Traffic Trace Info
DumpFile: 201008021400.dump
FileSize: 2678.11MB
Id: 201008021400
StartTime: Mon Aug 2 14:00:01 2010
EndTime: Mon Aug 2 14:15:01 2010
TotalTime: 900.57 seconds
TotalCapSize: -1988.29MB CapLen: 96 bytes
# of packets: 37381261 (23565.68MB)
AvgRate: 219.53Mbps stddev:24.90M
IP flow (unique src/dst pair) Information
# of flows: 934679 (avg. 39.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 3.7% 2.7% 2.5% 1.6% 1.2% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 546700
Top 10 bandwidth usage (bytes/total in %):
12.5% 10.9% 7.8% 7.7% 5.8% 3.8% 3.8% 3.6% 2.8% 2.8%
# of IPv6 addresses: 1987
Top 10 bandwidth usage (bytes/total in %):
31.2% 31.2% 29.8% 22.2% 22.2% 16.1% 5.5% 5.3% 5.0% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008021400.pktlen.png)
detailed numbers
[ 32- 63]: 5813845
[ 64- 127]: 11178606
[ 128- 255]: 2604697
[ 256- 511]: 1703970
[ 512- 1023]: 1112334
[ 1024- 2047]: 14967809
Protocol Breakdown
![[protocol breakdown chart]](201008021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37381261 (100.00%) 24710407808 (100.00%) 661.04
ip 37127782 ( 99.32%) 24549363746 ( 99.35%) 661.21
tcp 24837133 ( 66.44%) 18148079290 ( 73.44%) 730.68
http(s) 10108241 ( 27.04%) 13716561472 ( 55.51%) 1356.97
http(c) 7954074 ( 21.28%) 1071835909 ( 4.34%) 134.75
squid 520279 ( 1.39%) 210017443 ( 0.85%) 403.66
smtp 507505 ( 1.36%) 95540098 ( 0.39%) 188.25
nntp 57 ( 0.00%) 7956 ( 0.00%) 139.58
ftp 27292 ( 0.07%) 2738943 ( 0.01%) 100.36
pop3 50929 ( 0.14%) 46547481 ( 0.19%) 913.97
imap 3192 ( 0.01%) 1295350 ( 0.01%) 405.81
telnet 1414 ( 0.00%) 96622 ( 0.00%) 68.33
ssh 1213483 ( 3.25%) 181593189 ( 0.73%) 149.65
dns 3424 ( 0.01%) 257593 ( 0.00%) 75.23
bgp 163 ( 0.00%) 67964 ( 0.00%) 416.96
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
realaud 58 ( 0.00%) 6053 ( 0.00%) 104.36
rtsp 14300 ( 0.04%) 15467142 ( 0.06%) 1081.62
icecast 30176 ( 0.08%) 19673977 ( 0.08%) 651.97
hotline 15 ( 0.00%) 1753 ( 0.00%) 116.87
other 4402527 ( 11.78%) 2786370099 ( 11.28%) 632.90
udp 8425084 ( 22.54%) 4388177317 ( 17.76%) 520.85
dns 831423 ( 2.22%) 147785702 ( 0.60%) 177.75
realaud 16 ( 0.00%) 2793 ( 0.00%) 174.56
halflif 46 ( 0.00%) 4900 ( 0.00%) 106.52
starcra 948 ( 0.00%) 131544 ( 0.00%) 138.76
everque 832 ( 0.00%) 285152 ( 0.00%) 342.73
unreal 18 ( 0.00%) 2603 ( 0.00%) 144.61
quake 25 ( 0.00%) 3299 ( 0.00%) 131.96
cuseeme 5 ( 0.00%) 485 ( 0.00%) 97.00
other 7590400 ( 20.31%) 4239775728 ( 17.16%) 558.57
icmp 399161 ( 1.07%) 86933785 ( 0.35%) 217.79
ipip 352 ( 0.00%) 41413 ( 0.00%) 117.65
ipsec 3728 ( 0.01%) 2429488 ( 0.01%) 651.69
ip6 3459556 ( 9.25%) 1923235487 ( 7.78%) 555.92
other 2768 ( 0.01%) 466966 ( 0.00%) 168.70
frag 5901 ( 0.02%) 4766558 ( 0.02%) 807.75
ip6 253479 ( 0.68%) 161044062 ( 0.65%) 635.33
tcp6 59930 ( 0.16%) 39355697 ( 0.16%) 656.69
http(s) 339 ( 0.00%) 215328 ( 0.00%) 635.19
http(c) 1039 ( 0.00%) 116967 ( 0.00%) 112.58
smtp 110 ( 0.00%) 26684 ( 0.00%) 242.58
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
imap 326 ( 0.00%) 40435 ( 0.00%) 124.03
ssh 2351 ( 0.01%) 474202 ( 0.00%) 201.70
dns 154 ( 0.00%) 21996 ( 0.00%) 142.83
bgp 114 ( 0.00%) 14458 ( 0.00%) 126.82
other 55464 ( 0.15%) 38442585 ( 0.16%) 693.11
udp6 34232 ( 0.09%) 12021698 ( 0.05%) 351.18
dns 15910 ( 0.04%) 3790185 ( 0.02%) 238.23
other 18322 ( 0.05%) 8231513 ( 0.03%) 449.27
icmp6 4382 ( 0.01%) 878470 ( 0.00%) 200.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 154905 ( 0.41%) 108784117 ( 0.44%) 702.26
tcpdump file: 201008021400.dump.gz (956.56 MB)