Traffic Trace Info
DumpFile: 201004141015.dump
FileSize: 2261.33MB
Id: 201004141015
StartTime: Wed Apr 14 10:15:00 2010
EndTime: Wed Apr 14 10:30:01 2010
TotalTime: 900.36 seconds
TotalCapSize: 1769.03MB CapLen: 96 bytes
# of packets: 32262393 (20492.96MB)
AvgRate: 190.93Mbps stddev:18.66M
IP flow (unique src/dst pair) Information
# of flows: 954187 (avg. 33.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.4% 2.2% 2.1% 1.8% 1.6% 1.6% 1.6% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 538328
Top 10 bandwidth usage (bytes/total in %):
15.0% 12.2% 11.7% 7.6% 4.4% 3.3% 3.1% 3.1% 3.0% 2.5%
# of IPv6 addresses: 979
Top 10 bandwidth usage (bytes/total in %):
23.7% 8.2% 6.4% 6.0% 5.3% 5.3% 5.2% 5.2% 4.6% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141015.pktlen.png)
detailed numbers
[ 32- 63]: 5292985
[ 64- 127]: 8522100
[ 128- 255]: 2164410
[ 256- 511]: 2368822
[ 512- 1023]: 1073043
[ 1024- 2047]: 12841033
Protocol Breakdown
![[protocol breakdown chart]](201004141015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32262393 (100.00%) 21488421431 (100.00%) 666.05
ip 32212208 ( 99.84%) 21479195535 ( 99.96%) 666.80
tcp 19913311 ( 61.72%) 15019743035 ( 69.90%) 754.26
http(s) 7308819 ( 22.65%) 9800823306 ( 45.61%) 1340.96
http(c) 5954224 ( 18.46%) 796026334 ( 3.70%) 133.69
squid 260694 ( 0.81%) 94062954 ( 0.44%) 360.82
smtp 297085 ( 0.92%) 72969836 ( 0.34%) 245.62
ftp 41931 ( 0.13%) 20057057 ( 0.09%) 478.33
pop3 19838 ( 0.06%) 11632696 ( 0.05%) 586.38
imap 3457 ( 0.01%) 930539 ( 0.00%) 269.18
telnet 2178 ( 0.01%) 135911 ( 0.00%) 62.40
ssh 118205 ( 0.37%) 13530146 ( 0.06%) 114.46
dns 59493 ( 0.18%) 5789173 ( 0.03%) 97.31
bgp 144 ( 0.00%) 47518 ( 0.00%) 329.99
napster 387 ( 0.00%) 264274 ( 0.00%) 682.88
realaud 55 ( 0.00%) 7695 ( 0.00%) 139.91
rtsp 125175 ( 0.39%) 7805016 ( 0.04%) 62.35
icecast 9941 ( 0.03%) 679976 ( 0.00%) 68.40
hotline 5 ( 0.00%) 305 ( 0.00%) 61.00
other 5711673 ( 17.70%) 4194979879 ( 19.52%) 734.46
udp 8231758 ( 25.52%) 4344859099 ( 20.22%) 527.82
dns 685848 ( 2.13%) 118056300 ( 0.55%) 172.13
realaud 78 ( 0.00%) 11898 ( 0.00%) 152.54
halflif 139 ( 0.00%) 22478 ( 0.00%) 161.71
starcra 173 ( 0.00%) 19140 ( 0.00%) 110.64
everque 634 ( 0.00%) 121884 ( 0.00%) 192.25
unreal 134 ( 0.00%) 20616 ( 0.00%) 153.85
quake 29 ( 0.00%) 2803 ( 0.00%) 96.66
cuseeme 6 ( 0.00%) 957 ( 0.00%) 159.50
other 7540497 ( 23.37%) 4226142655 ( 19.67%) 560.46
icmp 477011 ( 1.48%) 54465021 ( 0.25%) 114.18
ipip 341 ( 0.00%) 39338 ( 0.00%) 115.36
ipsec 857611 ( 2.66%) 418095802 ( 1.95%) 487.51
ip6 2725922 ( 8.45%) 1641044421 ( 7.64%) 602.01
other 6254 ( 0.02%) 948819 ( 0.00%) 151.71
frag 16859 ( 0.05%) 13327214 ( 0.06%) 790.51
ip6 50183 ( 0.16%) 9225776 ( 0.04%) 183.84
tcp6 16640 ( 0.05%) 2901913 ( 0.01%) 174.39
http(s) 1196 ( 0.00%) 1267364 ( 0.01%) 1059.67
http(c) 4273 ( 0.01%) 414210 ( 0.00%) 96.94
smtp 409 ( 0.00%) 158304 ( 0.00%) 387.05
ftp 2718 ( 0.01%) 279354 ( 0.00%) 102.78
imap 768 ( 0.00%) 81301 ( 0.00%) 105.86
ssh 3384 ( 0.01%) 310648 ( 0.00%) 91.80
dns 96 ( 0.00%) 23167 ( 0.00%) 241.32
bgp 112 ( 0.00%) 16590 ( 0.00%) 148.12
other 3684 ( 0.01%) 350975 ( 0.00%) 95.27
udp6 27404 ( 0.08%) 5524450 ( 0.03%) 201.59
dns 27190 ( 0.08%) 5490812 ( 0.03%) 201.94
other 214 ( 0.00%) 33638 ( 0.00%) 157.19
icmp6 6040 ( 0.02%) 734160 ( 0.00%) 121.55
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 69 ( 0.00%) 61173 ( 0.00%) 886.57
tcpdump file: 201004141015.dump.gz (787.33 MB)