Traffic Trace Info
DumpFile: 201008261400.dump
FileSize: 2891.88MB
Id: 201008261400
StartTime: Thu Aug 26 14:00:01 2010
EndTime: Thu Aug 26 14:15:01 2010
TotalTime: 900.02 seconds
TotalCapSize: -1810.76MB CapLen: 96 bytes
# of packets: 39755962 (32255.56MB)
AvgRate: 300.64Mbps stddev:29.97M
IP flow (unique src/dst pair) Information
# of flows: 786583 (avg. 50.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.3% 3.1% 2.5% 2.2% 1.8% 1.5% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 424139
Top 10 bandwidth usage (bytes/total in %):
31.0% 8.1% 7.0% 6.0% 4.5% 4.0% 3.4% 3.1% 2.5% 2.3%
# of IPv6 addresses: 1856
Top 10 bandwidth usage (bytes/total in %):
29.6% 25.1% 23.9% 23.9% 12.3% 12.3% 8.1% 8.1% 6.7% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008261400.pktlen.png)
detailed numbers
[ 32- 63]: 5455777
[ 64- 127]: 8625000
[ 128- 255]: 1495523
[ 256- 511]: 1504625
[ 512- 1023]: 1282741
[ 1024- 2047]: 21392296
Protocol Breakdown
![[protocol breakdown chart]](201008261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39755962 (100.00%) 33822403250 (100.00%) 850.75
ip 39589235 ( 99.58%) 33715136638 ( 99.68%) 851.62
tcp 30079437 ( 75.66%) 28389691111 ( 83.94%) 943.82
http(s) 17831399 ( 44.85%) 24400988893 ( 72.14%) 1368.43
http(c) 7411646 ( 18.64%) 1024432659 ( 3.03%) 138.22
squid 222318 ( 0.56%) 100293433 ( 0.30%) 451.13
smtp 246418 ( 0.62%) 78018990 ( 0.23%) 316.61
ftp 76255 ( 0.19%) 58354098 ( 0.17%) 765.25
pop3 20085 ( 0.05%) 15506063 ( 0.05%) 772.02
imap 4647 ( 0.01%) 874259 ( 0.00%) 188.13
telnet 1225 ( 0.00%) 84010 ( 0.00%) 68.58
ssh 18319 ( 0.05%) 5464533 ( 0.02%) 298.30
dns 4281 ( 0.01%) 376125 ( 0.00%) 87.86
bgp 153 ( 0.00%) 73529 ( 0.00%) 480.58
napster 49 ( 0.00%) 9520 ( 0.00%) 194.29
realaud 11306 ( 0.03%) 784419 ( 0.00%) 69.38
rtsp 83372 ( 0.21%) 119660736 ( 0.35%) 1435.26
icecast 5787 ( 0.01%) 534441 ( 0.00%) 92.35
hotline 22 ( 0.00%) 2446 ( 0.00%) 111.18
other 4142153 ( 10.42%) 2584232837 ( 7.64%) 623.89
udp 6680616 ( 16.80%) 3664415368 ( 10.83%) 548.51
dns 1155291 ( 2.91%) 272908287 ( 0.81%) 236.22
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 26 ( 0.00%) 3030 ( 0.00%) 116.54
halflif 82 ( 0.00%) 11766 ( 0.00%) 143.49
starcra 33 ( 0.00%) 4405 ( 0.00%) 133.48
everque 672 ( 0.00%) 137921 ( 0.00%) 205.24
unreal 68 ( 0.00%) 13097 ( 0.00%) 192.60
quake 24 ( 0.00%) 2199 ( 0.00%) 91.62
cuseeme 10 ( 0.00%) 828 ( 0.00%) 82.80
other 5524254 ( 13.90%) 3391216415 ( 10.03%) 613.88
icmp 449157 ( 1.13%) 110133870 ( 0.33%) 245.20
ipip 372 ( 0.00%) 43974 ( 0.00%) 118.21
ipsec 15888 ( 0.04%) 3094850 ( 0.01%) 194.79
ip6 2363409 ( 5.94%) 1547714375 ( 4.58%) 654.87
other 356 ( 0.00%) 43090 ( 0.00%) 121.04
frag 5969 ( 0.02%) 3496410 ( 0.01%) 585.76
ip6 166727 ( 0.42%) 107266612 ( 0.32%) 643.37
tcp6 72344 ( 0.18%) 63129752 ( 0.19%) 872.63
http(s) 585 ( 0.00%) 541973 ( 0.00%) 926.45
http(c) 2919 ( 0.01%) 256867 ( 0.00%) 88.00
smtp 219 ( 0.00%) 139910 ( 0.00%) 638.86
dns 93 ( 0.00%) 22117 ( 0.00%) 237.82
bgp 84 ( 0.00%) 12441 ( 0.00%) 148.11
other 68444 ( 0.17%) 62156444 ( 0.18%) 908.14
udp6 44848 ( 0.11%) 12104333 ( 0.04%) 269.90
dns 41926 ( 0.11%) 11721209 ( 0.03%) 279.57
other 2922 ( 0.01%) 383124 ( 0.00%) 131.12
icmp6 5247 ( 0.01%) 928303 ( 0.00%) 176.92
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 44257 ( 0.11%) 31100008 ( 0.09%) 702.71
tcpdump file: 201008261400.dump.gz (971.43 MB)