Traffic Trace Info
DumpFile: 201008011400.dump
FileSize: 1957.22MB
Id: 201008011400
StartTime: Sun Aug 1 14:00:01 2010
EndTime: Sun Aug 1 14:15:00 2010
TotalTime: 899.73 seconds
TotalCapSize: 1541.86MB CapLen: 96 bytes
# of packets: 27220366 (17920.63MB)
AvgRate: 167.06Mbps stddev:20.14M
IP flow (unique src/dst pair) Information
# of flows: 732455 (avg. 37.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.0% 1.8% 1.3% 1.2% 1.2% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 424293
Top 10 bandwidth usage (bytes/total in %):
13.5% 9.9% 6.5% 3.5% 3.1% 3.1% 2.5% 2.5% 2.2% 2.1%
# of IPv6 addresses: 1829
Top 10 bandwidth usage (bytes/total in %):
60.8% 60.8% 19.1% 19.0% 2.6% 2.6% 1.2% 1.0% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008011400.pktlen.png)
detailed numbers
[ 32- 63]: 3595294
[ 64- 127]: 8093176
[ 128- 255]: 1666022
[ 256- 511]: 1601270
[ 512- 1023]: 809927
[ 1024- 2047]: 11454677
Protocol Breakdown
![[protocol breakdown chart]](201008011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27220366 (100.00%) 18791138330 (100.00%) 690.33
ip 27130815 ( 99.67%) 18749206470 ( 99.78%) 691.07
tcp 16152044 ( 59.34%) 13312479822 ( 70.84%) 824.20
http(s) 7322587 ( 26.90%) 10030494368 ( 53.38%) 1369.80
http(c) 4138161 ( 15.20%) 511212720 ( 2.72%) 123.54
squid 561663 ( 2.06%) 213037908 ( 1.13%) 379.30
smtp 405964 ( 1.49%) 63235163 ( 0.34%) 155.77
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 32809 ( 0.12%) 2965429 ( 0.02%) 90.38
pop3 23916 ( 0.09%) 4653847 ( 0.02%) 194.59
imap 1369 ( 0.01%) 407124 ( 0.00%) 297.39
telnet 1261 ( 0.00%) 87092 ( 0.00%) 69.07
ssh 418702 ( 1.54%) 586006763 ( 3.12%) 1399.58
dns 3000 ( 0.01%) 260145 ( 0.00%) 86.72
bgp 156 ( 0.00%) 58764 ( 0.00%) 376.69
napster 159 ( 0.00%) 11214 ( 0.00%) 70.53
realaud 85 ( 0.00%) 5858 ( 0.00%) 68.92
rtsp 19085 ( 0.07%) 19271622 ( 0.10%) 1009.78
icecast 863 ( 0.00%) 80783 ( 0.00%) 93.61
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3222256 ( 11.84%) 1880689176 ( 10.01%) 583.66
udp 7210612 ( 26.49%) 3435255936 ( 18.28%) 476.42
dns 879714 ( 3.23%) 182813679 ( 0.97%) 207.81
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 29 ( 0.00%) 3617 ( 0.00%) 124.72
halflif 38 ( 0.00%) 3884 ( 0.00%) 102.21
starcra 62 ( 0.00%) 10268 ( 0.00%) 165.61
everque 322 ( 0.00%) 52888 ( 0.00%) 164.25
unreal 175 ( 0.00%) 19396 ( 0.00%) 110.83
quake 11 ( 0.00%) 900 ( 0.00%) 81.82
cuseeme 3 ( 0.00%) 215 ( 0.00%) 71.67
other 6329161 ( 23.25%) 3252164198 ( 17.31%) 513.84
icmp 427645 ( 1.57%) 108831657 ( 0.58%) 254.49
ipip 324 ( 0.00%) 39992 ( 0.00%) 123.43
ipsec 3760 ( 0.01%) 2371272 ( 0.01%) 630.66
ip6 3310153 ( 12.16%) 1873316709 ( 9.97%) 565.93
other 26277 ( 0.10%) 16911082 ( 0.09%) 643.57
frag 3594 ( 0.01%) 2967033 ( 0.02%) 825.55
ip6 89551 ( 0.33%) 41931860 ( 0.22%) 468.25
tcp6 32041 ( 0.12%) 12152227 ( 0.06%) 379.27
http(s) 439 ( 0.00%) 310854 ( 0.00%) 708.10
http(c) 3287 ( 0.01%) 296807 ( 0.00%) 90.30
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 157 ( 0.00%) 43177 ( 0.00%) 275.01
imap 325 ( 0.00%) 40088 ( 0.00%) 123.35
dns 162 ( 0.00%) 30892 ( 0.00%) 190.69
bgp 121 ( 0.00%) 16433 ( 0.00%) 135.81
other 27547 ( 0.10%) 11413722 ( 0.06%) 414.34
udp6 18456 ( 0.07%) 4524502 ( 0.02%) 245.15
dns 10793 ( 0.04%) 2516692 ( 0.01%) 233.18
everque 1 ( 0.00%) 115 ( 0.00%) 115.00
unreal 32 ( 0.00%) 3373 ( 0.00%) 105.41
other 7630 ( 0.03%) 2004322 ( 0.01%) 262.69
icmp6 4294 ( 0.02%) 847605 ( 0.00%) 197.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34730 ( 0.13%) 24403446 ( 0.13%) 702.66
tcpdump file: 201008011400.dump.gz (699.05 MB)