Traffic Trace Info
DumpFile: 201004140900.dump
FileSize: 2189.05MB
Id: 201004140900
StartTime: Wed Apr 14 09:00:01 2010
EndTime: Wed Apr 14 09:15:01 2010
TotalTime: 900.24 seconds
TotalCapSize: 1709.14MB CapLen: 96 bytes
# of packets: 31450809 (17147.30MB)
AvgRate: 159.81Mbps stddev:14.27M
IP flow (unique src/dst pair) Information
# of flows: 1097346 (avg. 28.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 2.7% 2.6% 1.8% 1.3% 1.2% 1.2% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 588016
Top 10 bandwidth usage (bytes/total in %):
15.7% 12.4% 5.9% 5.8% 3.6% 3.2% 3.1% 3.0% 2.7% 2.7%
# of IPv6 addresses: 935
Top 10 bandwidth usage (bytes/total in %):
31.7% 9.1% 7.0% 6.9% 6.8% 4.9% 4.6% 4.3% 3.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140900.pktlen.png)
detailed numbers
[ 32- 63]: 4697290
[ 64- 127]: 8992787
[ 128- 255]: 4052457
[ 256- 511]: 2375844
[ 512- 1023]: 1010482
[ 1024- 2047]: 10321949
Protocol Breakdown
![[protocol breakdown chart]](201004140900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31450809 (100.00%) 17980244382 (100.00%) 571.69
ip 31407559 ( 99.86%) 17973330087 ( 99.96%) 572.26
tcp 15200569 ( 48.33%) 10883231385 ( 60.53%) 715.98
http(s) 5631434 ( 17.91%) 7528088062 ( 41.87%) 1336.80
http(c) 4638983 ( 14.75%) 561546608 ( 3.12%) 121.05
squid 262972 ( 0.84%) 96837968 ( 0.54%) 368.24
smtp 305674 ( 0.97%) 73250442 ( 0.41%) 239.64
ftp 16325 ( 0.05%) 1572852 ( 0.01%) 96.35
pop3 15426 ( 0.05%) 7576274 ( 0.04%) 491.14
imap 3247 ( 0.01%) 1916590 ( 0.01%) 590.26
telnet 842 ( 0.00%) 91239 ( 0.00%) 108.36
ssh 58111 ( 0.18%) 9542883 ( 0.05%) 164.22
dns 52441 ( 0.17%) 3584276 ( 0.02%) 68.35
bgp 149 ( 0.00%) 54869 ( 0.00%) 368.25
napster 214 ( 0.00%) 87676 ( 0.00%) 409.70
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 54015 ( 0.17%) 3308326 ( 0.02%) 61.25
icecast 410 ( 0.00%) 27500 ( 0.00%) 67.07
hotline 20 ( 0.00%) 1886 ( 0.00%) 94.30
other 4160297 ( 13.23%) 2595743392 ( 14.44%) 623.93
udp 9518082 ( 30.26%) 4228814905 ( 23.52%) 444.29
dns 640622 ( 2.04%) 113073649 ( 0.63%) 176.51
realaud 39 ( 0.00%) 4809 ( 0.00%) 123.31
halflif 159 ( 0.00%) 25411 ( 0.00%) 159.82
starcra 138 ( 0.00%) 13778 ( 0.00%) 99.84
everque 627 ( 0.00%) 116150 ( 0.00%) 185.25
unreal 112 ( 0.00%) 17566 ( 0.00%) 156.84
quake 24 ( 0.00%) 2418 ( 0.00%) 100.75
cuseeme 8 ( 0.00%) 1372 ( 0.00%) 171.50
other 8875739 ( 28.22%) 4115278222 ( 22.89%) 463.65
icmp 2236685 ( 7.11%) 247985949 ( 1.38%) 110.87
ipip 351 ( 0.00%) 42514 ( 0.00%) 121.12
ipsec 760601 ( 2.42%) 368664996 ( 2.05%) 484.70
ip6 3672831 ( 11.68%) 2241311247 ( 12.47%) 610.24
other 18440 ( 0.06%) 3279091 ( 0.02%) 177.82
frag 2174 ( 0.01%) 2149043 ( 0.01%) 988.52
ip6 43250 ( 0.14%) 6914295 ( 0.04%) 159.87
tcp6 11260 ( 0.04%) 1170178 ( 0.01%) 103.92
http(s) 43 ( 0.00%) 31178 ( 0.00%) 725.07
http(c) 2642 ( 0.01%) 243531 ( 0.00%) 92.18
smtp 170 ( 0.00%) 70542 ( 0.00%) 414.95
ftp 2756 ( 0.01%) 285865 ( 0.00%) 103.72
imap 381 ( 0.00%) 44672 ( 0.00%) 117.25
ssh 1585 ( 0.01%) 131614 ( 0.00%) 83.04
dns 91 ( 0.00%) 23074 ( 0.00%) 253.56
bgp 119 ( 0.00%) 17296 ( 0.00%) 145.34
other 3473 ( 0.01%) 322406 ( 0.00%) 92.83
udp6 26066 ( 0.08%) 4968677 ( 0.03%) 190.62
dns 25599 ( 0.08%) 4922934 ( 0.03%) 192.31
other 467 ( 0.00%) 45743 ( 0.00%) 97.95
icmp6 5809 ( 0.02%) 699646 ( 0.00%) 120.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 85 ( 0.00%) 71714 ( 0.00%) 843.69
tcpdump file: 201004140900.dump.gz (740.84 MB)