Traffic Trace Info
DumpFile: 201004140500.dump
FileSize: 1887.91MB
Id: 201004140500
StartTime: Wed Apr 14 05:00:01 2010
EndTime: Wed Apr 14 05:15:00 2010
TotalTime: 898.93 seconds
TotalCapSize: 1472.57MB CapLen: 96 bytes
# of packets: 27219280 (15466.08MB)
AvgRate: 144.32Mbps stddev:10.44M
IP flow (unique src/dst pair) Information
# of flows: 1077221 (avg. 25.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.2% 0.9% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 575415
Top 10 bandwidth usage (bytes/total in %):
24.4% 9.1% 7.1% 5.2% 5.2% 4.9% 4.8% 3.8% 3.4% 3.2%
# of IPv6 addresses: 981
Top 10 bandwidth usage (bytes/total in %):
25.6% 8.8% 7.7% 6.0% 5.8% 4.9% 4.5% 4.1% 4.0% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140500.pktlen.png)
detailed numbers
[ 32- 63]: 3721034
[ 64- 127]: 8775444
[ 128- 255]: 2368180
[ 256- 511]: 1911718
[ 512- 1023]: 870123
[ 1024- 2047]: 9572781
Protocol Breakdown
![[protocol breakdown chart]](201004140500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27219280 (100.00%) 16217356383 (100.00%) 595.80
ip 27168260 ( 99.81%) 16208793047 ( 99.95%) 596.61
tcp 13949917 ( 51.25%) 9327886228 ( 57.52%) 668.67
http(s) 5159765 ( 18.96%) 6964739897 ( 42.95%) 1349.82
http(c) 2992344 ( 10.99%) 287950663 ( 1.78%) 96.23
squid 299924 ( 1.10%) 89550944 ( 0.55%) 298.58
smtp 445276 ( 1.64%) 78168501 ( 0.48%) 175.55
ftp 16398 ( 0.06%) 1551482 ( 0.01%) 94.61
pop3 8367 ( 0.03%) 6168577 ( 0.04%) 737.25
imap 580 ( 0.00%) 91674 ( 0.00%) 158.06
telnet 2314 ( 0.01%) 184739 ( 0.00%) 79.84
ssh 1470308 ( 5.40%) 221979514 ( 1.37%) 150.97
dns 53963 ( 0.20%) 6183822 ( 0.04%) 114.59
bgp 156 ( 0.00%) 49140 ( 0.00%) 315.00
napster 2 ( 0.00%) 132 ( 0.00%) 66.00
rtsp 48 ( 0.00%) 3552 ( 0.00%) 74.00
icecast 275 ( 0.00%) 18143 ( 0.00%) 65.97
other 3500191 ( 12.86%) 1671245088 ( 10.31%) 477.47
udp 9365256 ( 34.41%) 5207807868 ( 32.11%) 556.08
dns 827896 ( 3.04%) 143574806 ( 0.89%) 173.42
realaud 50 ( 0.00%) 7059 ( 0.00%) 141.18
halflif 95 ( 0.00%) 8132 ( 0.00%) 85.60
starcra 263 ( 0.00%) 27301 ( 0.00%) 103.81
everque 407 ( 0.00%) 69043 ( 0.00%) 169.64
unreal 104 ( 0.00%) 16345 ( 0.00%) 157.16
quake 61 ( 0.00%) 6173 ( 0.00%) 101.20
cuseeme 23 ( 0.00%) 3347 ( 0.00%) 145.52
other 8535718 ( 31.36%) 5063812841 ( 31.22%) 593.25
icmp 1182373 ( 4.34%) 184784527 ( 1.14%) 156.28
ipip 350 ( 0.00%) 43144 ( 0.00%) 123.27
ipsec 3158 ( 0.01%) 1178320 ( 0.01%) 373.12
ip6 2652540 ( 9.75%) 1484250878 ( 9.15%) 559.56
other 14666 ( 0.05%) 2842082 ( 0.02%) 193.79
frag 2506 ( 0.01%) 2484383 ( 0.02%) 991.37
ip6 51020 ( 0.19%) 8563336 ( 0.05%) 167.84
tcp6 14316 ( 0.05%) 1522688 ( 0.01%) 106.36
http(s) 62 ( 0.00%) 27715 ( 0.00%) 447.02
http(c) 3103 ( 0.01%) 281315 ( 0.00%) 90.66
smtp 216 ( 0.00%) 78879 ( 0.00%) 365.18
ftp 3811 ( 0.01%) 389146 ( 0.00%) 102.11
imap 426 ( 0.00%) 49730 ( 0.00%) 116.74
ssh 1601 ( 0.01%) 132942 ( 0.00%) 83.04
dns 164 ( 0.00%) 39498 ( 0.00%) 240.84
bgp 109 ( 0.00%) 15895 ( 0.00%) 145.83
other 4824 ( 0.02%) 507568 ( 0.00%) 105.22
udp6 30370 ( 0.11%) 6218261 ( 0.04%) 204.75
dns 30050 ( 0.11%) 6165303 ( 0.04%) 205.17
other 320 ( 0.00%) 52958 ( 0.00%) 165.49
icmp6 6236 ( 0.02%) 763766 ( 0.00%) 122.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 68 ( 0.00%) 54541 ( 0.00%) 802.07
tcpdump file: 201004140500.dump.gz (710.75 MB)