Traffic Trace Info
DumpFile: 201008301400.dump
FileSize: 2132.85MB
Id: 201008301400
StartTime: Mon Aug 30 14:00:01 2010
EndTime: Mon Aug 30 14:15:01 2010
TotalTime: 899.69 seconds
TotalCapSize: 1678.27MB CapLen: 96 bytes
# of packets: 29790632 (20646.14MB)
AvgRate: 192.51Mbps stddev:19.48M
IP flow (unique src/dst pair) Information
# of flows: 991981 (avg. 30.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.1% 2.0% 2.0% 1.9% 1.8% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 534648
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.5% 6.9% 6.1% 3.2% 3.1% 2.5% 2.2% 2.2% 2.1%
# of IPv6 addresses: 2019
Top 10 bandwidth usage (bytes/total in %):
25.4% 25.4% 14.6% 13.5% 6.7% 6.7% 6.3% 4.8% 4.8% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008301400.pktlen.png)
detailed numbers
[ 32- 63]: 4713684
[ 64- 127]: 8107669
[ 128- 255]: 1465262
[ 256- 511]: 1231143
[ 512- 1023]: 811469
[ 1024- 2047]: 13461405
Protocol Breakdown
![[protocol breakdown chart]](201008301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29790632 (100.00%) 21649050219 (100.00%) 726.71
ip 29672861 ( 99.60%) 21599862590 ( 99.77%) 727.93
tcp 20267714 ( 68.03%) 16917112177 ( 78.14%) 834.68
http(s) 10332520 ( 34.68%) 13845306539 ( 63.95%) 1339.97
http(c) 5923939 ( 19.89%) 1005023590 ( 4.64%) 169.65
squid 227158 ( 0.76%) 107466972 ( 0.50%) 473.09
smtp 210358 ( 0.71%) 59525075 ( 0.27%) 282.97
ftp 32301 ( 0.11%) 4171895 ( 0.02%) 129.16
pop3 11695 ( 0.04%) 3498932 ( 0.02%) 299.18
imap 3122 ( 0.01%) 504025 ( 0.00%) 161.44
telnet 2174 ( 0.01%) 157192 ( 0.00%) 72.31
ssh 110363 ( 0.37%) 12031613 ( 0.06%) 109.02
dns 3006 ( 0.01%) 306830 ( 0.00%) 102.07
bgp 149 ( 0.00%) 62390 ( 0.00%) 418.72
napster 43 ( 0.00%) 6487 ( 0.00%) 150.86
realaud 25 ( 0.00%) 4009 ( 0.00%) 160.36
rtsp 7658 ( 0.03%) 7769718 ( 0.04%) 1014.59
icecast 35083 ( 0.12%) 30064209 ( 0.14%) 856.95
hotline 2 ( 0.00%) 156 ( 0.00%) 78.00
other 3368117 ( 11.31%) 1841212485 ( 8.50%) 546.66
udp 6663592 ( 22.37%) 3249397063 ( 15.01%) 487.63
dns 968312 ( 3.25%) 165426360 ( 0.76%) 170.84
realaud 20 ( 0.00%) 2577 ( 0.00%) 128.85
halflif 47 ( 0.00%) 4828 ( 0.00%) 102.72
starcra 47 ( 0.00%) 7200 ( 0.00%) 153.19
everque 469 ( 0.00%) 89168 ( 0.00%) 190.12
unreal 63 ( 0.00%) 10895 ( 0.00%) 172.94
quake 14 ( 0.00%) 1216 ( 0.00%) 86.86
cuseeme 14 ( 0.00%) 1403 ( 0.00%) 100.21
other 5694508 ( 19.12%) 3083794352 ( 14.24%) 541.54
icmp 618407 ( 2.08%) 105571623 ( 0.49%) 170.72
ipip 361 ( 0.00%) 43486 ( 0.00%) 120.46
ipsec 12035 ( 0.04%) 1827714 ( 0.01%) 151.87
ip6 2109497 ( 7.08%) 1325655673 ( 6.12%) 628.42
other 1255 ( 0.00%) 254854 ( 0.00%) 203.07
frag 646 ( 0.00%) 677483 ( 0.00%) 1048.74
ip6 117771 ( 0.40%) 49187629 ( 0.23%) 417.65
tcp6 59412 ( 0.20%) 33824911 ( 0.16%) 569.33
http(s) 823 ( 0.00%) 948302 ( 0.00%) 1152.25
http(c) 1061 ( 0.00%) 116575 ( 0.00%) 109.87
smtp 419 ( 0.00%) 247590 ( 0.00%) 590.91
imap 331 ( 0.00%) 38573 ( 0.00%) 116.53
ssh 34 ( 0.00%) 10220 ( 0.00%) 300.59
dns 74 ( 0.00%) 17820 ( 0.00%) 240.81
bgp 108 ( 0.00%) 37772 ( 0.00%) 349.74
other 56562 ( 0.19%) 32408059 ( 0.15%) 572.97
udp6 48786 ( 0.16%) 12245056 ( 0.06%) 251.00
dns 40474 ( 0.14%) 11327835 ( 0.05%) 279.88
other 8312 ( 0.03%) 917221 ( 0.00%) 110.35
icmp6 6768 ( 0.02%) 1125877 ( 0.01%) 166.35
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2774 ( 0.01%) 1987569 ( 0.01%) 716.50
tcpdump file: 201008301400.dump.gz (758.25 MB)