Traffic Trace Info
DumpFile: 201004140115.dump
FileSize: 2150.12MB
Id: 201004140115
StartTime: Wed Apr 14 01:15:01 2010
EndTime: Wed Apr 14 01:30:01 2010
TotalTime: 900.05 seconds
TotalCapSize: 1675.91MB CapLen: 96 bytes
# of packets: 31076722 (19364.45MB)
AvgRate: 180.49Mbps stddev:11.36M
IP flow (unique src/dst pair) Information
# of flows: 1288197 (avg. 24.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.0% 1.0% 1.0% 0.7% 0.5% 0.4% 0.4% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 717707
Top 10 bandwidth usage (bytes/total in %):
17.3% 8.0% 7.6% 6.8% 6.5% 6.0% 4.0% 4.0% 3.2% 2.7%
# of IPv6 addresses: 953
Top 10 bandwidth usage (bytes/total in %):
32.4% 32.4% 18.3% 9.1% 4.0% 4.0% 3.9% 3.6% 3.1% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140115.pktlen.png)
detailed numbers
[ 32- 63]: 5335657
[ 64- 127]: 8741820
[ 128- 255]: 2228977
[ 256- 511]: 1769011
[ 512- 1023]: 705756
[ 1024- 2047]: 12295501
Protocol Breakdown
![[protocol breakdown chart]](201004140115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31076722 (100.00%) 20305098153 (100.00%) 653.39
ip 31012970 ( 99.79%) 20293120906 ( 99.94%) 654.34
tcp 17889903 ( 57.57%) 13949961579 ( 68.70%) 779.77
http(s) 8596056 ( 27.66%) 11852204662 ( 58.37%) 1378.80
http(c) 5048479 ( 16.25%) 472054839 ( 2.32%) 93.50
squid 322350 ( 1.04%) 117791897 ( 0.58%) 365.42
smtp 366109 ( 1.18%) 85543721 ( 0.42%) 233.66
ftp 27883 ( 0.09%) 2273054 ( 0.01%) 81.52
pop3 9424 ( 0.03%) 6472081 ( 0.03%) 686.77
imap 2306 ( 0.01%) 1182747 ( 0.01%) 512.90
telnet 2282 ( 0.01%) 164592 ( 0.00%) 72.13
ssh 118324 ( 0.38%) 19878416 ( 0.10%) 168.00
dns 56642 ( 0.18%) 3865276 ( 0.02%) 68.24
bgp 158 ( 0.00%) 57145 ( 0.00%) 361.68
napster 116 ( 0.00%) 10715 ( 0.00%) 92.37
realaud 8 ( 0.00%) 564 ( 0.00%) 70.50
rtsp 62 ( 0.00%) 4444 ( 0.00%) 71.68
icecast 248 ( 0.00%) 16189 ( 0.00%) 65.28
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 3339452 ( 10.75%) 1388440995 ( 6.84%) 415.77
udp 8838185 ( 28.44%) 4557881877 ( 22.45%) 515.70
dns 676198 ( 2.18%) 115702237 ( 0.57%) 171.11
realaud 49 ( 0.00%) 4647 ( 0.00%) 94.84
halflif 99 ( 0.00%) 9229 ( 0.00%) 93.22
starcra 262 ( 0.00%) 26883 ( 0.00%) 102.61
everque 505 ( 0.00%) 125992 ( 0.00%) 249.49
unreal 121 ( 0.00%) 19925 ( 0.00%) 164.67
quake 59 ( 0.00%) 5710 ( 0.00%) 96.78
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 8160064 ( 26.26%) 4441860996 ( 21.88%) 544.34
icmp 1077851 ( 3.47%) 162313639 ( 0.80%) 150.59
ipip 337 ( 0.00%) 39842 ( 0.00%) 118.23
ipsec 1483 ( 0.00%) 478274 ( 0.00%) 322.50
ip6 2883281 ( 9.28%) 1556557087 ( 7.67%) 539.86
other 321930 ( 1.04%) 65888608 ( 0.32%) 204.67
frag 3418 ( 0.01%) 3465719 ( 0.02%) 1013.96
ip6 63752 ( 0.21%) 11977247 ( 0.06%) 187.87
tcp6 28444 ( 0.09%) 5540737 ( 0.03%) 194.79
http(s) 67 ( 0.00%) 36047 ( 0.00%) 538.01
http(c) 6153 ( 0.02%) 540574 ( 0.00%) 87.86
smtp 191 ( 0.00%) 82889 ( 0.00%) 433.97
ftp 2686 ( 0.01%) 276327 ( 0.00%) 102.88
imap 250 ( 0.00%) 28797 ( 0.00%) 115.19
ssh 1720 ( 0.01%) 143172 ( 0.00%) 83.24
dns 179 ( 0.00%) 53642 ( 0.00%) 299.68
bgp 99 ( 0.00%) 12293 ( 0.00%) 124.17
other 17099 ( 0.06%) 4366996 ( 0.02%) 255.39
udp6 29067 ( 0.09%) 5635803 ( 0.03%) 193.89
dns 28388 ( 0.09%) 5512922 ( 0.03%) 194.20
other 679 ( 0.00%) 122881 ( 0.00%) 180.97
icmp6 6150 ( 0.02%) 743978 ( 0.00%) 120.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 61 ( 0.00%) 52649 ( 0.00%) 863.10
tcpdump file: 201004140115.dump.gz (811.25 MB)