Traffic Trace Info
DumpFile: 201004141215.dump
FileSize: 2717.30MB
Id: 201004141215
StartTime: Wed Apr 14 12:15:01 2010
EndTime: Wed Apr 14 12:30:00 2010
TotalTime: 899.69 seconds
TotalCapSize: -1955.31MB CapLen: 96 bytes
# of packets: 37787864 (24038.78MB)
AvgRate: 224.11Mbps stddev:17.89M
IP flow (unique src/dst pair) Information
# of flows: 1143042 (avg. 33.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.9% 2.1% 1.7% 1.5% 1.2% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 618251
Top 10 bandwidth usage (bytes/total in %):
22.0% 21.4% 12.7% 8.3% 3.9% 2.9% 2.4% 2.3% 2.1% 2.1%
# of IPv6 addresses: 1024
Top 10 bandwidth usage (bytes/total in %):
70.6% 69.6% 7.1% 2.4% 2.4% 2.3% 1.9% 1.6% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141215.pktlen.png)
detailed numbers
[ 32- 63]: 5670049
[ 64- 127]: 11043456
[ 128- 255]: 2763684
[ 256- 511]: 2009766
[ 512- 1023]: 1090715
[ 1024- 2047]: 15210194
Protocol Breakdown
![[protocol breakdown chart]](201004141215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37787864 (100.00%) 25206483313 (100.00%) 667.05
ip 37719437 ( 99.82%) 25175775445 ( 99.88%) 667.45
tcp 24593635 ( 65.08%) 18398673919 ( 72.99%) 748.11
http(s) 7117578 ( 18.84%) 9344759315 ( 37.07%) 1312.91
http(c) 6127473 ( 16.22%) 954698605 ( 3.79%) 155.81
squid 249011 ( 0.66%) 70398431 ( 0.28%) 282.71
smtp 304420 ( 0.81%) 81754322 ( 0.32%) 268.56
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 21923 ( 0.06%) 3799993 ( 0.02%) 173.33
pop3 19691 ( 0.05%) 10482650 ( 0.04%) 532.36
imap 3739 ( 0.01%) 867375 ( 0.00%) 231.98
telnet 762 ( 0.00%) 65113 ( 0.00%) 85.45
ssh 659967 ( 1.75%) 100621351 ( 0.40%) 152.46
dns 54813 ( 0.15%) 3749125 ( 0.01%) 68.40
bgp 181 ( 0.00%) 74127 ( 0.00%) 409.54
napster 103 ( 0.00%) 10397 ( 0.00%) 100.94
realaud 16 ( 0.00%) 1701 ( 0.00%) 106.31
rtsp 100349 ( 0.27%) 59281506 ( 0.24%) 590.75
icecast 47169 ( 0.12%) 37230054 ( 0.15%) 789.29
other 9886435 ( 26.16%) 7730879550 ( 30.67%) 781.97
udp 8521667 ( 22.55%) 4334621249 ( 17.20%) 508.66
dns 687370 ( 1.82%) 117278206 ( 0.47%) 170.62
realaud 19 ( 0.00%) 2157 ( 0.00%) 113.53
halflif 485 ( 0.00%) 41097 ( 0.00%) 84.74
starcra 233 ( 0.00%) 27327 ( 0.00%) 117.28
everque 662 ( 0.00%) 128325 ( 0.00%) 193.84
unreal 114 ( 0.00%) 18639 ( 0.00%) 163.50
quake 23516 ( 0.06%) 20110609 ( 0.08%) 855.19
cuseeme 3 ( 0.00%) 260 ( 0.00%) 86.67
other 7808706 ( 20.66%) 4196736403 ( 16.65%) 537.44
icmp 690400 ( 1.83%) 73808382 ( 0.29%) 106.91
ipip 344 ( 0.00%) 44250 ( 0.00%) 128.63
ipsec 2634 ( 0.01%) 1018284 ( 0.00%) 386.59
ip6 3819732 ( 10.11%) 2356441628 ( 9.35%) 616.91
other 91025 ( 0.24%) 11167733 ( 0.04%) 122.69
frag 2480 ( 0.01%) 2388715 ( 0.01%) 963.19
ip6 68427 ( 0.18%) 30707868 ( 0.12%) 448.77
tcp6 32988 ( 0.09%) 24030205 ( 0.10%) 728.45
http(s) 316 ( 0.00%) 359223 ( 0.00%) 1136.78
http(c) 4433 ( 0.01%) 404521 ( 0.00%) 91.25
smtp 113 ( 0.00%) 52165 ( 0.00%) 461.64
ftp 2771 ( 0.01%) 283811 ( 0.00%) 102.42
imap 377 ( 0.00%) 44062 ( 0.00%) 116.88
ssh 3255 ( 0.01%) 276874 ( 0.00%) 85.06
dns 143 ( 0.00%) 36945 ( 0.00%) 258.36
bgp 115 ( 0.00%) 15289 ( 0.00%) 132.95
other 21465 ( 0.06%) 22557315 ( 0.09%) 1050.89
udp6 28669 ( 0.08%) 5824039 ( 0.02%) 203.15
dns 28480 ( 0.08%) 5794994 ( 0.02%) 203.48
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
other 188 ( 0.00%) 28938 ( 0.00%) 153.93
icmp6 6675 ( 0.02%) 796700 ( 0.00%) 119.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 65 ( 0.00%) 52844 ( 0.00%) 812.98
tcpdump file: 201004141215.dump.gz (945.71 MB)