Traffic Trace Info
DumpFile: 201008271400.dump
FileSize: 2679.98MB
Id: 201008271400
StartTime: Fri Aug 27 14:00:01 2010
EndTime: Fri Aug 27 14:15:01 2010
TotalTime: 899.94 seconds
TotalCapSize: -1984.65MB CapLen: 96 bytes
# of packets: 37264765 (26366.41MB)
AvgRate: 245.78Mbps stddev:30.84M
IP flow (unique src/dst pair) Information
# of flows: 860175 (avg. 43.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.8% 2.8% 2.4% 2.4% 2.3% 2.1% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 479931
Top 10 bandwidth usage (bytes/total in %):
10.6% 9.3% 8.9% 8.8% 7.4% 4.2% 4.2% 3.5% 2.9% 2.9%
# of IPv6 addresses: 2124
Top 10 bandwidth usage (bytes/total in %):
51.0% 51.0% 13.1% 13.1% 9.7% 5.8% 5.7% 3.8% 3.8% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008271400.pktlen.png)
detailed numbers
[ 32- 63]: 6457585
[ 64- 127]: 9108535
[ 128- 255]: 1872204
[ 256- 511]: 1621093
[ 512- 1023]: 941589
[ 1024- 2047]: 17263759
Protocol Breakdown
![[protocol breakdown chart]](201008271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37264765 (100.00%) 27647180559 (100.00%) 741.91
ip 37142453 ( 99.67%) 27572929058 ( 99.73%) 742.36
tcp 25975397 ( 69.70%) 21629720956 ( 78.23%) 832.70
http(s) 12483514 ( 33.50%) 17131404194 ( 61.96%) 1372.32
http(c) 7638891 ( 20.50%) 1130040619 ( 4.09%) 147.93
squid 348786 ( 0.94%) 170486969 ( 0.62%) 488.80
smtp 295017 ( 0.79%) 144293860 ( 0.52%) 489.10
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 79278 ( 0.21%) 58583403 ( 0.21%) 738.96
pop3 24614 ( 0.07%) 15892639 ( 0.06%) 645.67
imap 2558 ( 0.01%) 433465 ( 0.00%) 169.45
telnet 203 ( 0.00%) 13902 ( 0.00%) 68.48
ssh 46332 ( 0.12%) 7161483 ( 0.03%) 154.57
dns 2957 ( 0.01%) 293594 ( 0.00%) 99.29
bgp 151 ( 0.00%) 77547 ( 0.00%) 513.56
realaud 82 ( 0.00%) 78976 ( 0.00%) 963.12
rtsp 24906 ( 0.07%) 18662338 ( 0.07%) 749.31
icecast 42818 ( 0.11%) 2680524 ( 0.01%) 62.60
hotline 69 ( 0.00%) 5499 ( 0.00%) 79.70
other 4985216 ( 13.38%) 2949611644 ( 10.67%) 591.67
udp 7599089 ( 20.39%) 3766721656 ( 13.62%) 495.68
dns 1412981 ( 3.79%) 307360374 ( 1.11%) 217.53
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 20 ( 0.00%) 2613 ( 0.00%) 130.65
halflif 48 ( 0.00%) 5903 ( 0.00%) 122.98
starcra 36 ( 0.00%) 4602 ( 0.00%) 127.83
everque 7247 ( 0.02%) 843260 ( 0.00%) 116.36
unreal 26 ( 0.00%) 2836 ( 0.00%) 109.08
quake 34 ( 0.00%) 3052 ( 0.00%) 89.76
cuseeme 3 ( 0.00%) 251 ( 0.00%) 83.67
other 6178609 ( 16.58%) 3458435290 ( 12.51%) 559.74
icmp 581093 ( 1.56%) 133895981 ( 0.48%) 230.42
ipip 365 ( 0.00%) 44396 ( 0.00%) 121.63
ipsec 11628 ( 0.03%) 1751432 ( 0.01%) 150.62
ip6 2973094 ( 7.98%) 2040574072 ( 7.38%) 686.35
other 1787 ( 0.00%) 220565 ( 0.00%) 123.43
frag 689 ( 0.00%) 723919 ( 0.00%) 1050.68
ip6 122312 ( 0.33%) 74251501 ( 0.27%) 607.07
tcp6 67567 ( 0.18%) 58976424 ( 0.21%) 872.86
http(s) 765 ( 0.00%) 784464 ( 0.00%) 1025.44
http(c) 1022 ( 0.00%) 133176 ( 0.00%) 130.31
smtp 247 ( 0.00%) 99286 ( 0.00%) 401.97
imap 344 ( 0.00%) 40774 ( 0.00%) 118.53
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 72 ( 0.00%) 19623 ( 0.00%) 272.54
bgp 92 ( 0.00%) 15283 ( 0.00%) 166.12
other 65023 ( 0.17%) 57883646 ( 0.21%) 890.20
udp6 45834 ( 0.12%) 13195914 ( 0.05%) 287.91
dns 40472 ( 0.11%) 11625047 ( 0.04%) 287.24
other 5362 ( 0.01%) 1570867 ( 0.01%) 292.96
icmp6 7715 ( 0.02%) 1202934 ( 0.00%) 155.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1166 ( 0.00%) 872149 ( 0.00%) 747.98
tcpdump file: 201008271400.dump.gz (923.68 MB)