Traffic Trace Info
DumpFile: 201008311400.dump
FileSize: 2356.24MB
Id: 201008311400
StartTime: Tue Aug 31 14:00:01 2010
EndTime: Tue Aug 31 14:15:00 2010
TotalTime: 899.35 seconds
TotalCapSize: 1848.34MB CapLen: 96 bytes
# of packets: 33285395 (22125.45MB)
AvgRate: 206.36Mbps stddev:19.36M
IP flow (unique src/dst pair) Information
# of flows: 1413423 (avg. 23.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.1% 2.0% 2.0% 1.3% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 750992
Top 10 bandwidth usage (bytes/total in %):
12.4% 10.9% 8.3% 5.9% 5.0% 4.0% 3.2% 3.1% 2.3% 2.1%
# of IPv6 addresses: 2203
Top 10 bandwidth usage (bytes/total in %):
32.7% 32.7% 18.1% 16.2% 14.8% 14.8% 7.4% 5.8% 5.8% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201008311400.pktlen.png)
detailed numbers
[ 32- 63]: 6492595
[ 64- 127]: 8805934
[ 128- 255]: 1422550
[ 256- 511]: 1220721
[ 512- 1023]: 782020
[ 1024- 2047]: 14561575
Protocol Breakdown
![[protocol breakdown chart]](201008311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33285395 (100.00%) 23200219099 (100.00%) 697.01
ip 33143655 ( 99.57%) 23102717708 ( 99.58%) 697.05
tcp 22509644 ( 67.63%) 17538061781 ( 75.59%) 779.14
http(s) 10403813 ( 31.26%) 13136242697 ( 56.62%) 1262.64
http(c) 5944591 ( 17.86%) 830838660 ( 3.58%) 139.76
squid 199510 ( 0.60%) 82559394 ( 0.36%) 413.81
smtp 300797 ( 0.90%) 173655308 ( 0.75%) 577.32
ftp 88859 ( 0.27%) 54557075 ( 0.24%) 613.97
pop3 10281 ( 0.03%) 4232646 ( 0.02%) 411.70
imap 5142 ( 0.02%) 1549174 ( 0.01%) 301.28
telnet 1124 ( 0.00%) 317534 ( 0.00%) 282.50
ssh 308859 ( 0.93%) 51961475 ( 0.22%) 168.24
dns 3027 ( 0.01%) 320692 ( 0.00%) 105.94
bgp 201 ( 0.00%) 126259 ( 0.00%) 628.15
napster 205 ( 0.00%) 52588 ( 0.00%) 256.53
realaud 33 ( 0.00%) 2935 ( 0.00%) 88.94
rtsp 6605 ( 0.02%) 7675822 ( 0.03%) 1162.12
icecast 25548 ( 0.08%) 1918782 ( 0.01%) 75.10
hotline 13 ( 0.00%) 1365 ( 0.00%) 105.00
other 5211029 ( 15.66%) 3192048955 ( 13.76%) 612.56
udp 7914872 ( 23.78%) 4077972800 ( 17.58%) 515.23
dns 1000769 ( 3.01%) 177226199 ( 0.76%) 177.09
realaud 16 ( 0.00%) 1850 ( 0.00%) 115.62
halflif 27 ( 0.00%) 3910 ( 0.00%) 144.81
starcra 131 ( 0.00%) 26688 ( 0.00%) 203.73
everque 4979 ( 0.01%) 606391 ( 0.00%) 121.79
unreal 30 ( 0.00%) 4633 ( 0.00%) 154.43
quake 16 ( 0.00%) 1412 ( 0.00%) 88.25
cuseeme 12 ( 0.00%) 1366 ( 0.00%) 113.83
other 6908490 ( 20.76%) 3899747298 ( 16.81%) 564.49
icmp 585684 ( 1.76%) 104616238 ( 0.45%) 178.62
ipip 358 ( 0.00%) 42260 ( 0.00%) 118.04
ipsec 10587 ( 0.03%) 1508754 ( 0.01%) 142.51
ip6 2121197 ( 6.37%) 1380126172 ( 5.95%) 650.64
other 1313 ( 0.00%) 389703 ( 0.00%) 296.80
frag 2047 ( 0.01%) 2329435 ( 0.01%) 1137.98
ip6 141740 ( 0.43%) 97501391 ( 0.42%) 687.89
tcp6 86265 ( 0.26%) 81498670 ( 0.35%) 944.75
http(s) 544 ( 0.00%) 570406 ( 0.00%) 1048.54
http(c) 772 ( 0.00%) 92924 ( 0.00%) 120.37
squid 21 ( 0.00%) 1778 ( 0.00%) 84.67
smtp 113 ( 0.00%) 18078 ( 0.00%) 159.98
imap 456 ( 0.00%) 53534 ( 0.00%) 117.40
ssh 33 ( 0.00%) 9126 ( 0.00%) 276.55
dns 136 ( 0.00%) 25914 ( 0.00%) 190.54
bgp 91 ( 0.00%) 13540 ( 0.00%) 148.79
other 84099 ( 0.25%) 80713370 ( 0.35%) 959.74
udp6 42973 ( 0.13%) 12085353 ( 0.05%) 281.23
dns 40586 ( 0.12%) 11711062 ( 0.05%) 288.55
other 2387 ( 0.01%) 374291 ( 0.00%) 156.80
icmp6 8864 ( 0.03%) 1331226 ( 0.01%) 150.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3608 ( 0.01%) 2582062 ( 0.01%) 715.65
tcpdump file: 201008311400.dump.gz (848.11 MB)