Traffic Trace Info
DumpFile: 201008221400.dump
FileSize: 2166.42MB
Id: 201008221400
StartTime: Sun Aug 22 14:00:01 2010
EndTime: Sun Aug 22 14:15:01 2010
TotalTime: 899.83 seconds
TotalCapSize: 1691.04MB CapLen: 96 bytes
# of packets: 31142031 (20673.19MB)
AvgRate: 192.74Mbps stddev:18.18M
IP flow (unique src/dst pair) Information
# of flows: 708609 (avg. 43.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 5.0% 3.8% 3.4% 2.4% 1.4% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 380994
Top 10 bandwidth usage (bytes/total in %):
14.0% 13.9% 13.5% 9.1% 7.3% 6.5% 5.2% 4.0% 3.9% 3.5%
# of IPv6 addresses: 1776
Top 10 bandwidth usage (bytes/total in %):
49.1% 47.1% 15.3% 13.5% 3.3% 3.2% 2.7% 2.7% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008221400.pktlen.png)
detailed numbers
[ 32- 63]: 4168330
[ 64- 127]: 6316556
[ 128- 255]: 1560735
[ 256- 511]: 1287365
[ 512- 1023]: 6014500
[ 1024- 2047]: 11794545
Protocol Breakdown
![[protocol breakdown chart]](201008221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31142031 (100.00%) 21677408017 (100.00%) 696.08
ip 31067307 ( 99.76%) 21652760386 ( 99.89%) 696.96
tcp 15597746 ( 50.09%) 13111192200 ( 60.48%) 840.58
http(s) 6740888 ( 21.65%) 9170408328 ( 42.30%) 1360.42
http(c) 3538611 ( 11.36%) 544514220 ( 2.51%) 153.88
squid 222422 ( 0.71%) 100482898 ( 0.46%) 451.77
smtp 143301 ( 0.46%) 29397660 ( 0.14%) 205.15
ftp 28832 ( 0.09%) 2459214 ( 0.01%) 85.29
pop3 7839 ( 0.03%) 2947980 ( 0.01%) 376.07
imap 2517 ( 0.01%) 1056886 ( 0.00%) 419.90
telnet 80741 ( 0.26%) 5925834 ( 0.03%) 73.39
ssh 240315 ( 0.77%) 39868039 ( 0.18%) 165.90
dns 2110 ( 0.01%) 234675 ( 0.00%) 111.22
bgp 150 ( 0.00%) 63494 ( 0.00%) 423.29
napster 20 ( 0.00%) 2323 ( 0.00%) 116.15
realaud 22 ( 0.00%) 1540 ( 0.00%) 70.00
rtsp 14977 ( 0.05%) 18666758 ( 0.09%) 1246.36
icecast 716 ( 0.00%) 49207 ( 0.00%) 68.72
other 4574283 ( 14.69%) 3195113024 ( 14.74%) 698.49
udp 12434926 ( 39.93%) 6853695238 ( 31.62%) 551.16
dns 6141289 ( 19.72%) 3151929058 ( 14.54%) 513.24
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 1295 ( 0.00%) 79657 ( 0.00%) 61.51
halflif 37 ( 0.00%) 3153 ( 0.00%) 85.22
starcra 27 ( 0.00%) 3160 ( 0.00%) 117.04
everque 1565 ( 0.01%) 195341 ( 0.00%) 124.82
unreal 25 ( 0.00%) 4265 ( 0.00%) 170.60
quake 14 ( 0.00%) 1168 ( 0.00%) 83.43
cuseeme 5 ( 0.00%) 705 ( 0.00%) 141.00
other 6290541 ( 20.20%) 3701379688 ( 17.07%) 588.40
icmp 392597 ( 1.26%) 88917732 ( 0.41%) 226.49
ipip 366 ( 0.00%) 45072 ( 0.00%) 123.15
ipsec 5401 ( 0.02%) 801374 ( 0.00%) 148.38
ip6 2607770 ( 8.37%) 1581608961 ( 7.30%) 606.50
other 28501 ( 0.09%) 16499809 ( 0.08%) 578.92
frag 624 ( 0.00%) 666575 ( 0.00%) 1068.23
ip6 74724 ( 0.24%) 24647631 ( 0.11%) 329.85
tcp6 38388 ( 0.12%) 9101985 ( 0.04%) 237.10
http(s) 1059 ( 0.00%) 1254667 ( 0.01%) 1184.77
http(c) 2322 ( 0.01%) 225010 ( 0.00%) 96.90
smtp 9 ( 0.00%) 1267 ( 0.00%) 140.78
imap 242 ( 0.00%) 28943 ( 0.00%) 119.60
ssh 6 ( 0.00%) 804 ( 0.00%) 134.00
dns 204 ( 0.00%) 21173 ( 0.00%) 103.79
bgp 98 ( 0.00%) 18767 ( 0.00%) 191.50
other 34448 ( 0.11%) 7551354 ( 0.03%) 219.21
udp6 15659 ( 0.05%) 3069094 ( 0.01%) 196.00
dns 8772 ( 0.03%) 2311829 ( 0.01%) 263.55
other 6887 ( 0.02%) 757265 ( 0.00%) 109.96
icmp6 4064 ( 0.01%) 804199 ( 0.00%) 197.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16583 ( 0.05%) 11668273 ( 0.05%) 703.63
tcpdump file: 201008221400.dump.gz (745.70 MB)