Traffic Trace Info
DumpFile: 201004140300.dump
FileSize: 1892.73MB
Id: 201004140300
StartTime: Wed Apr 14 03:00:01 2010
EndTime: Wed Apr 14 03:15:00 2010
TotalTime: 899.13 seconds
TotalCapSize: 1479.05MB CapLen: 96 bytes
# of packets: 27110082 (18212.39MB)
AvgRate: 182.29Mbps stddev:34.04M
IP flow (unique src/dst pair) Information
# of flows: 1235478 (avg. 21.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 1.4% 1.3% 0.9% 0.9% 0.7% 0.7% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 722174
Top 10 bandwidth usage (bytes/total in %):
16.1% 7.9% 7.8% 7.7% 7.4% 6.9% 6.5% 6.4% 3.8% 3.6%
# of IPv6 addresses: 958
Top 10 bandwidth usage (bytes/total in %):
27.1% 12.9% 5.9% 5.8% 5.7% 5.1% 4.3% 4.2% 3.8% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140300.pktlen.png)
detailed numbers
[ 32- 63]: 4245269
[ 64- 127]: 7217878
[ 128- 255]: 1725810
[ 256- 511]: 1586290
[ 512- 1023]: 626858
[ 1024- 2047]: 11707977
Protocol Breakdown
![[protocol breakdown chart]](201004140300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27110082 (100.00%) 19097073346 (100.00%) 704.43
ip 27066983 ( 99.84%) 19089825854 ( 99.96%) 705.28
tcp 16149650 ( 59.57%) 13478582832 ( 70.58%) 834.61
http(s) 7327094 ( 27.03%) 10147802206 ( 53.14%) 1384.97
http(c) 3972273 ( 14.65%) 357697877 ( 1.87%) 90.05
squid 260350 ( 0.96%) 74909393 ( 0.39%) 287.73
smtp 284418 ( 1.05%) 64941125 ( 0.34%) 228.33
ftp 19358 ( 0.07%) 1737430 ( 0.01%) 89.75
pop3 6995 ( 0.03%) 5310165 ( 0.03%) 759.14
imap 533 ( 0.00%) 104180 ( 0.00%) 195.46
telnet 1813 ( 0.01%) 146596 ( 0.00%) 80.86
ssh 23994 ( 0.09%) 12102279 ( 0.06%) 504.39
dns 58338 ( 0.22%) 7406370 ( 0.04%) 126.96
bgp 147 ( 0.00%) 51512 ( 0.00%) 350.42
napster 867 ( 0.00%) 387570 ( 0.00%) 447.02
rtsp 66 ( 0.00%) 4634 ( 0.00%) 70.21
icecast 214 ( 0.00%) 13478 ( 0.00%) 62.98
other 4193186 ( 15.47%) 2805967777 ( 14.69%) 669.17
udp 7478132 ( 27.58%) 4012904721 ( 21.01%) 536.62
dns 624685 ( 2.30%) 107325414 ( 0.56%) 171.81
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 98 ( 0.00%) 8103 ( 0.00%) 82.68
halflif 83 ( 0.00%) 8801 ( 0.00%) 106.04
starcra 295 ( 0.00%) 34268 ( 0.00%) 116.16
everque 322 ( 0.00%) 55182 ( 0.00%) 171.37
unreal 122 ( 0.00%) 16819 ( 0.00%) 137.86
quake 18 ( 0.00%) 1688 ( 0.00%) 93.78
cuseeme 5 ( 0.00%) 807 ( 0.00%) 161.40
other 6851809 ( 25.27%) 3905031207 ( 20.45%) 569.93
icmp 902423 ( 3.33%) 151809465 ( 0.79%) 168.22
ipip 281 ( 0.00%) 33002 ( 0.00%) 117.44
ipsec 8533 ( 0.03%) 4304938 ( 0.02%) 504.50
ip6 2501197 ( 9.23%) 1426922474 ( 7.47%) 570.50
other 26767 ( 0.10%) 15268422 ( 0.08%) 570.42
frag 3862 ( 0.01%) 4512164 ( 0.02%) 1168.35
ip6 43099 ( 0.16%) 7247492 ( 0.04%) 168.16
tcp6 11849 ( 0.04%) 1347903 ( 0.01%) 113.76
http(s) 58 ( 0.00%) 27842 ( 0.00%) 480.03
http(c) 3607 ( 0.01%) 332309 ( 0.00%) 92.13
smtp 339 ( 0.00%) 165224 ( 0.00%) 487.39
ftp 2361 ( 0.01%) 244624 ( 0.00%) 103.61
imap 320 ( 0.00%) 37885 ( 0.00%) 118.39
ssh 1416 ( 0.01%) 117648 ( 0.00%) 83.08
dns 122 ( 0.00%) 27975 ( 0.00%) 229.30
bgp 116 ( 0.00%) 17775 ( 0.00%) 153.23
other 3510 ( 0.01%) 376621 ( 0.00%) 107.30
udp6 25622 ( 0.09%) 5124981 ( 0.03%) 200.02
dns 25221 ( 0.09%) 5045900 ( 0.03%) 200.07
other 401 ( 0.00%) 79081 ( 0.00%) 197.21
icmp6 5506 ( 0.02%) 691376 ( 0.00%) 125.57
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 95 ( 0.00%) 79560 ( 0.00%) 837.47
tcpdump file: 201004140300.dump.gz (695.31 MB)