Traffic Trace Info
DumpFile: 201004140100.dump
FileSize: 2186.93MB
Id: 201004140100
StartTime: Wed Apr 14 01:00:01 2010
EndTime: Wed Apr 14 01:15:01 2010
TotalTime: 900.31 seconds
TotalCapSize: 1703.61MB CapLen: 96 bytes
# of packets: 31674553 (19955.62MB)
AvgRate: 185.93Mbps stddev:16.03M
IP flow (unique src/dst pair) Information
# of flows: 1457521 (avg. 21.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.4% 0.5% 0.5% 0.5% 0.4% 0.4% 0.4% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 849577
Top 10 bandwidth usage (bytes/total in %):
16.2% 7.6% 7.3% 6.4% 6.4% 6.3% 4.1% 4.1% 3.5% 3.5%
# of IPv6 addresses: 962
Top 10 bandwidth usage (bytes/total in %):
48.5% 48.5% 13.3% 6.9% 2.9% 2.9% 2.8% 2.5% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140100.pktlen.png)
detailed numbers
[ 32- 63]: 5617129
[ 64- 127]: 8732335
[ 128- 255]: 2173855
[ 256- 511]: 1709803
[ 512- 1023]: 747059
[ 1024- 2047]: 12694372
Protocol Breakdown
![[protocol breakdown chart]](201004140100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31674553 (100.00%) 20924980994 (100.00%) 660.62
ip 31607929 ( 99.79%) 20908549197 ( 99.92%) 661.50
tcp 18564771 ( 58.61%) 14622775255 ( 69.88%) 787.66
http(s) 9056099 ( 28.59%) 12565682455 ( 60.05%) 1387.54
http(c) 5076181 ( 16.03%) 490110345 ( 2.34%) 96.55
squid 364546 ( 1.15%) 148853367 ( 0.71%) 408.33
smtp 348710 ( 1.10%) 96932659 ( 0.46%) 277.97
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 31703 ( 0.10%) 2678728 ( 0.01%) 84.49
pop3 10025 ( 0.03%) 7494267 ( 0.04%) 747.56
imap 1846 ( 0.01%) 825150 ( 0.00%) 446.99
telnet 1364 ( 0.00%) 123343 ( 0.00%) 90.43
ssh 52871 ( 0.17%) 8161213 ( 0.04%) 154.36
dns 53311 ( 0.17%) 3686788 ( 0.02%) 69.16
bgp 153 ( 0.00%) 50436 ( 0.00%) 329.65
napster 49 ( 0.00%) 5226 ( 0.00%) 106.65
realaud 63 ( 0.00%) 7033 ( 0.00%) 111.63
rtsp 58 ( 0.00%) 4176 ( 0.00%) 72.00
icecast 245 ( 0.00%) 21197 ( 0.00%) 86.52
hotline 3 ( 0.00%) 198 ( 0.00%) 66.00
other 3567539 ( 11.26%) 1298138374 ( 6.20%) 363.88
udp 8818551 ( 27.84%) 4488460569 ( 21.45%) 508.98
dns 687680 ( 2.17%) 117379147 ( 0.56%) 170.69
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 34 ( 0.00%) 3788 ( 0.00%) 111.41
halflif 114 ( 0.00%) 12059 ( 0.00%) 105.78
starcra 212 ( 0.00%) 21891 ( 0.00%) 103.26
everque 489 ( 0.00%) 93759 ( 0.00%) 191.74
unreal 131 ( 0.00%) 21067 ( 0.00%) 160.82
quake 143 ( 0.00%) 11379 ( 0.00%) 79.57
cuseeme 2 ( 0.00%) 206 ( 0.00%) 103.00
other 8129586 ( 25.67%) 4370788122 ( 20.89%) 537.64
icmp 992208 ( 3.13%) 165426715 ( 0.79%) 166.73
ipip 360 ( 0.00%) 44676 ( 0.00%) 124.10
ipsec 37290 ( 0.12%) 26653492 ( 0.13%) 714.76
ip6 2835439 ( 8.95%) 1536449115 ( 7.34%) 541.87
other 359310 ( 1.13%) 68739375 ( 0.33%) 191.31
frag 2522 ( 0.01%) 2908003 ( 0.01%) 1153.05
ip6 66624 ( 0.21%) 16431797 ( 0.08%) 246.63
tcp6 31296 ( 0.10%) 9842905 ( 0.05%) 314.51
http(s) 363 ( 0.00%) 392845 ( 0.00%) 1082.22
http(c) 3053 ( 0.01%) 294089 ( 0.00%) 96.33
smtp 379 ( 0.00%) 182351 ( 0.00%) 481.14
ftp 2689 ( 0.01%) 280644 ( 0.00%) 104.37
imap 358 ( 0.00%) 42062 ( 0.00%) 117.49
ssh 1585 ( 0.01%) 131646 ( 0.00%) 83.06
dns 197 ( 0.00%) 61097 ( 0.00%) 310.14
bgp 121 ( 0.00%) 17424 ( 0.00%) 144.00
other 22551 ( 0.07%) 8440747 ( 0.04%) 374.30
udp6 29023 ( 0.09%) 5761087 ( 0.03%) 198.50
dns 28363 ( 0.09%) 5643740 ( 0.03%) 198.98
other 660 ( 0.00%) 117347 ( 0.00%) 177.80
icmp6 6190 ( 0.02%) 752048 ( 0.00%) 121.49
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 85 ( 0.00%) 71677 ( 0.00%) 843.26
tcpdump file: 201004140100.dump.gz (819.28 MB)