Traffic Trace Info
DumpFile: 201008171400.dump
FileSize: 2223.65MB
Id: 201008171400
StartTime: Tue Aug 17 14:00:01 2010
EndTime: Tue Aug 17 14:15:01 2010
TotalTime: 900.49 seconds
TotalCapSize: 1744.23MB CapLen: 96 bytes
# of packets: 31418850 (20781.23MB)
AvgRate: 193.61Mbps stddev:21.78M
IP flow (unique src/dst pair) Information
# of flows: 798191 (avg. 39.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.7% 1.2% 1.2% 1.2% 1.1% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 440820
Top 10 bandwidth usage (bytes/total in %):
12.9% 10.1% 7.5% 5.2% 2.9% 2.5% 2.1% 1.9% 1.9% 1.8%
# of IPv6 addresses: 1934
Top 10 bandwidth usage (bytes/total in %):
58.5% 58.4% 28.6% 28.6% 4.5% 4.5% 0.9% 0.9% 0.9% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008171400.pktlen.png)
detailed numbers
[ 32- 63]: 5790318
[ 64- 127]: 8211204
[ 128- 255]: 1631375
[ 256- 511]: 1431743
[ 512- 1023]: 819781
[ 1024- 2047]: 13534429
Protocol Breakdown
![[protocol breakdown chart]](201008171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31418850 (100.00%) 21790701156 (100.00%) 693.56
ip 31241904 ( 99.44%) 21651842400 ( 99.36%) 693.04
tcp 20673884 ( 65.80%) 16180389524 ( 74.25%) 782.65
http(s) 9380755 ( 29.86%) 12643323320 ( 58.02%) 1347.79
http(c) 6257235 ( 19.92%) 780581671 ( 3.58%) 124.75
squid 201293 ( 0.64%) 83456889 ( 0.38%) 414.60
smtp 271372 ( 0.86%) 102740749 ( 0.47%) 378.60
ftp 94567 ( 0.30%) 15606951 ( 0.07%) 165.04
pop3 8114 ( 0.03%) 1309951 ( 0.01%) 161.44
imap 3588 ( 0.01%) 2256537 ( 0.01%) 628.91
telnet 2852 ( 0.01%) 204176 ( 0.00%) 71.59
ssh 429171 ( 1.37%) 389928714 ( 1.79%) 908.56
dns 4939 ( 0.02%) 411532 ( 0.00%) 83.32
bgp 174 ( 0.00%) 64625 ( 0.00%) 371.41
napster 35 ( 0.00%) 2684 ( 0.00%) 76.69
realaud 70 ( 0.00%) 9211 ( 0.00%) 131.59
rtsp 81018 ( 0.26%) 87498463 ( 0.40%) 1079.99
icecast 4326 ( 0.01%) 835199 ( 0.00%) 193.06
hotline 19 ( 0.00%) 2524 ( 0.00%) 132.84
other 3934353 ( 12.52%) 2072156148 ( 9.51%) 526.68
udp 7407880 ( 23.58%) 3791152211 ( 17.40%) 511.77
dns 961997 ( 3.06%) 190464992 ( 0.87%) 197.99
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 32 ( 0.00%) 4678 ( 0.00%) 146.19
halflif 101 ( 0.00%) 10963 ( 0.00%) 108.54
starcra 130 ( 0.00%) 14060 ( 0.00%) 108.15
everque 449 ( 0.00%) 98266 ( 0.00%) 218.86
unreal 96 ( 0.00%) 17718 ( 0.00%) 184.56
quake 21 ( 0.00%) 2032 ( 0.00%) 96.76
cuseeme 3 ( 0.00%) 206 ( 0.00%) 68.67
other 6441616 ( 20.50%) 3600208763 ( 16.52%) 558.90
icmp 333450 ( 1.06%) 27135157 ( 0.12%) 81.38
ipip 346 ( 0.00%) 42692 ( 0.00%) 123.39
ipsec 7368 ( 0.02%) 1342756 ( 0.01%) 182.24
ip6 2761701 ( 8.79%) 1645694504 ( 7.55%) 595.90
other 57275 ( 0.18%) 6085556 ( 0.03%) 106.25
frag 14055 ( 0.04%) 10757102 ( 0.05%) 765.36
ip6 176946 ( 0.56%) 138858756 ( 0.64%) 784.75
tcp6 94635 ( 0.30%) 97251863 ( 0.45%) 1027.65
http(s) 2068 ( 0.01%) 2163845 ( 0.01%) 1046.35
http(c) 8254 ( 0.03%) 1057666 ( 0.00%) 128.14
squid 34 ( 0.00%) 6721 ( 0.00%) 197.68
smtp 120 ( 0.00%) 25857 ( 0.00%) 215.47
imap 329 ( 0.00%) 39462 ( 0.00%) 119.95
dns 187 ( 0.00%) 24404 ( 0.00%) 130.50
bgp 107 ( 0.00%) 14503 ( 0.00%) 135.54
other 83536 ( 0.27%) 93919405 ( 0.43%) 1124.30
udp6 36903 ( 0.12%) 12102342 ( 0.06%) 327.95
dns 16105 ( 0.05%) 3950098 ( 0.02%) 245.27
unreal 3 ( 0.00%) 747 ( 0.00%) 249.00
other 20795 ( 0.07%) 8151497 ( 0.04%) 391.99
icmp6 4343 ( 0.01%) 650442 ( 0.00%) 149.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 41035 ( 0.13%) 28850029 ( 0.13%) 703.06
tcpdump file: 201008171400.dump.gz (798.86 MB)