Traffic Trace Info
DumpFile: 201008151400.dump
FileSize: 1813.17MB
Id: 201008151400
StartTime: Sun Aug 15 14:00:01 2010
EndTime: Sun Aug 15 14:15:01 2010
TotalTime: 899.54 seconds
TotalCapSize: 1422.24MB CapLen: 96 bytes
# of packets: 25619501 (17232.23MB)
AvgRate: 160.71Mbps stddev:18.82M
IP flow (unique src/dst pair) Information
# of flows: 627917 (avg. 40.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 366726
Top 10 bandwidth usage (bytes/total in %):
14.8% 13.8% 8.6% 3.1% 2.9% 2.6% 2.5% 2.5% 1.5% 1.5%
# of IPv6 addresses: 1706
Top 10 bandwidth usage (bytes/total in %):
36.2% 36.2% 15.2% 15.2% 9.6% 9.6% 8.5% 6.9% 5.9% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008151400.pktlen.png)
detailed numbers
[ 32- 63]: 3824689
[ 64- 127]: 7147618
[ 128- 255]: 1439139
[ 256- 511]: 1382102
[ 512- 1023]: 716877
[ 1024- 2047]: 11109076
Protocol Breakdown
![[protocol breakdown chart]](201008151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25619501 (100.00%) 18069302351 (100.00%) 705.29
ip 25537245 ( 99.68%) 18031029162 ( 99.79%) 706.07
tcp 15540810 ( 60.66%) 12921955090 ( 71.51%) 831.49
http(s) 7828855 ( 30.56%) 10591129456 ( 58.61%) 1352.83
http(c) 4396724 ( 17.16%) 807811693 ( 4.47%) 183.73
squid 195598 ( 0.76%) 91145835 ( 0.50%) 465.99
smtp 218475 ( 0.85%) 60418866 ( 0.33%) 276.55
ftp 11972 ( 0.05%) 995960 ( 0.01%) 83.19
pop3 4872 ( 0.02%) 1674490 ( 0.01%) 343.70
imap 1114 ( 0.00%) 284409 ( 0.00%) 255.30
telnet 734 ( 0.00%) 49726 ( 0.00%) 67.75
ssh 533968 ( 2.08%) 84818868 ( 0.47%) 158.85
dns 3757 ( 0.01%) 339746 ( 0.00%) 90.43
bgp 160 ( 0.00%) 63198 ( 0.00%) 394.99
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
realaud 29 ( 0.00%) 2706 ( 0.00%) 93.31
rtsp 14471 ( 0.06%) 3759835 ( 0.02%) 259.82
icecast 649 ( 0.00%) 44515 ( 0.00%) 68.59
hotline 88 ( 0.00%) 6064 ( 0.00%) 68.91
other 2329341 ( 9.09%) 1279409539 ( 7.08%) 549.26
udp 7106681 ( 27.74%) 3526101054 ( 19.51%) 496.17
dns 787658 ( 3.07%) 160010954 ( 0.89%) 203.15
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 83 ( 0.00%) 15154 ( 0.00%) 182.58
halflif 38 ( 0.00%) 5590 ( 0.00%) 147.11
starcra 126 ( 0.00%) 22935 ( 0.00%) 182.02
everque 213 ( 0.00%) 45092 ( 0.00%) 211.70
unreal 69 ( 0.00%) 11595 ( 0.00%) 168.04
quake 25 ( 0.00%) 3277 ( 0.00%) 131.08
cuseeme 7 ( 0.00%) 601 ( 0.00%) 85.86
other 6318284 ( 24.66%) 3365839193 ( 18.63%) 532.71
icmp 284032 ( 1.11%) 23325187 ( 0.13%) 82.12
ipip 326 ( 0.00%) 37004 ( 0.00%) 113.51
ipsec 363 ( 0.00%) 61810 ( 0.00%) 170.28
ip6 2601307 ( 10.15%) 1556529417 ( 8.61%) 598.36
other 3726 ( 0.01%) 3019600 ( 0.02%) 810.41
frag 1175 ( 0.00%) 1256445 ( 0.01%) 1069.31
ip6 82256 ( 0.32%) 38273189 ( 0.21%) 465.29
tcp6 54324 ( 0.21%) 31109527 ( 0.17%) 572.67
http(s) 409 ( 0.00%) 339215 ( 0.00%) 829.38
http(c) 976 ( 0.00%) 127489 ( 0.00%) 130.62
smtp 115 ( 0.00%) 13082 ( 0.00%) 113.76
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 5 ( 0.00%) 558 ( 0.00%) 111.60
dns 264 ( 0.00%) 30578 ( 0.00%) 115.83
bgp 110 ( 0.00%) 14034 ( 0.00%) 127.58
other 52412 ( 0.20%) 30581529 ( 0.17%) 583.48
udp6 22958 ( 0.09%) 5708259 ( 0.03%) 248.64
dns 10618 ( 0.04%) 2538563 ( 0.01%) 239.08
starcra 5 ( 0.00%) 837 ( 0.00%) 167.40
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
cuseeme 1 ( 0.00%) 163 ( 0.00%) 163.00
other 12333 ( 0.05%) 3168592 ( 0.02%) 256.92
icmp6 4017 ( 0.02%) 773637 ( 0.00%) 192.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 926 ( 0.00%) 677550 ( 0.00%) 731.70
tcpdump file: 201008151400.dump.gz (660.11 MB)