Traffic Trace Info
DumpFile: 201004140545.dump
FileSize: 1755.75MB
Id: 201004140545
StartTime: Wed Apr 14 05:45:01 2010
EndTime: Wed Apr 14 06:00:01 2010
TotalTime: 900.51 seconds
TotalCapSize: 1368.44MB CapLen: 96 bytes
# of packets: 25381998 (15461.27MB)
AvgRate: 144.04Mbps stddev:12.01M
IP flow (unique src/dst pair) Information
# of flows: 1300913 (avg. 19.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 1.3% 1.2% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 766968
Top 10 bandwidth usage (bytes/total in %):
24.2% 10.2% 7.8% 6.0% 5.8% 5.6% 4.6% 4.2% 2.8% 2.3%
# of IPv6 addresses: 876
Top 10 bandwidth usage (bytes/total in %):
27.6% 11.4% 6.9% 6.2% 6.0% 5.4% 5.4% 4.7% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140545.pktlen.png)
detailed numbers
[ 32- 63]: 3790178
[ 64- 127]: 7155297
[ 128- 255]: 2254373
[ 256- 511]: 1731171
[ 512- 1023]: 658734
[ 1024- 2047]: 9792245
Protocol Breakdown
![[protocol breakdown chart]](201004140545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25381998 (100.00%) 16212314625 (100.00%) 638.73
ip 25330456 ( 99.80%) 16204372335 ( 99.95%) 639.72
tcp 12836834 ( 50.57%) 9469026596 ( 58.41%) 737.65
http(s) 5091916 ( 20.06%) 6974803395 ( 43.02%) 1369.78
http(c) 2846566 ( 11.21%) 278263371 ( 1.72%) 97.75
squid 393489 ( 1.55%) 161391923 ( 1.00%) 410.16
smtp 371454 ( 1.46%) 59185735 ( 0.37%) 159.34
ftp 14888 ( 0.06%) 1314639 ( 0.01%) 88.30
pop3 8220 ( 0.03%) 6215583 ( 0.04%) 756.15
imap 729 ( 0.00%) 125398 ( 0.00%) 172.01
telnet 2677 ( 0.01%) 190704 ( 0.00%) 71.24
ssh 143463 ( 0.57%) 20802300 ( 0.13%) 145.00
dns 53835 ( 0.21%) 3857398 ( 0.02%) 71.65
bgp 176 ( 0.00%) 74118 ( 0.00%) 421.12
napster 3 ( 0.00%) 194 ( 0.00%) 64.67
realaud 16 ( 0.00%) 1410 ( 0.00%) 88.12
rtsp 75 ( 0.00%) 5226 ( 0.00%) 69.68
icecast 11415 ( 0.04%) 712706 ( 0.00%) 62.44
other 3897907 ( 15.36%) 1962082196 ( 12.10%) 503.37
udp 8754224 ( 34.49%) 4897278701 ( 30.21%) 559.42
dns 685283 ( 2.70%) 120396567 ( 0.74%) 175.69
realaud 61 ( 0.00%) 6570 ( 0.00%) 107.70
halflif 155 ( 0.00%) 22976 ( 0.00%) 148.23
starcra 221 ( 0.00%) 24402 ( 0.00%) 110.42
everque 325 ( 0.00%) 55437 ( 0.00%) 170.58
unreal 86 ( 0.00%) 13634 ( 0.00%) 158.53
quake 47 ( 0.00%) 4865 ( 0.00%) 103.51
cuseeme 3 ( 0.00%) 285 ( 0.00%) 95.00
other 8067359 ( 31.78%) 4776423688 ( 29.46%) 592.07
icmp 857251 ( 3.38%) 147065258 ( 0.91%) 171.55
ipip 326 ( 0.00%) 38556 ( 0.00%) 118.27
ipsec 1976 ( 0.01%) 659596 ( 0.00%) 333.80
ip6 2840731 ( 11.19%) 1655578114 ( 10.21%) 582.80
other 39114 ( 0.15%) 34725514 ( 0.21%) 887.80
frag 2876 ( 0.01%) 2894391 ( 0.02%) 1006.39
ip6 51542 ( 0.20%) 7942290 ( 0.05%) 154.09
tcp6 17296 ( 0.07%) 1800781 ( 0.01%) 104.12
http(s) 37 ( 0.00%) 18564 ( 0.00%) 501.73
http(c) 3611 ( 0.01%) 315659 ( 0.00%) 87.42
smtp 198 ( 0.00%) 89574 ( 0.00%) 452.39
ftp 5160 ( 0.02%) 532196 ( 0.00%) 103.14
imap 252 ( 0.00%) 29083 ( 0.00%) 115.41
ssh 1721 ( 0.01%) 143234 ( 0.00%) 83.23
dns 111 ( 0.00%) 31321 ( 0.00%) 282.17
bgp 101 ( 0.00%) 12418 ( 0.00%) 122.95
other 6105 ( 0.02%) 628732 ( 0.00%) 102.99
udp6 28079 ( 0.11%) 5373082 ( 0.03%) 191.36
dns 27587 ( 0.11%) 5296354 ( 0.03%) 191.99
other 492 ( 0.00%) 76728 ( 0.00%) 155.95
icmp6 6094 ( 0.02%) 729004 ( 0.00%) 119.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 43 ( 0.00%) 35343 ( 0.00%) 821.93
tcpdump file: 201004140545.dump.gz (646.62 MB)