Traffic Trace Info
DumpFile: 201004140015.dump
FileSize: 2161.76MB
Id: 201004140015
StartTime: Wed Apr 14 00:15:01 2010
EndTime: Wed Apr 14 00:30:01 2010
TotalTime: 900.01 seconds
TotalCapSize: 1686.07MB CapLen: 96 bytes
# of packets: 31173462 (19890.41MB)
AvgRate: 185.38Mbps stddev:15.99M
IP flow (unique src/dst pair) Information
# of flows: 1180175 (avg. 26.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.3% 2.4% 1.7% 1.6% 1.2% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 679040
Top 10 bandwidth usage (bytes/total in %):
14.7% 6.7% 6.6% 5.6% 5.4% 4.9% 4.9% 4.1% 4.1% 3.3%
# of IPv6 addresses: 1029
Top 10 bandwidth usage (bytes/total in %):
65.0% 65.0% 8.6% 2.7% 2.0% 2.0% 1.9% 1.9% 1.9% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140015.pktlen.png)
detailed numbers
[ 32- 63]: 5419091
[ 64- 127]: 8454091
[ 128- 255]: 2274305
[ 256- 511]: 1731067
[ 512- 1023]: 671391
[ 1024- 2047]: 12623517
Protocol Breakdown
![[protocol breakdown chart]](201004140015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31173462 (100.00%) 20856605922 (100.00%) 669.05
ip 31108982 ( 99.79%) 20831110572 ( 99.88%) 669.62
tcp 18969989 ( 60.85%) 15388407641 ( 73.78%) 811.20
http(s) 9162910 ( 29.39%) 12705180088 ( 60.92%) 1386.59
http(c) 5032319 ( 16.14%) 482675111 ( 2.31%) 95.92
squid 414747 ( 1.33%) 157409426 ( 0.75%) 379.53
smtp 373821 ( 1.20%) 99707283 ( 0.48%) 266.72
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 30752 ( 0.10%) 2516272 ( 0.01%) 81.82
pop3 11961 ( 0.04%) 8734688 ( 0.04%) 730.26
imap 7106 ( 0.02%) 4917239 ( 0.02%) 691.98
telnet 8668 ( 0.03%) 5497548 ( 0.03%) 634.23
ssh 57925 ( 0.19%) 10110972 ( 0.05%) 174.55
dns 57712 ( 0.19%) 6407019 ( 0.03%) 111.02
bgp 138 ( 0.00%) 43295 ( 0.00%) 313.73
napster 9 ( 0.00%) 911 ( 0.00%) 101.22
realaud 12 ( 0.00%) 1145 ( 0.00%) 95.42
rtsp 48 ( 0.00%) 3552 ( 0.00%) 74.00
icecast 306 ( 0.00%) 19916 ( 0.00%) 65.08
hotline 13 ( 0.00%) 1305 ( 0.00%) 100.38
other 3811541 ( 12.23%) 1905181811 ( 9.13%) 499.85
udp 8255446 ( 26.48%) 3801155000 ( 18.23%) 460.44
dns 733821 ( 2.35%) 127699618 ( 0.61%) 174.02
rip 7 ( 0.00%) 559 ( 0.00%) 79.86
realaud 41 ( 0.00%) 4475 ( 0.00%) 109.15
halflif 69 ( 0.00%) 6246 ( 0.00%) 90.52
starcra 235 ( 0.00%) 24639 ( 0.00%) 104.85
everque 571 ( 0.00%) 130216 ( 0.00%) 228.05
unreal 97 ( 0.00%) 17217 ( 0.00%) 177.49
quake 31 ( 0.00%) 2909 ( 0.00%) 93.84
cuseeme 16 ( 0.00%) 2214 ( 0.00%) 138.38
other 7520328 ( 24.12%) 3673138504 ( 17.61%) 488.43
icmp 887388 ( 2.85%) 148888875 ( 0.71%) 167.78
ipip 314 ( 0.00%) 37100 ( 0.00%) 118.15
ipsec 22105 ( 0.07%) 17959462 ( 0.09%) 812.46
ip6 2629938 ( 8.44%) 1395139505 ( 6.69%) 530.48
other 343802 ( 1.10%) 79522989 ( 0.38%) 231.30
frag 1370 ( 0.00%) 1372644 ( 0.01%) 1001.93
ip6 64480 ( 0.21%) 25495350 ( 0.12%) 395.40
tcp6 29930 ( 0.10%) 19295017 ( 0.09%) 644.67
http(s) 13255 ( 0.04%) 17095408 ( 0.08%) 1289.73
http(c) 5966 ( 0.02%) 531848 ( 0.00%) 89.15
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 537 ( 0.00%) 500837 ( 0.00%) 932.66
ftp 2716 ( 0.01%) 281568 ( 0.00%) 103.67
imap 279 ( 0.00%) 32404 ( 0.00%) 116.14
ssh 1781 ( 0.01%) 157478 ( 0.00%) 88.42
dns 92 ( 0.00%) 23936 ( 0.00%) 260.17
bgp 115 ( 0.00%) 16289 ( 0.00%) 141.64
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 5186 ( 0.02%) 655027 ( 0.00%) 126.31
udp6 28293 ( 0.09%) 5379368 ( 0.03%) 190.13
dns 27651 ( 0.09%) 5263652 ( 0.03%) 190.36
other 642 ( 0.00%) 115716 ( 0.00%) 180.24
icmp6 6141 ( 0.02%) 742747 ( 0.00%) 120.95
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 86 ( 0.00%) 74138 ( 0.00%) 862.07
tcpdump file: 201004140015.dump.gz (803.86 MB)