Traffic Trace Info
DumpFile: 201004140600.dump
FileSize: 1894.93MB
Id: 201004140600
StartTime: Wed Apr 14 06:00:01 2010
EndTime: Wed Apr 14 06:15:01 2010
TotalTime: 899.74 seconds
TotalCapSize: 1477.90MB CapLen: 96 bytes
# of packets: 27330263 (15056.39MB)
AvgRate: 140.37Mbps stddev:11.40M
IP flow (unique src/dst pair) Information
# of flows: 947397 (avg. 28.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.4% 1.3% 1.1% 1.1% 1.0% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 527989
Top 10 bandwidth usage (bytes/total in %):
25.1% 10.9% 6.3% 5.4% 5.4% 5.2% 4.7% 4.3% 2.9% 2.5%
# of IPv6 addresses: 894
Top 10 bandwidth usage (bytes/total in %):
28.2% 11.6% 11.4% 6.3% 5.9% 5.9% 5.5% 5.2% 4.1% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140600.pktlen.png)
detailed numbers
[ 32- 63]: 3262578
[ 64- 127]: 8150819
[ 128- 255]: 4056702
[ 256- 511]: 1997649
[ 512- 1023]: 669119
[ 1024- 2047]: 9193396
Protocol Breakdown
![[protocol breakdown chart]](201004140600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27330263 (100.00%) 15787767122 (100.00%) 577.67
ip 27279932 ( 99.82%) 15779991313 ( 99.95%) 578.45
tcp 11617626 ( 42.51%) 8880670577 ( 56.25%) 764.41
http(s) 4858375 ( 17.78%) 6643095825 ( 42.08%) 1367.35
http(c) 2632462 ( 9.63%) 272491424 ( 1.73%) 103.51
squid 308038 ( 1.13%) 120029316 ( 0.76%) 389.66
smtp 334810 ( 1.23%) 63615550 ( 0.40%) 190.00
ftp 20835 ( 0.08%) 1698873 ( 0.01%) 81.54
pop3 9331 ( 0.03%) 7349084 ( 0.05%) 787.60
imap 633 ( 0.00%) 112662 ( 0.00%) 177.98
telnet 2630 ( 0.01%) 205243 ( 0.00%) 78.04
ssh 17092 ( 0.06%) 2132885 ( 0.01%) 124.79
dns 52338 ( 0.19%) 3596216 ( 0.02%) 68.71
bgp 180 ( 0.00%) 78180 ( 0.00%) 434.33
napster 6 ( 0.00%) 404 ( 0.00%) 67.33
realaud 18 ( 0.00%) 3103 ( 0.00%) 172.39
rtsp 11990 ( 0.04%) 17227114 ( 0.11%) 1436.79
icecast 221 ( 0.00%) 13946 ( 0.00%) 63.10
hotline 16 ( 0.00%) 1104 ( 0.00%) 69.00
other 3368650 ( 12.33%) 1749019588 ( 11.08%) 519.20
udp 10045570 ( 36.76%) 4843351730 ( 30.68%) 482.14
dns 658265 ( 2.41%) 116121684 ( 0.74%) 176.41
realaud 40 ( 0.00%) 3622 ( 0.00%) 90.55
halflif 148 ( 0.00%) 23148 ( 0.00%) 156.41
starcra 219 ( 0.00%) 22482 ( 0.00%) 102.66
everque 346 ( 0.00%) 60556 ( 0.00%) 175.02
unreal 103 ( 0.00%) 16763 ( 0.00%) 162.75
quake 70 ( 0.00%) 5749 ( 0.00%) 82.13
cuseeme 4 ( 0.00%) 655 ( 0.00%) 163.75
other 9385830 ( 34.34%) 4726843397 ( 29.94%) 503.61
icmp 2624708 ( 9.60%) 316078579 ( 2.00%) 120.42
ipip 362 ( 0.00%) 44912 ( 0.00%) 124.07
ipsec 6821 ( 0.02%) 3595438 ( 0.02%) 527.11
ip6 2961233 ( 10.83%) 1723654439 ( 10.92%) 582.07
other 23612 ( 0.09%) 12595638 ( 0.08%) 533.44
frag 2343 ( 0.01%) 2308904 ( 0.01%) 985.45
ip6 50331 ( 0.18%) 7775809 ( 0.05%) 154.49
tcp6 16344 ( 0.06%) 1714723 ( 0.01%) 104.91
http(s) 70 ( 0.00%) 31209 ( 0.00%) 445.84
http(c) 2981 ( 0.01%) 270064 ( 0.00%) 90.60
smtp 170 ( 0.00%) 64223 ( 0.00%) 377.78
ftp 5089 ( 0.02%) 524414 ( 0.00%) 103.05
imap 359 ( 0.00%) 42174 ( 0.00%) 117.48
ssh 1580 ( 0.01%) 131180 ( 0.00%) 83.03
dns 123 ( 0.00%) 34733 ( 0.00%) 282.38
bgp 115 ( 0.00%) 15597 ( 0.00%) 135.63
other 5857 ( 0.02%) 601129 ( 0.00%) 102.63
udp6 27903 ( 0.10%) 5295486 ( 0.03%) 189.78
dns 27500 ( 0.10%) 5230503 ( 0.03%) 190.20
other 403 ( 0.00%) 64983 ( 0.00%) 161.25
icmp6 5997 ( 0.02%) 715547 ( 0.00%) 119.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 57 ( 0.00%) 45973 ( 0.00%) 806.54
tcpdump file: 201004140600.dump.gz (681.53 MB)