Traffic Trace Info
DumpFile: 201008081400.dump
FileSize: 2082.13MB
Id: 201008081400
StartTime: Sun Aug 8 14:00:01 2010
EndTime: Sun Aug 8 14:15:00 2010
TotalTime: 899.79 seconds
TotalCapSize: 1629.63MB CapLen: 96 bytes
# of packets: 29647203 (18943.13MB)
AvgRate: 176.60Mbps stddev:17.66M
IP flow (unique src/dst pair) Information
# of flows: 849872 (avg. 34.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.9% 2.3% 1.9% 1.6% 1.4% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 474793
Top 10 bandwidth usage (bytes/total in %):
14.3% 8.8% 7.8% 7.3% 6.5% 5.4% 5.3% 4.0% 4.0% 3.0%
# of IPv6 addresses: 1924
Top 10 bandwidth usage (bytes/total in %):
36.9% 36.9% 13.9% 13.9% 12.8% 12.3% 6.3% 6.3% 3.3% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008081400.pktlen.png)
detailed numbers
[ 32- 63]: 5511362
[ 64- 127]: 7777806
[ 128- 255]: 1772183
[ 256- 511]: 1497400
[ 512- 1023]: 842788
[ 1024- 2047]: 12245664
Protocol Breakdown
![[protocol breakdown chart]](201008081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29647203 (100.00%) 19863315514 (100.00%) 669.99
ip 29572637 ( 99.75%) 19832580419 ( 99.85%) 670.64
tcp 17685699 ( 59.65%) 13992261802 ( 70.44%) 791.16
http(s) 7748683 ( 26.14%) 10431772890 ( 52.52%) 1346.26
http(c) 4678604 ( 15.78%) 465852580 ( 2.35%) 99.57
squid 185406 ( 0.63%) 53461395 ( 0.27%) 288.35
smtp 206061 ( 0.70%) 41657515 ( 0.21%) 202.16
ftp 67970 ( 0.23%) 8762107 ( 0.04%) 128.91
pop3 9105 ( 0.03%) 4437874 ( 0.02%) 487.41
imap 1709 ( 0.01%) 707689 ( 0.00%) 414.10
telnet 635 ( 0.00%) 43512 ( 0.00%) 68.52
ssh 225311 ( 0.76%) 37473598 ( 0.19%) 166.32
dns 3902 ( 0.01%) 334823 ( 0.00%) 85.81
bgp 183 ( 0.00%) 78640 ( 0.00%) 429.73
napster 438 ( 0.00%) 28593 ( 0.00%) 65.28
realaud 30 ( 0.00%) 2893 ( 0.00%) 96.43
rtsp 6638 ( 0.02%) 7717206 ( 0.04%) 1162.58
icecast 1669 ( 0.01%) 109645 ( 0.00%) 65.70
hotline 15 ( 0.00%) 1360 ( 0.00%) 90.67
other 4549336 ( 15.34%) 2939819226 ( 14.80%) 646.21
udp 8270216 ( 27.90%) 3960853623 ( 19.94%) 478.93
dns 1352403 ( 4.56%) 267572211 ( 1.35%) 197.85
rip 4 ( 0.00%) 240 ( 0.00%) 60.00
realaud 923 ( 0.00%) 57375 ( 0.00%) 62.16
halflif 47 ( 0.00%) 4260 ( 0.00%) 90.64
starcra 105 ( 0.00%) 13217 ( 0.00%) 125.88
everque 411 ( 0.00%) 73514 ( 0.00%) 178.87
unreal 22 ( 0.00%) 2926 ( 0.00%) 133.00
quake 12 ( 0.00%) 922 ( 0.00%) 76.83
cuseeme 4 ( 0.00%) 316 ( 0.00%) 79.00
other 6916022 ( 23.33%) 3692973971 ( 18.59%) 533.97
icmp 581402 ( 1.96%) 119929171 ( 0.60%) 206.28
ipip 386 ( 0.00%) 45272 ( 0.00%) 117.28
ipsec 401 ( 0.00%) 71910 ( 0.00%) 179.33
ip6 3032712 ( 10.23%) 1759158065 ( 8.86%) 580.06
other 1821 ( 0.01%) 260576 ( 0.00%) 143.10
frag 1034 ( 0.00%) 1076200 ( 0.01%) 1040.81
ip6 74566 ( 0.25%) 30735095 ( 0.15%) 412.19
tcp6 46714 ( 0.16%) 25195019 ( 0.13%) 539.35
http(s) 678 ( 0.00%) 437178 ( 0.00%) 644.81
http(c) 789 ( 0.00%) 91178 ( 0.00%) 115.56
smtp 112 ( 0.00%) 55502 ( 0.00%) 495.55
pop3 63 ( 0.00%) 5838 ( 0.00%) 92.67
imap 230 ( 0.00%) 28491 ( 0.00%) 123.87
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 203 ( 0.00%) 24467 ( 0.00%) 120.53
bgp 123 ( 0.00%) 16554 ( 0.00%) 134.59
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
other 44512 ( 0.15%) 24535471 ( 0.12%) 551.21
udp6 21626 ( 0.07%) 4277710 ( 0.02%) 197.80
dns 11315 ( 0.04%) 2607970 ( 0.01%) 230.49
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 10309 ( 0.03%) 1669515 ( 0.01%) 161.95
icmp6 5803 ( 0.02%) 1028661 ( 0.01%) 177.26
rtopt6 30 ( 0.00%) 4200 ( 0.00%) 140.00
dstopt6 74 ( 0.00%) 10360 ( 0.00%) 140.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 288 ( 0.00%) 214929 ( 0.00%) 746.28
tcpdump file: 201008081400.dump.gz (741.14 MB)