Traffic Trace Info
DumpFile: 201004140515.dump
FileSize: 1811.53MB
Id: 201004140515
StartTime: Wed Apr 14 05:15:00 2010
EndTime: Wed Apr 14 05:30:00 2010
TotalTime: 900.38 seconds
TotalCapSize: 1411.48MB CapLen: 96 bytes
# of packets: 26216886 (15487.05MB)
AvgRate: 144.30Mbps stddev:9.98M
IP flow (unique src/dst pair) Information
# of flows: 1088863 (avg. 24.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.6% 1.2% 1.0% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 604005
Top 10 bandwidth usage (bytes/total in %):
24.7% 9.3% 6.9% 6.1% 5.8% 5.5% 4.2% 3.9% 3.8% 2.9%
# of IPv6 addresses: 999
Top 10 bandwidth usage (bytes/total in %):
26.4% 10.9% 6.9% 6.1% 5.9% 5.1% 4.7% 4.0% 3.9% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140515.pktlen.png)
detailed numbers
[ 32- 63]: 3594649
[ 64- 127]: 7805446
[ 128- 255]: 2471968
[ 256- 511]: 1893841
[ 512- 1023]: 747827
[ 1024- 2047]: 9703155
Protocol Breakdown
![[protocol breakdown chart]](201004140515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26216886 (100.00%) 16239346656 (100.00%) 619.42
ip 26165219 ( 99.80%) 16231032582 ( 99.95%) 620.33
tcp 13043964 ( 49.75%) 9399135667 ( 57.88%) 720.57
http(s) 5134768 ( 19.59%) 6987224085 ( 43.03%) 1360.77
http(c) 2954964 ( 11.27%) 285263522 ( 1.76%) 96.54
squid 310789 ( 1.19%) 106983555 ( 0.66%) 344.23
smtp 440619 ( 1.68%) 90766998 ( 0.56%) 206.00
ftp 14477 ( 0.06%) 1268158 ( 0.01%) 87.60
pop3 7189 ( 0.03%) 5414273 ( 0.03%) 753.13
imap 1938 ( 0.01%) 1995344 ( 0.01%) 1029.59
telnet 2634 ( 0.01%) 189433 ( 0.00%) 71.92
ssh 419884 ( 1.60%) 63107815 ( 0.39%) 150.30
dns 51146 ( 0.20%) 3531506 ( 0.02%) 69.05
bgp 164 ( 0.00%) 68023 ( 0.00%) 414.77
napster 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 3 ( 0.00%) 194 ( 0.00%) 64.67
rtsp 60 ( 0.00%) 4296 ( 0.00%) 71.60
icecast 299 ( 0.00%) 20943 ( 0.00%) 70.04
hotline 5 ( 0.00%) 449 ( 0.00%) 89.80
other 3705023 ( 14.13%) 1853296941 ( 11.41%) 500.21
udp 9226687 ( 35.19%) 5110972503 ( 31.47%) 553.93
dns 769700 ( 2.94%) 138669754 ( 0.85%) 180.16
realaud 33 ( 0.00%) 5457 ( 0.00%) 165.36
halflif 86 ( 0.00%) 8073 ( 0.00%) 93.87
starcra 227 ( 0.00%) 23876 ( 0.00%) 105.18
everque 386 ( 0.00%) 69560 ( 0.00%) 180.21
unreal 112 ( 0.00%) 17469 ( 0.00%) 155.97
quake 46 ( 0.00%) 4422 ( 0.00%) 96.13
cuseeme 42 ( 0.00%) 7006 ( 0.00%) 166.81
other 8455442 ( 32.25%) 4971880724 ( 30.62%) 588.01
icmp 1176580 ( 4.49%) 179221838 ( 1.10%) 152.32
ipip 332 ( 0.00%) 38817 ( 0.00%) 116.92
ipsec 1780 ( 0.01%) 626552 ( 0.00%) 352.00
ip6 2682377 ( 10.23%) 1516961989 ( 9.34%) 565.53
other 33499 ( 0.13%) 24075216 ( 0.15%) 718.68
frag 2501 ( 0.01%) 2503367 ( 0.02%) 1000.95
ip6 51667 ( 0.20%) 8314074 ( 0.05%) 160.92
tcp6 16996 ( 0.06%) 1811774 ( 0.01%) 106.60
http(s) 75 ( 0.00%) 36615 ( 0.00%) 488.20
http(c) 3304 ( 0.01%) 307872 ( 0.00%) 93.18
smtp 205 ( 0.00%) 92424 ( 0.00%) 450.85
ftp 5133 ( 0.02%) 529488 ( 0.00%) 103.15
imap 266 ( 0.00%) 30463 ( 0.00%) 114.52
ssh 1714 ( 0.01%) 142728 ( 0.00%) 83.27
dns 135 ( 0.00%) 32278 ( 0.00%) 239.10
bgp 112 ( 0.00%) 15215 ( 0.00%) 135.85
other 6052 ( 0.02%) 624691 ( 0.00%) 103.22
udp6 28455 ( 0.11%) 5714099 ( 0.04%) 200.81
dns 28104 ( 0.11%) 5658137 ( 0.03%) 201.33
other 351 ( 0.00%) 55962 ( 0.00%) 159.44
icmp6 6138 ( 0.02%) 743871 ( 0.00%) 121.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48 ( 0.00%) 40250 ( 0.00%) 838.54
tcpdump file: 201004140515.dump.gz (674.39 MB)