Traffic Trace Info
DumpFile: 201008071400.dump
FileSize: 2037.95MB
Id: 201008071400
StartTime: Sat Aug 7 14:00:01 2010
EndTime: Sat Aug 7 14:15:01 2010
TotalTime: 900.20 seconds
TotalCapSize: 1600.29MB CapLen: 96 bytes
# of packets: 28680565 (19024.79MB)
AvgRate: 177.29Mbps stddev:14.52M
IP flow (unique src/dst pair) Information
# of flows: 776660 (avg. 36.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 2.3% 2.2% 1.6% 1.3% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 445666
Top 10 bandwidth usage (bytes/total in %):
14.5% 10.7% 7.0% 6.9% 5.6% 3.9% 3.6% 3.1% 2.3% 2.3%
# of IPv6 addresses: 1943
Top 10 bandwidth usage (bytes/total in %):
22.1% 22.1% 10.0% 9.6% 9.3% 9.3% 8.8% 8.5% 5.2% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008071400.pktlen.png)
detailed numbers
[ 32- 63]: 3686244
[ 64- 127]: 8126257
[ 128- 255]: 2119530
[ 256- 511]: 1578413
[ 512- 1023]: 802432
[ 1024- 2047]: 12367689
Protocol Breakdown
![[protocol breakdown chart]](201008071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28680565 (100.00%) 19948942803 (100.00%) 695.56
ip 28587108 ( 99.67%) 19920414879 ( 99.86%) 696.83
tcp 15801261 ( 55.09%) 13342815104 ( 66.88%) 844.41
http(s) 8092789 ( 28.22%) 10836127517 ( 54.32%) 1338.99
http(c) 4336923 ( 15.12%) 538079893 ( 2.70%) 124.07
squid 272267 ( 0.95%) 115696644 ( 0.58%) 424.94
smtp 215621 ( 0.75%) 36812199 ( 0.18%) 170.73
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 73212 ( 0.26%) 7657961 ( 0.04%) 104.60
pop3 10460 ( 0.04%) 3883257 ( 0.02%) 371.25
imap 32888 ( 0.11%) 29799333 ( 0.15%) 906.09
telnet 756 ( 0.00%) 54046 ( 0.00%) 71.49
ssh 163052 ( 0.57%) 20215211 ( 0.10%) 123.98
dns 3371 ( 0.01%) 281755 ( 0.00%) 83.58
bgp 140 ( 0.00%) 52368 ( 0.00%) 374.06
napster 163 ( 0.00%) 19372 ( 0.00%) 118.85
realaud 20 ( 0.00%) 1552 ( 0.00%) 77.60
rtsp 6265 ( 0.02%) 7695900 ( 0.04%) 1228.40
icecast 12175 ( 0.04%) 822939 ( 0.00%) 67.59
other 2581155 ( 9.00%) 1745614913 ( 8.75%) 676.29
udp 8645064 ( 30.14%) 4308788538 ( 21.60%) 498.41
dns 1403562 ( 4.89%) 272286840 ( 1.36%) 194.00
rip 4 ( 0.00%) 240 ( 0.00%) 60.00
realaud 913 ( 0.00%) 55353 ( 0.00%) 60.63
halflif 185 ( 0.00%) 27317 ( 0.00%) 147.66
starcra 83 ( 0.00%) 12806 ( 0.00%) 154.29
everque 511 ( 0.00%) 102085 ( 0.00%) 199.77
unreal 82 ( 0.00%) 14994 ( 0.00%) 182.85
quake 20 ( 0.00%) 1780 ( 0.00%) 89.00
other 7239405 ( 25.24%) 4036125110 ( 20.23%) 557.52
icmp 560169 ( 1.95%) 119827671 ( 0.60%) 213.91
ipip 309 ( 0.00%) 37606 ( 0.00%) 121.70
ipsec 542 ( 0.00%) 107588 ( 0.00%) 198.50
ip6 3578659 ( 12.48%) 2148676604 ( 10.77%) 600.41
other 1104 ( 0.00%) 161768 ( 0.00%) 146.53
frag 1206 ( 0.00%) 1243423 ( 0.01%) 1031.03
ip6 93457 ( 0.33%) 28527924 ( 0.14%) 305.25
tcp6 41154 ( 0.14%) 18343398 ( 0.09%) 445.73
http(s) 561 ( 0.00%) 487231 ( 0.00%) 868.50
http(c) 811 ( 0.00%) 84777 ( 0.00%) 104.53
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 204 ( 0.00%) 109867 ( 0.00%) 538.56
ftp 2174 ( 0.01%) 207919 ( 0.00%) 95.64
imap 386 ( 0.00%) 45971 ( 0.00%) 119.10
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 271 ( 0.00%) 45570 ( 0.00%) 168.15
bgp 119 ( 0.00%) 17577 ( 0.00%) 147.71
other 36623 ( 0.13%) 17344072 ( 0.09%) 473.58
udp6 44291 ( 0.15%) 7325380 ( 0.04%) 165.39
dns 14176 ( 0.05%) 3323270 ( 0.02%) 234.43
other 30115 ( 0.11%) 4002110 ( 0.02%) 132.89
icmp6 5329 ( 0.02%) 978779 ( 0.00%) 183.67
dstopt6 55 ( 0.00%) 7700 ( 0.00%) 140.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2598 ( 0.01%) 1868587 ( 0.01%) 719.24
tcpdump file: 201008071400.dump.gz (725.08 MB)