Traffic Trace Info
DumpFile: 201008061400.dump
FileSize: 2708.23MB
Id: 201008061400
StartTime: Fri Aug 6 14:00:01 2010
EndTime: Fri Aug 6 14:15:01 2010
TotalTime: 899.67 seconds
TotalCapSize: -1971.42MB CapLen: 96 bytes
# of packets: 38237386 (23427.08MB)
AvgRate: 218.46Mbps stddev:17.98M
IP flow (unique src/dst pair) Information
# of flows: 1087501 (avg. 35.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.7% 1.9% 1.1% 0.9% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 625196
Top 10 bandwidth usage (bytes/total in %):
12.8% 8.8% 8.7% 6.1% 5.4% 3.7% 3.2% 2.8% 2.8% 2.0%
# of IPv6 addresses: 2287
Top 10 bandwidth usage (bytes/total in %):
42.7% 42.6% 10.7% 10.7% 6.9% 6.9% 3.7% 3.7% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008061400.pktlen.png)
detailed numbers
[ 32- 63]: 6367690
[ 64- 127]: 11460711
[ 128- 255]: 2453427
[ 256- 511]: 1794618
[ 512- 1023]: 1136774
[ 1024- 2047]: 15024166
Protocol Breakdown
![[protocol breakdown chart]](201008061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38237386 (100.00%) 24565072560 (100.00%) 642.44
ip 38148656 ( 99.77%) 24523996707 ( 99.83%) 642.85
tcp 23936943 ( 62.60%) 17672737015 ( 71.94%) 738.30
http(s) 9587616 ( 25.07%) 12869715054 ( 52.39%) 1342.33
http(c) 7830490 ( 20.48%) 832664263 ( 3.39%) 106.34
squid 361004 ( 0.94%) 181784260 ( 0.74%) 503.55
smtp 345068 ( 0.90%) 137773137 ( 0.56%) 399.26
nntp 19 ( 0.00%) 1690 ( 0.00%) 88.95
ftp 35970 ( 0.09%) 6823942 ( 0.03%) 189.71
pop3 15709 ( 0.04%) 7343364 ( 0.03%) 467.46
imap 3242 ( 0.01%) 1139878 ( 0.00%) 351.60
telnet 2090 ( 0.01%) 150940 ( 0.00%) 72.22
ssh 159587 ( 0.42%) 24448278 ( 0.10%) 153.20
dns 3487 ( 0.01%) 294565 ( 0.00%) 84.48
bgp 167 ( 0.00%) 60400 ( 0.00%) 361.68
napster 24 ( 0.00%) 2304 ( 0.00%) 96.00
realaud 115 ( 0.00%) 18263 ( 0.00%) 158.81
rtsp 9435 ( 0.02%) 11543661 ( 0.05%) 1223.49
icecast 51662 ( 0.14%) 32016665 ( 0.13%) 619.73
other 5531248 ( 14.47%) 3566955751 ( 14.52%) 644.87
udp 9759055 ( 25.52%) 4537003913 ( 18.47%) 464.90
dns 1454755 ( 3.80%) 262971002 ( 1.07%) 180.77
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 34 ( 0.00%) 3591 ( 0.00%) 105.62
halflif 103 ( 0.00%) 8075 ( 0.00%) 78.40
starcra 60 ( 0.00%) 7853 ( 0.00%) 130.88
everque 564 ( 0.00%) 110300 ( 0.00%) 195.57
unreal 67 ( 0.00%) 8709 ( 0.00%) 129.99
quake 27 ( 0.00%) 3029 ( 0.00%) 112.19
cuseeme 7 ( 0.00%) 511 ( 0.00%) 73.00
other 8303218 ( 21.71%) 4273776242 ( 17.40%) 514.71
icmp 624535 ( 1.63%) 127723261 ( 0.52%) 204.51
ipip 353 ( 0.00%) 43048 ( 0.00%) 121.95
ipsec 363 ( 0.00%) 64930 ( 0.00%) 178.87
ip6 3825459 ( 10.00%) 2186123251 ( 8.90%) 571.47
other 1948 ( 0.01%) 301289 ( 0.00%) 154.67
frag 6229 ( 0.02%) 3664705 ( 0.01%) 588.33
ip6 88730 ( 0.23%) 41075853 ( 0.17%) 462.93
tcp6 60380 ( 0.16%) 34929882 ( 0.14%) 578.50
http(s) 473 ( 0.00%) 376916 ( 0.00%) 796.86
http(c) 1817 ( 0.00%) 197043 ( 0.00%) 108.44
smtp 293 ( 0.00%) 131556 ( 0.00%) 449.00
imap 252 ( 0.00%) 29253 ( 0.00%) 116.08
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 256 ( 0.00%) 26973 ( 0.00%) 105.36
bgp 117 ( 0.00%) 16060 ( 0.00%) 137.26
icecast 14 ( 0.00%) 1773 ( 0.00%) 126.64
other 57156 ( 0.15%) 34150148 ( 0.14%) 597.49
udp6 21340 ( 0.06%) 4874088 ( 0.02%) 228.40
dns 15503 ( 0.04%) 3898420 ( 0.02%) 251.46
other 5837 ( 0.02%) 975668 ( 0.00%) 167.15
icmp6 6843 ( 0.02%) 1189018 ( 0.00%) 173.76
dstopt6 70 ( 0.00%) 9800 ( 0.00%) 140.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 67 ( 0.00%) 68985 ( 0.00%) 1029.63
tcpdump file: 201008061400.dump.gz (973.87 MB)