Traffic Trace Info
DumpFile: 201004140915.dump
FileSize: 1984.81MB
Id: 201004140915
StartTime: Wed Apr 14 09:15:01 2010
EndTime: Wed Apr 14 09:30:01 2010
TotalTime: 899.65 seconds
TotalCapSize: 1550.52MB CapLen: 96 bytes
# of packets: 28461529 (16966.16MB)
AvgRate: 158.20Mbps stddev:12.07M
IP flow (unique src/dst pair) Information
# of flows: 1235425 (avg. 23.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 2.9% 2.3% 1.6% 1.5% 1.4% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 691191
Top 10 bandwidth usage (bytes/total in %):
15.5% 12.4% 7.2% 6.8% 4.0% 3.8% 3.2% 3.0% 2.9% 2.9%
# of IPv6 addresses: 932
Top 10 bandwidth usage (bytes/total in %):
30.7% 7.8% 6.8% 6.6% 6.4% 5.3% 5.2% 4.7% 4.2% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140915.pktlen.png)
detailed numbers
[ 32- 63]: 4844179
[ 64- 127]: 7595198
[ 128- 255]: 2360834
[ 256- 511]: 2169158
[ 512- 1023]: 1041896
[ 1024- 2047]: 10450264
Protocol Breakdown
![[protocol breakdown chart]](201004140915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28461529 (100.00%) 17790312481 (100.00%) 625.07
ip 28418434 ( 99.85%) 17783188735 ( 99.96%) 625.76
tcp 15629427 ( 54.91%) 11167018477 ( 62.77%) 714.49
http(s) 5750534 ( 20.20%) 7533668935 ( 42.35%) 1310.08
http(c) 4596403 ( 16.15%) 640419568 ( 3.60%) 139.33
squid 271803 ( 0.95%) 108432212 ( 0.61%) 398.94
smtp 321402 ( 1.13%) 103685087 ( 0.58%) 322.60
ftp 16879 ( 0.06%) 1912314 ( 0.01%) 113.30
pop3 28726 ( 0.10%) 12661000 ( 0.07%) 440.75
imap 2005 ( 0.01%) 395743 ( 0.00%) 197.38
telnet 569 ( 0.00%) 47634 ( 0.00%) 83.72
ssh 79426 ( 0.28%) 13776351 ( 0.08%) 173.45
dns 56322 ( 0.20%) 4076641 ( 0.02%) 72.38
bgp 130 ( 0.00%) 43815 ( 0.00%) 337.04
napster 5 ( 0.00%) 316 ( 0.00%) 63.20
realaud 1417 ( 0.00%) 93763 ( 0.00%) 66.17
rtsp 54097 ( 0.19%) 3303631 ( 0.02%) 61.07
icecast 459 ( 0.00%) 35606 ( 0.00%) 77.57
hotline 30 ( 0.00%) 2879 ( 0.00%) 95.97
other 4449217 ( 15.63%) 2744462802 ( 15.43%) 616.84
udp 7792375 ( 27.38%) 3915753530 ( 22.01%) 502.51
dns 633042 ( 2.22%) 111123482 ( 0.62%) 175.54
realaud 17 ( 0.00%) 2072 ( 0.00%) 121.88
halflif 156 ( 0.00%) 23859 ( 0.00%) 152.94
starcra 154 ( 0.00%) 16448 ( 0.00%) 106.81
everque 615 ( 0.00%) 115725 ( 0.00%) 188.17
unreal 122 ( 0.00%) 20246 ( 0.00%) 165.95
quake 44 ( 0.00%) 5080 ( 0.00%) 115.45
cuseeme 3 ( 0.00%) 286 ( 0.00%) 95.33
other 7157625 ( 25.15%) 3804148280 ( 21.38%) 531.48
icmp 514731 ( 1.81%) 59644782 ( 0.34%) 115.88
ipip 319 ( 0.00%) 38996 ( 0.00%) 122.24
ipsec 876498 ( 3.08%) 423027916 ( 2.38%) 482.63
ip6 3590359 ( 12.61%) 2213353491 ( 12.44%) 616.47
other 14725 ( 0.05%) 4351543 ( 0.02%) 295.52
frag 2169 ( 0.01%) 2177846 ( 0.01%) 1004.08
ip6 43095 ( 0.15%) 7123746 ( 0.04%) 165.30
tcp6 11305 ( 0.04%) 1434290 ( 0.01%) 126.87
http(s) 37 ( 0.00%) 18457 ( 0.00%) 498.84
http(c) 2691 ( 0.01%) 255565 ( 0.00%) 94.97
smtp 525 ( 0.00%) 382937 ( 0.00%) 729.40
ftp 2685 ( 0.01%) 280525 ( 0.00%) 104.48
imap 254 ( 0.00%) 29238 ( 0.00%) 115.11
ssh 1711 ( 0.01%) 142426 ( 0.00%) 83.24
dns 38 ( 0.00%) 8978 ( 0.00%) 236.26
bgp 119 ( 0.00%) 16562 ( 0.00%) 139.18
other 3245 ( 0.01%) 299602 ( 0.00%) 92.33
udp6 25923 ( 0.09%) 4954231 ( 0.03%) 191.11
dns 25807 ( 0.09%) 4939028 ( 0.03%) 191.38
other 116 ( 0.00%) 15203 ( 0.00%) 131.06
icmp6 5790 ( 0.02%) 691962 ( 0.00%) 119.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 47 ( 0.00%) 39183 ( 0.00%) 833.68
tcpdump file: 201004140915.dump.gz (684.19 MB)