Traffic Trace Info
DumpFile: 201008181400.dump
FileSize: 2639.54MB
Id: 201008181400
StartTime: Wed Aug 18 14:00:01 2010
EndTime: Wed Aug 18 14:15:01 2010
TotalTime: 900.05 seconds
TotalCapSize: -2035.88MB CapLen: 96 bytes
# of packets: 37971691 (27198.17MB)
AvgRate: 253.46Mbps stddev:38.21M
IP flow (unique src/dst pair) Information
# of flows: 931342 (avg. 40.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.2% 4.6% 1.6% 0.9% 0.8% 0.8% 0.8% 0.8% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 524374
Top 10 bandwidth usage (bytes/total in %):
14.2% 14.2% 10.9% 9.3% 7.2% 5.3% 4.7% 4.6% 3.4% 2.0%
# of IPv6 addresses: 2043
Top 10 bandwidth usage (bytes/total in %):
12.3% 11.8% 8.4% 8.4% 6.0% 5.2% 5.2% 5.1% 4.7% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008181400.pktlen.png)
detailed numbers
[ 32- 63]: 4984829
[ 64- 127]: 9259562
[ 128- 255]: 2182913
[ 256- 511]: 2051673
[ 512- 1023]: 2123005
[ 1024- 2047]: 17369709
Protocol Breakdown
![[protocol breakdown chart]](201008181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37971691 (100.00%) 28519343840 (100.00%) 751.07
ip 37913692 ( 99.85%) 28507125605 ( 99.96%) 751.90
tcp 22414610 ( 59.03%) 17468503333 ( 61.25%) 779.34
http(s) 10945804 ( 28.83%) 14264912661 ( 50.02%) 1303.23
http(c) 6098024 ( 16.06%) 854858320 ( 3.00%) 140.19
squid 276625 ( 0.73%) 172528164 ( 0.60%) 623.69
smtp 304947 ( 0.80%) 97149368 ( 0.34%) 318.58
ftp 21317 ( 0.06%) 5646512 ( 0.02%) 264.88
pop3 11810 ( 0.03%) 4588755 ( 0.02%) 388.55
imap 4758 ( 0.01%) 2079648 ( 0.01%) 437.08
telnet 1670 ( 0.00%) 120342 ( 0.00%) 72.06
ssh 1591428 ( 4.19%) 204330503 ( 0.72%) 128.39
dns 5393 ( 0.01%) 456108 ( 0.00%) 84.57
bgp 183 ( 0.00%) 79763 ( 0.00%) 435.86
napster 52 ( 0.00%) 10591 ( 0.00%) 203.67
realaud 116 ( 0.00%) 53436 ( 0.00%) 460.66
rtsp 74709 ( 0.20%) 71022505 ( 0.25%) 950.66
icecast 833 ( 0.00%) 64238 ( 0.00%) 77.12
hotline 32 ( 0.00%) 2304 ( 0.00%) 72.00
other 3076907 ( 8.10%) 1790599995 ( 6.28%) 581.95
udp 11827790 ( 31.15%) 8934347386 ( 31.33%) 755.37
dns 973399 ( 2.56%) 191323701 ( 0.67%) 196.55
rip 1732 ( 0.00%) 1004144 ( 0.00%) 579.76
realaud 45 ( 0.00%) 7161 ( 0.00%) 159.13
halflif 34 ( 0.00%) 3767 ( 0.00%) 110.79
starcra 33 ( 0.00%) 3262 ( 0.00%) 98.85
everque 407 ( 0.00%) 85878 ( 0.00%) 211.00
unreal 152 ( 0.00%) 29080 ( 0.00%) 191.32
quake 18 ( 0.00%) 1534 ( 0.00%) 85.22
cuseeme 12 ( 0.00%) 931 ( 0.00%) 77.58
other 10851695 ( 28.58%) 8741612263 ( 30.65%) 805.55
icmp 323154 ( 0.85%) 26254736 ( 0.09%) 81.25
ipip 393 ( 0.00%) 46444 ( 0.00%) 118.18
ipsec 4789 ( 0.01%) 683822 ( 0.00%) 142.79
ip6 3342092 ( 8.80%) 2077156598 ( 7.28%) 621.51
other 864 ( 0.00%) 133286 ( 0.00%) 154.27
frag 2947233 ( 7.76%) 4037499810 ( 14.16%) 1369.93
ip6 57999 ( 0.15%) 12218235 ( 0.04%) 210.66
tcp6 28358 ( 0.07%) 5119881 ( 0.02%) 180.54
http(s) 480 ( 0.00%) 453939 ( 0.00%) 945.71
http(c) 3096 ( 0.01%) 394181 ( 0.00%) 127.32
smtp 165 ( 0.00%) 27501 ( 0.00%) 166.67
ftp 2 ( 0.00%) 160 ( 0.00%) 80.00
imap 226 ( 0.00%) 26863 ( 0.00%) 118.86
ssh 1006 ( 0.00%) 415040 ( 0.00%) 412.56
dns 252 ( 0.00%) 34528 ( 0.00%) 137.02
bgp 116 ( 0.00%) 15729 ( 0.00%) 135.59
other 23015 ( 0.06%) 3751940 ( 0.01%) 163.02
udp6 24502 ( 0.06%) 6003661 ( 0.02%) 245.03
dns 19985 ( 0.05%) 4887182 ( 0.02%) 244.54
other 4517 ( 0.01%) 1116479 ( 0.00%) 247.17
icmp6 4915 ( 0.01%) 945068 ( 0.00%) 192.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 194 ( 0.00%) 145545 ( 0.00%) 750.23
tcpdump file: 201008181400.dump.gz (912.92 MB)