Traffic Trace Info
DumpFile: 201008291400.dump
FileSize: 2309.76MB
Id: 201008291400
StartTime: Sun Aug 29 14:00:01 2010
EndTime: Sun Aug 29 14:15:01 2010
TotalTime: 899.79 seconds
TotalCapSize: 1818.48MB CapLen: 96 bytes
# of packets: 32196545 (24295.32MB)
AvgRate: 226.47Mbps stddev:30.92M
IP flow (unique src/dst pair) Information
# of flows: 734120 (avg. 43.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.1% 3.8% 1.8% 1.3% 1.0% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 390596
Top 10 bandwidth usage (bytes/total in %):
10.1% 10.1% 8.7% 8.4% 7.6% 6.3% 5.4% 4.3% 3.9% 3.9%
# of IPv6 addresses: 1972
Top 10 bandwidth usage (bytes/total in %):
21.7% 21.7% 17.2% 11.2% 11.0% 11.0% 10.5% 6.4% 6.4% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008291400.pktlen.png)
detailed numbers
[ 32- 63]: 4791220
[ 64- 127]: 7967480
[ 128- 255]: 1219072
[ 256- 511]: 1311436
[ 512- 1023]: 752755
[ 1024- 2047]: 16154582
Protocol Breakdown
![[protocol breakdown chart]](201008291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32196545 (100.00%) 25475492717 (100.00%) 791.25
ip 32045885 ( 99.53%) 25411535726 ( 99.75%) 792.97
tcp 21875781 ( 67.94%) 19853297196 ( 77.93%) 907.55
http(s) 11705465 ( 36.36%) 16513959690 ( 64.82%) 1410.79
http(c) 5605451 ( 17.41%) 629974304 ( 2.47%) 112.39
squid 291748 ( 0.91%) 135001710 ( 0.53%) 462.73
smtp 165480 ( 0.51%) 50730462 ( 0.20%) 306.57
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 83672 ( 0.26%) 62902657 ( 0.25%) 751.78
pop3 17545 ( 0.05%) 3482462 ( 0.01%) 198.49
imap 3883 ( 0.01%) 2061303 ( 0.01%) 530.85
telnet 1375 ( 0.00%) 99571 ( 0.00%) 72.42
ssh 176214 ( 0.55%) 29051493 ( 0.11%) 164.86
dns 3668 ( 0.01%) 322242 ( 0.00%) 87.85
bgp 140 ( 0.00%) 56813 ( 0.00%) 405.81
napster 17 ( 0.00%) 1794 ( 0.00%) 105.53
realaud 122 ( 0.00%) 8894 ( 0.00%) 72.90
rtsp 82515 ( 0.26%) 79034577 ( 0.31%) 957.82
icecast 1111 ( 0.00%) 292465 ( 0.00%) 263.24
other 3737361 ( 11.61%) 2346315655 ( 9.21%) 627.80
udp 6885319 ( 21.39%) 3493493041 ( 13.71%) 507.38
dns 801756 ( 2.49%) 137440706 ( 0.54%) 171.42
realaud 18 ( 0.00%) 4113 ( 0.00%) 228.50
halflif 102 ( 0.00%) 17840 ( 0.00%) 174.90
starcra 34 ( 0.00%) 2858 ( 0.00%) 84.06
everque 269 ( 0.00%) 45139 ( 0.00%) 167.80
unreal 30 ( 0.00%) 5392 ( 0.00%) 179.73
quake 39 ( 0.00%) 5213 ( 0.00%) 133.67
cuseeme 4 ( 0.00%) 364 ( 0.00%) 91.00
other 6082893 ( 18.89%) 3355828849 ( 13.17%) 551.68
icmp 508475 ( 1.58%) 113976653 ( 0.45%) 224.15
ipip 390 ( 0.00%) 46720 ( 0.00%) 119.79
ipsec 11682 ( 0.04%) 1736156 ( 0.01%) 148.62
ip6 2762786 ( 8.58%) 1948574242 ( 7.65%) 705.29
other 1452 ( 0.00%) 411718 ( 0.00%) 283.55
frag 1092 ( 0.00%) 1182559 ( 0.00%) 1082.93
ip6 150658 ( 0.47%) 63956871 ( 0.25%) 424.52
tcp6 101290 ( 0.31%) 52003707 ( 0.20%) 513.41
http(s) 473 ( 0.00%) 465194 ( 0.00%) 983.50
http(c) 934 ( 0.00%) 114934 ( 0.00%) 123.06
smtp 61 ( 0.00%) 18549 ( 0.00%) 304.08
imap 252 ( 0.00%) 29685 ( 0.00%) 117.80
dns 65 ( 0.00%) 12644 ( 0.00%) 194.52
bgp 95 ( 0.00%) 27948 ( 0.00%) 294.19
realaud 6 ( 0.00%) 1115 ( 0.00%) 185.83
other 99404 ( 0.31%) 51333638 ( 0.20%) 516.41
udp6 40767 ( 0.13%) 10482944 ( 0.04%) 257.14
dns 34374 ( 0.11%) 9682245 ( 0.04%) 281.67
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 1 ( 0.00%) 168 ( 0.00%) 168.00
other 6391 ( 0.02%) 800421 ( 0.00%) 125.24
icmp6 8356 ( 0.03%) 1286618 ( 0.01%) 153.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 215 ( 0.00%) 179522 ( 0.00%) 834.99
tcpdump file: 201008291400.dump.gz (802.14 MB)