Traffic Trace Info
DumpFile: 201008091400.dump
FileSize: 2058.21MB
Id: 201008091400
StartTime: Mon Aug 9 14:00:01 2010
EndTime: Mon Aug 9 14:15:01 2010
TotalTime: 900.32 seconds
TotalCapSize: 1619.17MB CapLen: 96 bytes
# of packets: 28769361 (18610.63MB)
AvgRate: 173.41Mbps stddev:15.58M
IP flow (unique src/dst pair) Information
# of flows: 834734 (avg. 34.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.1% 1.6% 1.3% 1.2% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 462120
Top 10 bandwidth usage (bytes/total in %):
14.7% 12.0% 10.5% 5.4% 5.4% 4.8% 3.4% 2.3% 2.2% 1.9%
# of IPv6 addresses: 2207
Top 10 bandwidth usage (bytes/total in %):
33.5% 33.5% 32.2% 32.2% 6.0% 5.9% 3.6% 3.6% 2.6% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008091400.pktlen.png)
detailed numbers
[ 32- 63]: 4499431
[ 64- 127]: 7830056
[ 128- 255]: 2149574
[ 256- 511]: 1562441
[ 512- 1023]: 768482
[ 1024- 2047]: 11959377
Protocol Breakdown
![[protocol breakdown chart]](201008091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28769361 (100.00%) 19514654730 (100.00%) 678.31
ip 28688189 ( 99.72%) 19470590105 ( 99.77%) 678.70
tcp 17662849 ( 61.39%) 14009215719 ( 71.79%) 793.15
http(s) 8138145 ( 28.29%) 10632110417 ( 54.48%) 1306.45
http(c) 5177566 ( 18.00%) 752842225 ( 3.86%) 145.40
squid 208950 ( 0.73%) 89694513 ( 0.46%) 429.26
smtp 281523 ( 0.98%) 94219667 ( 0.48%) 334.68
ftp 86654 ( 0.30%) 11976811 ( 0.06%) 138.21
pop3 8445 ( 0.03%) 2502261 ( 0.01%) 296.30
imap 4016 ( 0.01%) 1300424 ( 0.01%) 323.81
telnet 458 ( 0.00%) 29765 ( 0.00%) 64.99
ssh 119685 ( 0.42%) 17496591 ( 0.09%) 146.19
dns 3550 ( 0.01%) 299627 ( 0.00%) 84.40
bgp 158 ( 0.00%) 58078 ( 0.00%) 367.58
napster 80 ( 0.00%) 22746 ( 0.00%) 284.32
realaud 63 ( 0.00%) 7602 ( 0.00%) 120.67
rtsp 14123 ( 0.05%) 15439501 ( 0.08%) 1093.22
icecast 28929 ( 0.10%) 16357807 ( 0.08%) 565.45
hotline 70 ( 0.00%) 5237 ( 0.00%) 74.81
other 3590433 ( 12.48%) 2374852387 ( 12.17%) 661.44
udp 7000323 ( 24.33%) 3303322831 ( 16.93%) 471.88
dns 1066197 ( 3.71%) 204769673 ( 1.05%) 192.06
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 18 ( 0.00%) 2932 ( 0.00%) 162.89
halflif 1031 ( 0.00%) 102802 ( 0.00%) 99.71
starcra 43 ( 0.00%) 6215 ( 0.00%) 144.53
everque 433 ( 0.00%) 81060 ( 0.00%) 187.21
unreal 160 ( 0.00%) 31176 ( 0.00%) 194.85
quake 20 ( 0.00%) 1597 ( 0.00%) 79.85
cuseeme 5 ( 0.00%) 369 ( 0.00%) 73.80
other 5932249 ( 20.62%) 3098217040 ( 15.88%) 522.27
icmp 469965 ( 1.63%) 96184026 ( 0.49%) 204.66
ipip 352 ( 0.00%) 42300 ( 0.00%) 120.17
ipsec 372 ( 0.00%) 66520 ( 0.00%) 178.82
ip6 3553993 ( 12.35%) 2061721195 ( 10.56%) 580.11
other 335 ( 0.00%) 37514 ( 0.00%) 111.98
frag 714 ( 0.00%) 761583 ( 0.00%) 1066.64
ip6 81172 ( 0.28%) 44064625 ( 0.23%) 542.85
tcp6 47059 ( 0.16%) 36547168 ( 0.19%) 776.62
http(s) 627 ( 0.00%) 548965 ( 0.00%) 875.54
http(c) 714 ( 0.00%) 79895 ( 0.00%) 111.90
smtp 302 ( 0.00%) 114943 ( 0.00%) 380.61
imap 354 ( 0.00%) 42006 ( 0.00%) 118.66
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 283 ( 0.00%) 46406 ( 0.00%) 163.98
bgp 112 ( 0.00%) 14884 ( 0.00%) 132.89
other 44666 ( 0.16%) 35699983 ( 0.18%) 799.27
udp6 26597 ( 0.09%) 5704441 ( 0.03%) 214.48
dns 17222 ( 0.06%) 4109913 ( 0.02%) 238.64
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 9374 ( 0.03%) 1594424 ( 0.01%) 170.09
icmp6 6498 ( 0.02%) 1113050 ( 0.01%) 171.29
rtopt6 14 ( 0.00%) 1960 ( 0.00%) 140.00
dstopt6 37 ( 0.00%) 5180 ( 0.00%) 140.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 936 ( 0.00%) 688610 ( 0.00%) 735.69
tcpdump file: 201008091400.dump.gz (744.53 MB)