Traffic Trace Info
DumpFile: 201008051400.dump
FileSize: 2354.10MB
Id: 201008051400
StartTime: Thu Aug 5 14:00:00 2010
EndTime: Thu Aug 5 14:15:01 2010
TotalTime: 900.63 seconds
TotalCapSize: 1849.35MB CapLen: 96 bytes
# of packets: 33073610 (20898.53MB)
AvgRate: 194.68Mbps stddev:24.78M
IP flow (unique src/dst pair) Information
# of flows: 811224 (avg. 40.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 4.5% 3.1% 2.1% 1.1% 0.9% 0.9% 0.9% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 444704
Top 10 bandwidth usage (bytes/total in %):
13.7% 11.3% 7.8% 5.4% 5.2% 5.0% 4.9% 4.6% 4.1% 3.3%
# of IPv6 addresses: 2334
Top 10 bandwidth usage (bytes/total in %):
68.5% 68.5% 6.3% 6.3% 5.2% 5.2% 2.8% 2.8% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008051400.pktlen.png)
detailed numbers
[ 32- 63]: 5040462
[ 64- 127]: 9785824
[ 128- 255]: 2300811
[ 256- 511]: 1729897
[ 512- 1023]: 889339
[ 1024- 2047]: 13327277
Protocol Breakdown
![[protocol breakdown chart]](201008051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33073610 (100.00%) 21913702201 (100.00%) 662.57
ip 32935253 ( 99.58%) 21803652768 ( 99.50%) 662.02
tcp 21042565 ( 63.62%) 16465074402 ( 75.14%) 782.47
http(s) 8390192 ( 25.37%) 11288683204 ( 51.51%) 1345.46
http(c) 6027760 ( 18.23%) 771056854 ( 3.52%) 127.92
squid 303676 ( 0.92%) 118788876 ( 0.54%) 391.17
smtp 334678 ( 1.01%) 94160235 ( 0.43%) 281.35
nntp 28 ( 0.00%) 2225 ( 0.00%) 79.46
ftp 61716 ( 0.19%) 42235601 ( 0.19%) 684.35
pop3 14512 ( 0.04%) 6176374 ( 0.03%) 425.60
imap 3327 ( 0.01%) 681276 ( 0.00%) 204.77
telnet 1833 ( 0.01%) 130130 ( 0.00%) 70.99
ssh 97351 ( 0.29%) 22503924 ( 0.10%) 231.16
dns 3059 ( 0.01%) 282470 ( 0.00%) 92.34
bgp 177 ( 0.00%) 77951 ( 0.00%) 440.40
napster 693 ( 0.00%) 479036 ( 0.00%) 691.25
realaud 72 ( 0.00%) 8300 ( 0.00%) 115.28
rtsp 11697 ( 0.04%) 12833443 ( 0.06%) 1097.16
icecast 820 ( 0.00%) 52546 ( 0.00%) 64.08
hotline 12 ( 0.00%) 1499 ( 0.00%) 124.92
other 5790959 ( 17.51%) 4106920278 ( 18.74%) 709.20
udp 8144303 ( 24.62%) 3520890293 ( 16.07%) 432.31
dns 1573170 ( 4.76%) 301868011 ( 1.38%) 191.89
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 33 ( 0.00%) 4277 ( 0.00%) 129.61
halflif 55 ( 0.00%) 6025 ( 0.00%) 109.55
starcra 99 ( 0.00%) 17281 ( 0.00%) 174.56
everque 533 ( 0.00%) 126786 ( 0.00%) 237.87
unreal 60 ( 0.00%) 6537 ( 0.00%) 108.95
quake 85 ( 0.00%) 6961 ( 0.00%) 81.89
cuseeme 6 ( 0.00%) 611 ( 0.00%) 101.83
other 6569817 ( 19.86%) 3218564703 ( 14.69%) 489.90
icmp 476724 ( 1.44%) 107297098 ( 0.49%) 225.07
ipip 354 ( 0.00%) 43306 ( 0.00%) 122.33
ipsec 385 ( 0.00%) 70246 ( 0.00%) 182.46
ip6 3269200 ( 9.88%) 1709984818 ( 7.80%) 523.06
other 1722 ( 0.01%) 292605 ( 0.00%) 169.92
frag 2853 ( 0.01%) 2772433 ( 0.01%) 971.76
ip6 138357 ( 0.42%) 110049433 ( 0.50%) 795.40
tcp6 103839 ( 0.31%) 102904958 ( 0.47%) 991.00
http(s) 415 ( 0.00%) 276661 ( 0.00%) 666.65
http(c) 1321 ( 0.00%) 172732 ( 0.00%) 130.76
smtp 96 ( 0.00%) 38666 ( 0.00%) 402.77
imap 323 ( 0.00%) 36216 ( 0.00%) 112.12
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 206 ( 0.00%) 25155 ( 0.00%) 122.11
bgp 118 ( 0.00%) 15903 ( 0.00%) 134.77
other 101359 ( 0.31%) 102339539 ( 0.47%) 1009.67
udp6 26776 ( 0.08%) 5806419 ( 0.03%) 216.85
dns 16603 ( 0.05%) 4259409 ( 0.02%) 256.54
halflif 1 ( 0.00%) 93 ( 0.00%) 93.00
starcra 1 ( 0.00%) 129 ( 0.00%) 129.00
other 10171 ( 0.03%) 1546788 ( 0.01%) 152.08
icmp6 7563 ( 0.02%) 1268549 ( 0.01%) 167.73
dstopt6 95 ( 0.00%) 13300 ( 0.00%) 140.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 53 ( 0.00%) 51991 ( 0.00%) 980.96
tcpdump file: 201008051400.dump.gz (852.97 MB)