Traffic Trace Info
DumpFile: 201004140715.dump
FileSize: 1863.23MB
Id: 201004140715
StartTime: Wed Apr 14 07:15:00 2010
EndTime: Wed Apr 14 07:30:01 2010
TotalTime: 900.62 seconds
TotalCapSize: 1456.80MB CapLen: 96 bytes
# of packets: 26634754 (14482.77MB)
AvgRate: 134.90Mbps stddev:13.68M
IP flow (unique src/dst pair) Information
# of flows: 960099 (avg. 27.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 2.1% 1.5% 1.1% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 576104
Top 10 bandwidth usage (bytes/total in %):
23.7% 14.1% 5.3% 5.1% 4.9% 4.8% 4.5% 4.4% 2.3% 2.2%
# of IPv6 addresses: 872
Top 10 bandwidth usage (bytes/total in %):
29.0% 11.9% 9.3% 6.4% 6.4% 5.7% 5.7% 5.0% 4.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140715.pktlen.png)
detailed numbers
[ 32- 63]: 3334784
[ 64- 127]: 7686746
[ 128- 255]: 4068795
[ 256- 511]: 2128470
[ 512- 1023]: 650146
[ 1024- 2047]: 8765813
Protocol Breakdown
![[protocol breakdown chart]](201004140715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26634754 (100.00%) 15186285349 (100.00%) 570.17
ip 26585980 ( 99.82%) 15178727756 ( 99.95%) 570.93
tcp 11264312 ( 42.29%) 8393391801 ( 55.27%) 745.13
http(s) 4343546 ( 16.31%) 5892152152 ( 38.80%) 1356.53
http(c) 2444905 ( 9.18%) 268328799 ( 1.77%) 109.75
squid 299820 ( 1.13%) 97094600 ( 0.64%) 323.84
smtp 329867 ( 1.24%) 53644768 ( 0.35%) 162.63
ftp 10008 ( 0.04%) 1181111 ( 0.01%) 118.02
pop3 11700 ( 0.04%) 8726253 ( 0.06%) 745.83
imap 2363 ( 0.01%) 1068258 ( 0.01%) 452.08
telnet 521 ( 0.00%) 53177 ( 0.00%) 102.07
ssh 116776 ( 0.44%) 15890363 ( 0.10%) 136.08
dns 54165 ( 0.20%) 3706546 ( 0.02%) 68.43
bgp 143 ( 0.00%) 41123 ( 0.00%) 287.57
napster 19 ( 0.00%) 4007 ( 0.00%) 210.89
realaud 11 ( 0.00%) 1091 ( 0.00%) 99.18
rtsp 167 ( 0.00%) 23949 ( 0.00%) 143.41
icecast 260 ( 0.00%) 17562 ( 0.00%) 67.55
other 3650041 ( 13.70%) 2051458042 ( 13.51%) 562.04
udp 9386842 ( 35.24%) 4341524760 ( 28.59%) 462.51
dns 613077 ( 2.30%) 110749445 ( 0.73%) 180.65
realaud 291 ( 0.00%) 18184 ( 0.00%) 62.49
halflif 162 ( 0.00%) 26976 ( 0.00%) 166.52
starcra 173 ( 0.00%) 17465 ( 0.00%) 100.95
everque 379 ( 0.00%) 67828 ( 0.00%) 178.97
unreal 103 ( 0.00%) 17499 ( 0.00%) 169.89
quake 57 ( 0.00%) 5316 ( 0.00%) 93.26
other 8772034 ( 32.93%) 4230340308 ( 27.86%) 482.25
icmp 2364161 ( 8.88%) 286808997 ( 1.89%) 121.32
ipip 328 ( 0.00%) 39836 ( 0.00%) 121.45
ipsec 5333 ( 0.02%) 2281054 ( 0.02%) 427.72
ip6 3541813 ( 13.30%) 2150003060 ( 14.16%) 607.03
other 23191 ( 0.09%) 4678248 ( 0.03%) 201.73
frag 2827 ( 0.01%) 2829470 ( 0.02%) 1000.87
ip6 48774 ( 0.18%) 7557593 ( 0.05%) 154.95
tcp6 15807 ( 0.06%) 1657346 ( 0.01%) 104.85
http(s) 52 ( 0.00%) 28885 ( 0.00%) 555.48
http(c) 2957 ( 0.01%) 278912 ( 0.00%) 94.32
smtp 228 ( 0.00%) 111144 ( 0.00%) 487.47
ftp 5181 ( 0.02%) 532567 ( 0.00%) 102.79
imap 282 ( 0.00%) 32578 ( 0.00%) 115.52
ssh 1716 ( 0.01%) 142820 ( 0.00%) 83.23
dns 129 ( 0.00%) 47569 ( 0.00%) 368.75
bgp 114 ( 0.00%) 14712 ( 0.00%) 129.05
other 5148 ( 0.02%) 468159 ( 0.00%) 90.94
udp6 26980 ( 0.10%) 5157171 ( 0.03%) 191.15
dns 26841 ( 0.10%) 5135473 ( 0.03%) 191.33
other 139 ( 0.00%) 21698 ( 0.00%) 156.10
icmp6 5917 ( 0.02%) 705146 ( 0.00%) 119.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 40 ( 0.00%) 33850 ( 0.00%) 846.25
tcpdump file: 201004140715.dump.gz (659.39 MB)