 0.00%) 45716 ( 0.00%) 118.44
ipsec 33935 ( 0.10%) 6296122 ( 0.03%) 185.53
ip6 3282720 ( 9.68%) 1838198776 ( 8.00%) 559.96
other 2399 ( 0.01%) 365430 ( 0.00%) 152.33
frag 1193 ( 0.00%) 1252851 ( 0.01%) 1050.17
ip6 199535 ( 0.59%) 129083147 ( 0.56%) 646.92
tcp6 62783 ( 0.19%) 55003214 ( 0.24%) 876.08
http(s) 918 ( 0.00%) 850768 ( 0.00%) 926.76
http(c) 941 ( 0.00%) 102682 ( 0.00%) 109.12
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 184 ( 0.00%) 90724 ( 0.00%) 493.07
imap 303 ( 0.00%) 34338 ( 0.00%) 113.33
ssh 32 ( 0.00%) 8944 ( 0.00%) 279.50
dns 205 ( 0.00%) 25462 ( 0.00%) 124.20
bgp 179 ( 0.00%) 52828 ( 0.00%) 295.13
other 60018 ( 0.18%) 53837214 ( 0.23%) 897.02
udp6 42763 ( 0.13%) 10717001 ( 0.05%) 250.61
dns 15819 ( 0.05%) 3861568 ( 0.02%) 244.11
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 247 ( 0.00%) 22442 ( 0.00%) 90.86
unreal 3 ( 0.00%) 324 ( 0.00%) 108.00
other 26693 ( 0.08%) 6832561 ( 0.03%) 255.97
icmp6 5064 ( 0.01%) 946366 ( 0.00%) 186.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 88895 ( 0.26%) 62412486 ( 0.27%) 702.09
tcpdump file: 201007301400.dump.gz (865.03 MB)