Traffic Trace Info
DumpFile: 201004140445.dump
FileSize: 1804.46MB
Id: 201004140445
StartTime: Wed Apr 14 04:45:01 2010
EndTime: Wed Apr 14 05:00:01 2010
TotalTime: 900.49 seconds
TotalCapSize: 1406.07MB CapLen: 96 bytes
# of packets: 26107655 (15696.71MB)
AvgRate: 146.21Mbps stddev:10.00M
IP flow (unique src/dst pair) Information
# of flows: 1442955 (avg. 18.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.4% 1.0% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 772429
Top 10 bandwidth usage (bytes/total in %):
24.3% 8.9% 8.0% 6.1% 5.9% 5.5% 4.1% 3.3% 3.0% 3.0%
# of IPv6 addresses: 943
Top 10 bandwidth usage (bytes/total in %):
26.0% 8.0% 6.4% 5.7% 5.7% 5.3% 4.9% 4.6% 4.3% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140445.pktlen.png)
detailed numbers
[ 32- 63]: 3957535
[ 64- 127]: 7552734
[ 128- 255]: 2097855
[ 256- 511]: 1838389
[ 512- 1023]: 797225
[ 1024- 2047]: 9863917
Protocol Breakdown
![[protocol breakdown chart]](201004140445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26107655 (100.00%) 16459191401 (100.00%) 630.44
ip 26056577 ( 99.80%) 16450754001 ( 99.95%) 631.35
tcp 13572033 ( 51.98%) 9778070046 ( 59.41%) 720.46
http(s) 5568599 ( 21.33%) 7552173187 ( 45.88%) 1356.21
http(c) 2953253 ( 11.31%) 286615464 ( 1.74%) 97.05
squid 293933 ( 1.13%) 102601182 ( 0.62%) 349.06
smtp 471194 ( 1.80%) 76923992 ( 0.47%) 163.25
ftp 17073 ( 0.07%) 1495830 ( 0.01%) 87.61
pop3 6727 ( 0.03%) 4793123 ( 0.03%) 712.52
imap 1021 ( 0.00%) 187008 ( 0.00%) 183.16
telnet 1611 ( 0.01%) 123789 ( 0.00%) 76.84
ssh 587074 ( 2.25%) 78738615 ( 0.48%) 134.12
dns 56039 ( 0.21%) 3906772 ( 0.02%) 69.72
bgp 139 ( 0.00%) 43671 ( 0.00%) 314.18
napster 12 ( 0.00%) 820 ( 0.00%) 68.33
realaud 2 ( 0.00%) 148 ( 0.00%) 74.00
rtsp 184 ( 0.00%) 41678 ( 0.00%) 226.51
icecast 224 ( 0.00%) 14128 ( 0.00%) 63.07
other 3614942 ( 13.85%) 1670410279 ( 10.15%) 462.08
udp 8855437 ( 33.92%) 5018475155 ( 30.49%) 566.71
dns 869636 ( 3.33%) 160786837 ( 0.98%) 184.89
realaud 196 ( 0.00%) 15458 ( 0.00%) 78.87
halflif 107 ( 0.00%) 11403 ( 0.00%) 106.57
starcra 303 ( 0.00%) 35583 ( 0.00%) 117.44
everque 405 ( 0.00%) 67291 ( 0.00%) 166.15
unreal 73 ( 0.00%) 12081 ( 0.00%) 165.49
quake 24 ( 0.00%) 2572 ( 0.00%) 107.17
cuseeme 3 ( 0.00%) 268 ( 0.00%) 89.33
other 7983925 ( 30.58%) 4857077629 ( 29.51%) 608.36
icmp 991778 ( 3.80%) 155312634 ( 0.94%) 156.60
ipip 346 ( 0.00%) 41948 ( 0.00%) 121.24
ipsec 4827 ( 0.02%) 2457342 ( 0.01%) 509.08
ip6 2598416 ( 9.95%) 1466188201 ( 8.91%) 564.26
other 33740 ( 0.13%) 30208675 ( 0.18%) 895.34
frag 8885 ( 0.03%) 10657910 ( 0.06%) 1199.54
ip6 51078 ( 0.20%) 8437400 ( 0.05%) 165.19
tcp6 14454 ( 0.06%) 1515842 ( 0.01%) 104.87
http(s) 79 ( 0.00%) 43383 ( 0.00%) 549.15
http(c) 5208 ( 0.02%) 471666 ( 0.00%) 90.57
smtp 147 ( 0.00%) 51735 ( 0.00%) 351.94
ftp 2748 ( 0.01%) 285605 ( 0.00%) 103.93
imap 251 ( 0.00%) 28940 ( 0.00%) 115.30
ssh 1706 ( 0.01%) 142016 ( 0.00%) 83.25
dns 167 ( 0.00%) 39207 ( 0.00%) 234.77
bgp 96 ( 0.00%) 11711 ( 0.00%) 121.99
other 4052 ( 0.02%) 441579 ( 0.00%) 108.98
udp6 30745 ( 0.12%) 6160637 ( 0.04%) 200.38
dns 30463 ( 0.12%) 6101715 ( 0.04%) 200.30
other 282 ( 0.00%) 58922 ( 0.00%) 208.94
icmp6 5782 ( 0.02%) 701974 ( 0.00%) 121.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 67 ( 0.00%) 54867 ( 0.00%) 818.91
tcpdump file: 201004140445.dump.gz (675.50 MB)