Traffic Trace Info
DumpFile: 201004140615.dump
FileSize: 1698.55MB
Id: 201004140615
StartTime: Wed Apr 14 06:15:01 2010
EndTime: Wed Apr 14 06:30:01 2010
TotalTime: 900.00 seconds
TotalCapSize: 1327.26MB CapLen: 96 bytes
# of packets: 24332487 (14133.71MB)
AvgRate: 131.73Mbps stddev:9.48M
IP flow (unique src/dst pair) Information
# of flows: 1084773 (avg. 22.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 1.6% 1.4% 1.4% 1.3% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 597761
Top 10 bandwidth usage (bytes/total in %):
25.3% 13.0% 6.3% 5.5% 5.3% 4.9% 4.9% 4.6% 2.8% 2.6%
# of IPv6 addresses: 886
Top 10 bandwidth usage (bytes/total in %):
27.6% 11.2% 10.4% 6.3% 6.1% 5.5% 5.3% 4.5% 4.2% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140615.pktlen.png)
detailed numbers
[ 32- 63]: 3334676
[ 64- 127]: 6835304
[ 128- 255]: 2892799
[ 256- 511]: 1860882
[ 512- 1023]: 616848
[ 1024- 2047]: 8791978
Protocol Breakdown
![[protocol breakdown chart]](201004140615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24332487 (100.00%) 14820272435 (100.00%) 609.07
ip 24279165 ( 99.78%) 14812336178 ( 99.95%) 610.08
tcp 11222767 ( 46.12%) 8343528213 ( 56.30%) 743.45
http(s) 4495108 ( 18.47%) 6068366674 ( 40.95%) 1349.99
http(c) 2472074 ( 10.16%) 258635379 ( 1.75%) 104.62
squid 317656 ( 1.31%) 95884835 ( 0.65%) 301.85
smtp 311855 ( 1.28%) 57084904 ( 0.39%) 183.05
ftp 11903 ( 0.05%) 1122055 ( 0.01%) 94.27
pop3 7217 ( 0.03%) 5249615 ( 0.04%) 727.40
imap 955 ( 0.00%) 129240 ( 0.00%) 135.33
telnet 10167 ( 0.04%) 5270967 ( 0.04%) 518.44
ssh 47922 ( 0.20%) 4175305 ( 0.03%) 87.13
dns 54610 ( 0.22%) 3750293 ( 0.03%) 68.67
bgp 130 ( 0.00%) 41452 ( 0.00%) 318.86
napster 337 ( 0.00%) 316961 ( 0.00%) 940.54
realaud 10 ( 0.00%) 1031 ( 0.00%) 103.10
rtsp 63 ( 0.00%) 4482 ( 0.00%) 71.14
icecast 17222 ( 0.07%) 1068600 ( 0.01%) 62.05
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3475534 ( 14.28%) 1842426176 ( 12.43%) 530.11
udp 8438950 ( 34.68%) 4326750729 ( 29.19%) 512.71
dns 628392 ( 2.58%) 109925267 ( 0.74%) 174.93
realaud 44 ( 0.00%) 4625 ( 0.00%) 105.11
halflif 140 ( 0.00%) 24803 ( 0.00%) 177.16
starcra 252 ( 0.00%) 24896 ( 0.00%) 98.79
everque 387 ( 0.00%) 65732 ( 0.00%) 169.85
unreal 108 ( 0.00%) 17789 ( 0.00%) 164.71
quake 52 ( 0.00%) 5225 ( 0.00%) 100.48
cuseeme 3 ( 0.00%) 270 ( 0.00%) 90.00
other 7809119 ( 32.09%) 4216453433 ( 28.45%) 539.94
icmp 1318055 ( 5.42%) 189535646 ( 1.28%) 143.80
ipip 316 ( 0.00%) 38280 ( 0.00%) 121.14
ipsec 9542 ( 0.04%) 4881412 ( 0.03%) 511.57
ip6 3270698 ( 13.44%) 1942597204 ( 13.11%) 593.94
other 18837 ( 0.08%) 5004694 ( 0.03%) 265.68
frag 2428 ( 0.01%) 2431919 ( 0.02%) 1001.61
ip6 53320 ( 0.22%) 7936137 ( 0.05%) 148.84
tcp6 19953 ( 0.08%) 2052011 ( 0.01%) 102.84
http(s) 53 ( 0.00%) 33016 ( 0.00%) 622.94
http(c) 6560 ( 0.03%) 572332 ( 0.00%) 87.25
smtp 256 ( 0.00%) 114123 ( 0.00%) 445.79
ftp 5094 ( 0.02%) 523581 ( 0.00%) 102.78
imap 245 ( 0.00%) 28270 ( 0.00%) 115.39
ssh 1715 ( 0.01%) 142798 ( 0.00%) 83.26
dns 139 ( 0.00%) 27285 ( 0.00%) 196.29
bgp 113 ( 0.00%) 15230 ( 0.00%) 134.78
other 5778 ( 0.02%) 595376 ( 0.00%) 103.04
udp6 26931 ( 0.11%) 5087298 ( 0.03%) 188.90
dns 26778 ( 0.11%) 5057714 ( 0.03%) 188.88
other 153 ( 0.00%) 29584 ( 0.00%) 193.36
icmp6 6346 ( 0.03%) 741219 ( 0.01%) 116.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 60 ( 0.00%) 51529 ( 0.00%) 858.82
tcpdump file: 201004140615.dump.gz (615.99 MB)