Traffic Trace Info
DumpFile: 201004140845.dump
FileSize: 1908.80MB
Id: 201004140845
StartTime: Wed Apr 14 08:45:00 2010
EndTime: Wed Apr 14 09:00:01 2010
TotalTime: 900.58 seconds
TotalCapSize: 1491.12MB CapLen: 96 bytes
# of packets: 27372639 (16496.19MB)
AvgRate: 153.66Mbps stddev:13.78M
IP flow (unique src/dst pair) Information
# of flows: 812502 (avg. 33.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.5% 2.4% 1.5% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 459685
Top 10 bandwidth usage (bytes/total in %):
17.0% 12.1% 6.0% 5.6% 4.5% 3.9% 3.8% 3.5% 3.3% 2.9%
# of IPv6 addresses: 884
Top 10 bandwidth usage (bytes/total in %):
33.0% 7.5% 7.2% 7.1% 5.7% 5.0% 4.1% 4.1% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140845.pktlen.png)
detailed numbers
[ 32- 63]: 4242452
[ 64- 127]: 7474657
[ 128- 255]: 2856904
[ 256- 511]: 1731955
[ 512- 1023]: 638934
[ 1024- 2047]: 10427737
Protocol Breakdown
![[protocol breakdown chart]](201004140845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27372639 (100.00%) 17297514020 (100.00%) 631.93
ip 27329862 ( 99.84%) 17290864875 ( 99.96%) 632.67
tcp 14155060 ( 51.71%) 10638243700 ( 61.50%) 751.55
http(s) 5707829 ( 20.85%) 7699048473 ( 44.51%) 1348.86
http(c) 4156145 ( 15.18%) 558120267 ( 3.23%) 134.29
squid 230395 ( 0.84%) 76041694 ( 0.44%) 330.05
smtp 288301 ( 1.05%) 57258082 ( 0.33%) 198.61
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 11547 ( 0.04%) 1137124 ( 0.01%) 98.48
pop3 12060 ( 0.04%) 6849549 ( 0.04%) 567.96
imap 1715 ( 0.01%) 305179 ( 0.00%) 177.95
telnet 888 ( 0.00%) 76679 ( 0.00%) 86.35
ssh 76438 ( 0.28%) 15316344 ( 0.09%) 200.38
dns 56637 ( 0.21%) 3854422 ( 0.02%) 68.05
bgp 157 ( 0.00%) 47275 ( 0.00%) 301.11
napster 23 ( 0.00%) 2667 ( 0.00%) 115.96
realaud 16 ( 0.00%) 1761 ( 0.00%) 110.06
rtsp 79831 ( 0.29%) 4969026 ( 0.03%) 62.24
icecast 308 ( 0.00%) 21904 ( 0.00%) 71.12
other 3532763 ( 12.91%) 2215192834 ( 12.81%) 627.04
udp 8678529 ( 31.71%) 4394511300 ( 25.41%) 506.37
dns 615121 ( 2.25%) 110931380 ( 0.64%) 180.34
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 46 ( 0.00%) 5006 ( 0.00%) 108.83
halflif 177 ( 0.00%) 25739 ( 0.00%) 145.42
starcra 221 ( 0.00%) 21211 ( 0.00%) 95.98
everque 502 ( 0.00%) 94762 ( 0.00%) 188.77
unreal 111 ( 0.00%) 19760 ( 0.00%) 178.02
quake 124 ( 0.00%) 16367 ( 0.00%) 131.99
cuseeme 2 ( 0.00%) 163 ( 0.00%) 81.50
other 8061763 ( 29.45%) 4283173153 ( 24.76%) 531.29
icmp 939301 ( 3.43%) 139758078 ( 0.81%) 148.79
ipip 337 ( 0.00%) 41288 ( 0.00%) 122.52
ipsec 11569 ( 0.04%) 6034374 ( 0.03%) 521.60
ip6 3523672 ( 12.87%) 2108307653 ( 12.19%) 598.33
other 21394 ( 0.08%) 3968482 ( 0.02%) 185.50
frag 2105 ( 0.01%) 2135142 ( 0.01%) 1014.32
ip6 42777 ( 0.16%) 6649145 ( 0.04%) 155.44
tcp6 11104 ( 0.04%) 1251374 ( 0.01%) 112.70
http(s) 28 ( 0.00%) 15908 ( 0.00%) 568.14
http(c) 2526 ( 0.01%) 231483 ( 0.00%) 91.64
smtp 405 ( 0.00%) 205451 ( 0.00%) 507.29
ftp 2701 ( 0.01%) 279517 ( 0.00%) 103.49
imap 291 ( 0.00%) 33822 ( 0.00%) 116.23
ssh 1721 ( 0.01%) 143246 ( 0.00%) 83.23
dns 43 ( 0.00%) 23840 ( 0.00%) 554.42
bgp 105 ( 0.00%) 13387 ( 0.00%) 127.50
other 3284 ( 0.01%) 304720 ( 0.00%) 92.79
udp6 25797 ( 0.09%) 4657937 ( 0.03%) 180.56
dns 24851 ( 0.09%) 4562579 ( 0.03%) 183.60
other 946 ( 0.00%) 95358 ( 0.00%) 100.80
icmp6 5794 ( 0.02%) 690884 ( 0.00%) 119.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 51 ( 0.00%) 44734 ( 0.00%) 877.14
tcpdump file: 201004140845.dump.gz (659.37 MB)