Traffic Trace Info
DumpFile: 201008281400.dump
FileSize: 2038.19MB
Id: 201008281400
StartTime: Sat Aug 28 14:00:01 2010
EndTime: Sat Aug 28 14:15:00 2010
TotalTime: 899.40 seconds
TotalCapSize: 1603.26MB CapLen: 96 bytes
# of packets: 28502643 (20762.53MB)
AvgRate: 193.67Mbps stddev:18.38M
IP flow (unique src/dst pair) Information
# of flows: 812252 (avg. 35.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.7% 1.4% 1.3% 1.2% 1.2% 1.2% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 465372
Top 10 bandwidth usage (bytes/total in %):
13.1% 11.5% 10.8% 7.9% 3.4% 1.9% 1.9% 1.7% 1.7% 1.5%
# of IPv6 addresses: 2016
Top 10 bandwidth usage (bytes/total in %):
37.7% 37.7% 12.1% 11.4% 11.4% 7.0% 5.5% 4.6% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008281400.pktlen.png)
detailed numbers
[ 32- 63]: 3955188
[ 64- 127]: 7340983
[ 128- 255]: 1457619
[ 256- 511]: 1243892
[ 512- 1023]: 870978
[ 1024- 2047]: 13633983
Protocol Breakdown
![[protocol breakdown chart]](201008281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28502643 (100.00%) 21771089549 (100.00%) 763.83
ip 28377838 ( 99.56%) 21711892707 ( 99.73%) 765.10
tcp 18307625 ( 64.23%) 16276844846 ( 74.76%) 889.07
http(s) 9331347 ( 32.74%) 12681899566 ( 58.25%) 1359.06
http(c) 4343250 ( 15.24%) 653295003 ( 3.00%) 150.42
squid 273629 ( 0.96%) 108759826 ( 0.50%) 397.47
smtp 196719 ( 0.69%) 55951394 ( 0.26%) 284.42
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 62436 ( 0.22%) 45222342 ( 0.21%) 724.30
pop3 9287 ( 0.03%) 2717197 ( 0.01%) 292.58
imap 2768 ( 0.01%) 1345653 ( 0.01%) 486.15
telnet 1804 ( 0.01%) 134632 ( 0.00%) 74.63
ssh 196389 ( 0.69%) 23777422 ( 0.11%) 121.07
dns 2804 ( 0.01%) 273165 ( 0.00%) 97.42
bgp 136 ( 0.00%) 51733 ( 0.00%) 380.39
napster 17 ( 0.00%) 5409 ( 0.00%) 318.18
realaud 192 ( 0.00%) 54176 ( 0.00%) 282.17
rtsp 30227 ( 0.11%) 22347338 ( 0.10%) 739.32
icecast 12906 ( 0.05%) 15352125 ( 0.07%) 1189.53
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3843707 ( 13.49%) 2665657439 ( 12.24%) 693.51
udp 6882849 ( 24.15%) 3575415022 ( 16.42%) 519.47
dns 836102 ( 2.93%) 143548171 ( 0.66%) 171.69
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 6 ( 0.00%) 618 ( 0.00%) 103.00
halflif 51 ( 0.00%) 6690 ( 0.00%) 131.18
starcra 57 ( 0.00%) 5975 ( 0.00%) 104.82
everque 7123 ( 0.02%) 833119 ( 0.00%) 116.96
unreal 63 ( 0.00%) 11631 ( 0.00%) 184.62
quake 13 ( 0.00%) 1261 ( 0.00%) 97.00
cuseeme 3 ( 0.00%) 247 ( 0.00%) 82.33
other 6039292 ( 21.19%) 3430883671 ( 15.76%) 568.09
icmp 547795 ( 1.92%) 120819856 ( 0.55%) 220.56
ipip 387 ( 0.00%) 46285 ( 0.00%) 119.60
ipsec 11407 ( 0.04%) 1698762 ( 0.01%) 148.92
ip6 2626424 ( 9.21%) 1736672548 ( 7.98%) 661.23
other 1351 ( 0.00%) 395388 ( 0.00%) 292.66
frag 1306 ( 0.00%) 1275838 ( 0.01%) 976.91
ip6 124803 ( 0.44%) 59196722 ( 0.27%) 474.32
tcp6 45795 ( 0.16%) 24898281 ( 0.11%) 543.69
http(s) 630 ( 0.00%) 697794 ( 0.00%) 1107.61
http(c) 1017 ( 0.00%) 126819 ( 0.00%) 124.70
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 65 ( 0.00%) 8153 ( 0.00%) 125.43
imap 305 ( 0.00%) 35096 ( 0.00%) 115.07
dns 72 ( 0.00%) 12238 ( 0.00%) 169.97
bgp 104 ( 0.00%) 30721 ( 0.00%) 295.39
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
other 43596 ( 0.15%) 23986952 ( 0.11%) 550.21
udp6 39374 ( 0.14%) 10647944 ( 0.05%) 270.43
dns 35186 ( 0.12%) 10002524 ( 0.05%) 284.28
unreal 2 ( 0.00%) 336 ( 0.00%) 168.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 4185 ( 0.01%) 644975 ( 0.00%) 154.12
icmp6 7729 ( 0.03%) 1228682 ( 0.01%) 158.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31875 ( 0.11%) 22417735 ( 0.10%) 703.30
tcpdump file: 201008281400.dump.gz (736.94 MB)