Traffic Trace Info
DumpFile: 201004140415.dump
FileSize: 1892.31MB
Id: 201004140415
StartTime: Wed Apr 14 04:15:00 2010
EndTime: Wed Apr 14 04:30:01 2010
TotalTime: 900.55 seconds
TotalCapSize: 1474.71MB CapLen: 96 bytes
# of packets: 27367245 (17285.02MB)
AvgRate: 161.01Mbps stddev:10.86M
IP flow (unique src/dst pair) Information
# of flows: 1111354 (avg. 24.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.7% 2.6% 1.3% 0.7% 0.7% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 617867
Top 10 bandwidth usage (bytes/total in %):
22.6% 8.3% 8.1% 6.7% 6.3% 6.1% 6.0% 3.8% 3.6% 3.1%
# of IPv6 addresses: 951
Top 10 bandwidth usage (bytes/total in %):
27.9% 8.8% 7.4% 7.3% 6.2% 6.1% 4.2% 4.0% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140415.pktlen.png)
detailed numbers
[ 32- 63]: 3978102
[ 64- 127]: 7395351
[ 128- 255]: 2395406
[ 256- 511]: 1831263
[ 512- 1023]: 824696
[ 1024- 2047]: 10942427
Protocol Breakdown
![[protocol breakdown chart]](201004140415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27367245 (100.00%) 18124657212 (100.00%) 662.28
ip 27315279 ( 99.81%) 18116790444 ( 99.96%) 663.25
tcp 14261566 ( 52.11%) 11312492981 ( 62.41%) 793.22
http(s) 6318372 ( 23.09%) 8719812031 ( 48.11%) 1380.07
http(c) 3175178 ( 11.60%) 306696475 ( 1.69%) 96.59
squid 269406 ( 0.98%) 66677205 ( 0.37%) 247.50
smtp 311515 ( 1.14%) 59296149 ( 0.33%) 190.35
ftp 20241 ( 0.07%) 1761911 ( 0.01%) 87.05
pop3 8593 ( 0.03%) 6450245 ( 0.04%) 750.64
imap 688 ( 0.00%) 111066 ( 0.00%) 161.43
telnet 1938 ( 0.01%) 143927 ( 0.00%) 74.27
ssh 63444 ( 0.23%) 9128093 ( 0.05%) 143.88
dns 53129 ( 0.19%) 3613518 ( 0.02%) 68.01
bgp 201 ( 0.00%) 83899 ( 0.00%) 417.41
napster 125 ( 0.00%) 9757 ( 0.00%) 78.06
realaud 7 ( 0.00%) 854 ( 0.00%) 122.00
rtsp 90 ( 0.00%) 6164 ( 0.00%) 68.49
icecast 310 ( 0.00%) 21683 ( 0.00%) 69.95
hotline 18 ( 0.00%) 3167 ( 0.00%) 175.94
other 4038277 ( 14.76%) 2138674797 ( 11.80%) 529.60
udp 9130215 ( 33.36%) 5101777944 ( 28.15%) 558.78
dns 649092 ( 2.37%) 114707544 ( 0.63%) 176.72
realaud 19 ( 0.00%) 2595 ( 0.00%) 136.58
halflif 103 ( 0.00%) 11096 ( 0.00%) 107.73
starcra 439 ( 0.00%) 44308 ( 0.00%) 100.93
everque 364 ( 0.00%) 60637 ( 0.00%) 166.59
unreal 102 ( 0.00%) 16576 ( 0.00%) 162.51
quake 34 ( 0.00%) 3359 ( 0.00%) 98.79
cuseeme 3 ( 0.00%) 268 ( 0.00%) 89.33
other 8479503 ( 30.98%) 4986665125 ( 27.51%) 588.08
icmp 1270035 ( 4.64%) 195226122 ( 1.08%) 153.72
ipip 373 ( 0.00%) 46722 ( 0.00%) 125.26
ipsec 8316 ( 0.03%) 3878360 ( 0.02%) 466.37
ip6 2606378 ( 9.52%) 1476501490 ( 8.15%) 566.50
other 38396 ( 0.14%) 26866825 ( 0.15%) 699.73
frag 2740 ( 0.01%) 2712723 ( 0.01%) 990.04
ip6 51966 ( 0.19%) 7866768 ( 0.04%) 151.38
tcp6 19540 ( 0.07%) 1950610 ( 0.01%) 99.83
http(s) 161 ( 0.00%) 110984 ( 0.00%) 689.34
http(c) 10182 ( 0.04%) 835341 ( 0.00%) 82.04
smtp 128 ( 0.00%) 51688 ( 0.00%) 403.81
ftp 2740 ( 0.01%) 283316 ( 0.00%) 103.40
imap 249 ( 0.00%) 28686 ( 0.00%) 115.20
ssh 1688 ( 0.01%) 140524 ( 0.00%) 83.25
dns 148 ( 0.00%) 35723 ( 0.00%) 241.37
bgp 121 ( 0.00%) 15653 ( 0.00%) 129.36
other 4123 ( 0.02%) 448695 ( 0.00%) 108.83
udp6 26135 ( 0.10%) 5086049 ( 0.03%) 194.61
dns 25770 ( 0.09%) 5013595 ( 0.03%) 194.55
other 365 ( 0.00%) 72454 ( 0.00%) 198.50
icmp6 6188 ( 0.02%) 759902 ( 0.00%) 122.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 73 ( 0.00%) 66127 ( 0.00%) 905.85
tcpdump file: 201004140415.dump.gz (698.81 MB)