Traffic Trace Info
DumpFile: 201008241400.dump
FileSize: 2033.01MB
Id: 201008241400
StartTime: Tue Aug 24 14:00:00 2010
EndTime: Tue Aug 24 14:15:01 2010
TotalTime: 900.16 seconds
TotalCapSize: 1594.84MB CapLen: 96 bytes
# of packets: 28715363 (19110.42MB)
AvgRate: 178.09Mbps stddev:21.95M
IP flow (unique src/dst pair) Information
# of flows: 805171 (avg. 35.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.0% 2.3% 1.8% 1.4% 1.2% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 439496
Top 10 bandwidth usage (bytes/total in %):
12.5% 7.4% 6.6% 6.0% 5.3% 4.5% 4.2% 3.0% 2.9% 2.4%
# of IPv6 addresses: 2099
Top 10 bandwidth usage (bytes/total in %):
21.1% 20.4% 18.6% 18.6% 5.9% 5.9% 3.7% 3.3% 2.7% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008241400.pktlen.png)
detailed numbers
[ 32- 63]: 5326887
[ 64- 127]: 7503669
[ 128- 255]: 1438738
[ 256- 511]: 1220428
[ 512- 1023]: 732070
[ 1024- 2047]: 12493571
Protocol Breakdown
![[protocol breakdown chart]](201008241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28715363 (100.00%) 20038728092 (100.00%) 697.84
ip 28665696 ( 99.83%) 20022322478 ( 99.92%) 698.48
tcp 19760269 ( 68.81%) 15304211670 ( 76.37%) 774.49
http(s) 8315269 ( 28.96%) 10934675159 ( 54.57%) 1315.01
http(c) 5788230 ( 20.16%) 738485150 ( 3.69%) 127.58
squid 301947 ( 1.05%) 132709899 ( 0.66%) 439.51
smtp 305309 ( 1.06%) 121024409 ( 0.60%) 396.40
nntp 457 ( 0.00%) 195409 ( 0.00%) 427.59
ftp 60221 ( 0.21%) 30851205 ( 0.15%) 512.30
pop3 13970 ( 0.05%) 7592581 ( 0.04%) 543.49
imap 20750 ( 0.07%) 5411940 ( 0.03%) 260.82
telnet 901 ( 0.00%) 70384 ( 0.00%) 78.12
ssh 211548 ( 0.74%) 51734447 ( 0.26%) 244.55
dns 2361 ( 0.01%) 261276 ( 0.00%) 110.66
bgp 146 ( 0.00%) 68765 ( 0.00%) 470.99
napster 395 ( 0.00%) 27108 ( 0.00%) 68.63
realaud 73 ( 0.00%) 7792 ( 0.00%) 106.74
icecast 19541 ( 0.07%) 15555164 ( 0.08%) 796.03
hotline 5 ( 0.00%) 758 ( 0.00%) 151.60
other 4719142 ( 16.43%) 3265539978 ( 16.30%) 691.98
udp 6395290 ( 22.27%) 3388968011 ( 16.91%) 529.92
dns 948565 ( 3.30%) 195170696 ( 0.97%) 205.75
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 27 ( 0.00%) 3509 ( 0.00%) 129.96
halflif 55 ( 0.00%) 5454 ( 0.00%) 99.16
starcra 151 ( 0.00%) 11991 ( 0.00%) 79.41
everque 1384 ( 0.00%) 212019 ( 0.00%) 153.19
unreal 23 ( 0.00%) 3687 ( 0.00%) 160.30
quake 31 ( 0.00%) 3703 ( 0.00%) 119.45
cuseeme 56 ( 0.00%) 4214 ( 0.00%) 75.25
other 5444809 ( 18.96%) 3193441167 ( 15.94%) 586.51
icmp 441704 ( 1.54%) 106879564 ( 0.53%) 241.97
ipip 373 ( 0.00%) 46052 ( 0.00%) 123.46
ipsec 3856 ( 0.01%) 932768 ( 0.00%) 241.90
ip6 2063815 ( 7.19%) 1221237396 ( 6.09%) 591.74
other 389 ( 0.00%) 47017 ( 0.00%) 120.87
frag 33761 ( 0.12%) 24570689 ( 0.12%) 727.78
ip6 49667 ( 0.17%) 16405614 ( 0.08%) 330.31
tcp6 25727 ( 0.09%) 10876854 ( 0.05%) 422.78
http(s) 770 ( 0.00%) 839605 ( 0.00%) 1090.40
http(c) 1499 ( 0.01%) 643646 ( 0.00%) 429.38
squid 20 ( 0.00%) 1792 ( 0.00%) 89.60
smtp 197 ( 0.00%) 62473 ( 0.00%) 317.12
ftp 9 ( 0.00%) 855 ( 0.00%) 95.00
imap 250 ( 0.00%) 29927 ( 0.00%) 119.71
dns 241 ( 0.00%) 35260 ( 0.00%) 146.31
bgp 83 ( 0.00%) 10915 ( 0.00%) 131.51
other 22658 ( 0.08%) 9252381 ( 0.05%) 408.35
udp6 19730 ( 0.07%) 4509278 ( 0.02%) 228.55
dns 14689 ( 0.05%) 3850394 ( 0.02%) 262.13
other 5041 ( 0.02%) 658884 ( 0.00%) 130.71
icmp6 3893 ( 0.01%) 777892 ( 0.00%) 199.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 287 ( 0.00%) 237510 ( 0.00%) 827.56
tcpdump file: 201008241400.dump.gz (731.14 MB)