Traffic Trace Info
DumpFile: 201004140700.dump
FileSize: 1586.79MB
Id: 201004140700
StartTime: Wed Apr 14 07:00:01 2010
EndTime: Wed Apr 14 07:15:00 2010
TotalTime: 899.31 seconds
TotalCapSize: 1239.94MB CapLen: 96 bytes
# of packets: 22730737 (13724.48MB)
AvgRate: 128.02Mbps stddev:9.33M
IP flow (unique src/dst pair) Information
# of flows: 1039277 (avg. 21.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 1.6% 1.5% 1.4% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 599697
Top 10 bandwidth usage (bytes/total in %):
25.2% 13.4% 5.1% 5.0% 4.7% 4.5% 4.4% 4.1% 2.6% 2.3%
# of IPv6 addresses: 849
Top 10 bandwidth usage (bytes/total in %):
28.7% 11.7% 11.0% 6.3% 6.2% 5.6% 5.4% 4.7% 4.2% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140700.pktlen.png)
detailed numbers
[ 32- 63]: 3117125
[ 64- 127]: 6200334
[ 128- 255]: 2383597
[ 256- 511]: 1811549
[ 512- 1023]: 613181
[ 1024- 2047]: 8604951
Protocol Breakdown
![[protocol breakdown chart]](201004140700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22730737 (100.00%) 14391157807 (100.00%) 633.11
ip 22681646 ( 99.78%) 14383524406 ( 99.95%) 634.15
tcp 10767224 ( 47.37%) 8096347010 ( 56.26%) 751.94
http(s) 4336622 ( 19.08%) 5824150350 ( 40.47%) 1343.02
http(c) 2316724 ( 10.19%) 255312352 ( 1.77%) 110.20
squid 328143 ( 1.44%) 105429701 ( 0.73%) 321.29
smtp 331504 ( 1.46%) 113018837 ( 0.79%) 340.93
ftp 12687 ( 0.06%) 1250208 ( 0.01%) 98.54
pop3 9543 ( 0.04%) 7437481 ( 0.05%) 779.37
imap 632 ( 0.00%) 185807 ( 0.00%) 294.00
telnet 1016 ( 0.00%) 100893 ( 0.00%) 99.30
ssh 20616 ( 0.09%) 2769319 ( 0.02%) 134.33
dns 54022 ( 0.24%) 3682946 ( 0.03%) 68.17
bgp 153 ( 0.00%) 49221 ( 0.00%) 321.71
napster 323 ( 0.00%) 24560 ( 0.00%) 76.04
realaud 11 ( 0.00%) 1461 ( 0.00%) 132.82
rtsp 72 ( 0.00%) 5040 ( 0.00%) 70.00
icecast 177 ( 0.00%) 12582 ( 0.00%) 71.08
other 3354977 ( 14.76%) 1782916132 ( 12.39%) 531.42
udp 7712862 ( 33.93%) 4087542950 ( 28.40%) 529.96
dns 620628 ( 2.73%) 110317052 ( 0.77%) 177.75
realaud 50 ( 0.00%) 4432 ( 0.00%) 88.64
halflif 163 ( 0.00%) 25507 ( 0.00%) 156.48
starcra 210 ( 0.00%) 19056 ( 0.00%) 90.74
everque 333 ( 0.00%) 65156 ( 0.00%) 195.66
unreal 94 ( 0.00%) 16635 ( 0.00%) 176.97
quake 36 ( 0.00%) 3067 ( 0.00%) 85.19
cuseeme 2 ( 0.00%) 205 ( 0.00%) 102.50
other 7090768 ( 31.19%) 3976831070 ( 27.63%) 560.85
icmp 858710 ( 3.78%) 157424550 ( 1.09%) 183.33
ipip 362 ( 0.00%) 44292 ( 0.00%) 122.35
ipsec 3569 ( 0.02%) 1466118 ( 0.01%) 410.79
ip6 3213418 ( 14.14%) 1934086519 ( 13.44%) 601.88
other 125501 ( 0.55%) 106612967 ( 0.74%) 849.50
frag 2576 ( 0.01%) 2567436 ( 0.02%) 996.68
ip6 49091 ( 0.22%) 7633401 ( 0.05%) 155.49
tcp6 15795 ( 0.07%) 1591130 ( 0.01%) 100.74
http(s) 18 ( 0.00%) 7365 ( 0.00%) 409.17
http(c) 3180 ( 0.01%) 294635 ( 0.00%) 92.65
smtp 145 ( 0.00%) 38666 ( 0.00%) 266.66
ftp 5125 ( 0.02%) 530030 ( 0.00%) 103.42
imap 349 ( 0.00%) 41164 ( 0.00%) 117.95
ssh 1586 ( 0.01%) 131792 ( 0.00%) 83.10
dns 146 ( 0.00%) 63146 ( 0.00%) 432.51
bgp 103 ( 0.00%) 13602 ( 0.00%) 132.06
napster 4 ( 0.00%) 356 ( 0.00%) 89.00
other 5139 ( 0.02%) 470374 ( 0.00%) 91.53
udp6 27131 ( 0.12%) 5239517 ( 0.04%) 193.12
dns 26943 ( 0.12%) 5217204 ( 0.04%) 193.64
other 188 ( 0.00%) 22313 ( 0.00%) 118.69
icmp6 6055 ( 0.03%) 732153 ( 0.01%) 120.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 80 ( 0.00%) 66521 ( 0.00%) 831.51
tcpdump file: 201004140700.dump.gz (573.05 MB)