Traffic Trace Info
DumpFile: 201008121400.dump
FileSize: 2324.69MB
Id: 201008121400
StartTime: Thu Aug 12 14:00:01 2010
EndTime: Thu Aug 12 14:15:00 2010
TotalTime: 899.74 seconds
TotalCapSize: 1830.30MB CapLen: 96 bytes
# of packets: 32399923 (21640.18MB)
AvgRate: 201.75Mbps stddev:23.63M
IP flow (unique src/dst pair) Information
# of flows: 791592 (avg. 40.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 5.6% 3.5% 2.1% 1.8% 1.1% 1.0% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 435332
Top 10 bandwidth usage (bytes/total in %):
13.0% 11.8% 8.5% 7.3% 6.3% 5.7% 5.7% 3.9% 3.8% 3.7%
# of IPv6 addresses: 2018
Top 10 bandwidth usage (bytes/total in %):
50.8% 50.8% 12.4% 12.4% 5.7% 5.7% 4.3% 4.3% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008121400.pktlen.png)
detailed numbers
[ 32- 63]: 4544758
[ 64- 127]: 9287979
[ 128- 255]: 2046368
[ 256- 511]: 1693542
[ 512- 1023]: 729136
[ 1024- 2047]: 14098140
Protocol Breakdown
![[protocol breakdown chart]](201008121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32399923 (100.00%) 22691375585 (100.00%) 700.35
ip 32319737 ( 99.75%) 22652895110 ( 99.83%) 700.90
tcp 21322925 ( 65.81%) 16988975379 ( 74.87%) 796.75
http(s) 9833181 ( 30.35%) 13418124584 ( 59.13%) 1364.58
http(c) 6496615 ( 20.05%) 910127757 ( 4.01%) 140.09
squid 234253 ( 0.72%) 82617465 ( 0.36%) 352.68
smtp 304726 ( 0.94%) 98969247 ( 0.44%) 324.78
ftp 36147 ( 0.11%) 4646920 ( 0.02%) 128.56
pop3 32197 ( 0.10%) 17723693 ( 0.08%) 550.48
imap 2938 ( 0.01%) 796510 ( 0.00%) 271.11
telnet 1228 ( 0.00%) 82229 ( 0.00%) 66.96
ssh 102729 ( 0.32%) 17047693 ( 0.08%) 165.95
dns 3876 ( 0.01%) 362076 ( 0.00%) 93.41
bgp 189 ( 0.00%) 71828 ( 0.00%) 380.04
napster 17 ( 0.00%) 2483 ( 0.00%) 146.06
realaud 23 ( 0.00%) 3166 ( 0.00%) 137.65
rtsp 14805 ( 0.05%) 15510751 ( 0.07%) 1047.67
icecast 592 ( 0.00%) 38148 ( 0.00%) 64.44
other 4259406 ( 13.15%) 2422850649 ( 10.68%) 568.82
udp 7404068 ( 22.85%) 3692571818 ( 16.27%) 498.72
dns 850746 ( 2.63%) 157938793 ( 0.70%) 185.65
realaud 51 ( 0.00%) 9376 ( 0.00%) 183.84
halflif 33 ( 0.00%) 2597 ( 0.00%) 78.70
starcra 32 ( 0.00%) 3656 ( 0.00%) 114.25
everque 250 ( 0.00%) 49675 ( 0.00%) 198.70
unreal 27 ( 0.00%) 3385 ( 0.00%) 125.37
quake 15 ( 0.00%) 1522 ( 0.00%) 101.47
cuseeme 5 ( 0.00%) 417 ( 0.00%) 83.40
other 6552795 ( 20.22%) 3534478817 ( 15.58%) 539.38
icmp 432344 ( 1.33%) 34831885 ( 0.15%) 80.57
ipip 367 ( 0.00%) 45170 ( 0.00%) 123.08
ipsec 6555 ( 0.02%) 1067914 ( 0.00%) 162.92
ip6 3153143 ( 9.73%) 1935364495 ( 8.53%) 613.79
other 335 ( 0.00%) 38449 ( 0.00%) 114.77
frag 833 ( 0.00%) 846619 ( 0.00%) 1016.35
ip6 80186 ( 0.25%) 38480475 ( 0.17%) 479.89
tcp6 49025 ( 0.15%) 32405367 ( 0.14%) 661.00
http(s) 686 ( 0.00%) 632216 ( 0.00%) 921.60
http(c) 1252 ( 0.00%) 164121 ( 0.00%) 131.09
squid 10 ( 0.00%) 892 ( 0.00%) 89.20
smtp 73 ( 0.00%) 12611 ( 0.00%) 172.75
ftp 2505 ( 0.01%) 258652 ( 0.00%) 103.25
pop3 22 ( 0.00%) 2028 ( 0.00%) 92.18
imap 418 ( 0.00%) 46734 ( 0.00%) 111.80
dns 264 ( 0.00%) 32610 ( 0.00%) 123.52
bgp 253 ( 0.00%) 133939 ( 0.00%) 529.40
other 43542 ( 0.13%) 31121564 ( 0.14%) 714.75
udp6 24747 ( 0.08%) 5054373 ( 0.02%) 204.24
dns 15173 ( 0.05%) 3437108 ( 0.02%) 226.53
unreal 2 ( 0.00%) 249 ( 0.00%) 124.50
other 9572 ( 0.03%) 1617016 ( 0.01%) 168.93
icmp6 6352 ( 0.02%) 988657 ( 0.00%) 155.64
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 31 ( 0.00%) 27862 ( 0.00%) 898.77
tcpdump file: 201008121400.dump.gz (822.53 MB)