Traffic Trace Info
DumpFile: 201004141515.dump
FileSize: 2460.72MB
Id: 201004141515
StartTime: Wed Apr 14 15:15:01 2010
EndTime: Wed Apr 14 15:30:01 2010
TotalTime: 900.05 seconds
TotalCapSize: 1923.85MB CapLen: 96 bytes
# of packets: 35183691 (21473.74MB)
AvgRate: 200.14Mbps stddev:25.57M
IP flow (unique src/dst pair) Information
# of flows: 1308949 (avg. 26.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.0% 1.8% 1.7% 1.1% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 722870
Top 10 bandwidth usage (bytes/total in %):
14.9% 9.9% 5.8% 4.9% 4.1% 4.0% 3.7% 3.6% 2.7% 2.5%
# of IPv6 addresses: 1128
Top 10 bandwidth usage (bytes/total in %):
24.3% 12.0% 6.2% 5.4% 5.4% 5.4% 5.3% 5.0% 4.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141515.pktlen.png)
detailed numbers
[ 32- 63]: 5855198
[ 64- 127]: 9402616
[ 128- 255]: 2815224
[ 256- 511]: 2252985
[ 512- 1023]: 1392403
[ 1024- 2047]: 13465265
Protocol Breakdown
![[protocol breakdown chart]](201004141515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35183691 (100.00%) 22516852380 (100.00%) 639.98
ip 35130102 ( 99.85%) 22507843974 ( 99.96%) 640.70
tcp 20742284 ( 58.95%) 14898096961 ( 66.16%) 718.25
http(s) 8801853 ( 25.02%) 11694326555 ( 51.94%) 1328.62
http(c) 6814522 ( 19.37%) 856713441 ( 3.80%) 125.72
squid 275154 ( 0.78%) 73509494 ( 0.33%) 267.16
smtp 356913 ( 1.01%) 103337665 ( 0.46%) 289.53
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 16305 ( 0.05%) 3105582 ( 0.01%) 190.47
pop3 40971 ( 0.12%) 9708788 ( 0.04%) 236.97
imap 6290 ( 0.02%) 2911342 ( 0.01%) 462.85
telnet 492 ( 0.00%) 53695 ( 0.00%) 109.14
ssh 450330 ( 1.28%) 184826372 ( 0.82%) 410.42
dns 52551 ( 0.15%) 3713303 ( 0.02%) 70.66
bgp 166 ( 0.00%) 56935 ( 0.00%) 342.98
napster 28 ( 0.00%) 2077 ( 0.00%) 74.18
realaud 34 ( 0.00%) 3923 ( 0.00%) 115.38
rtsp 125652 ( 0.36%) 113030594 ( 0.50%) 899.55
icecast 15849 ( 0.05%) 9235540 ( 0.04%) 582.72
hotline 34 ( 0.00%) 2446 ( 0.00%) 71.94
other 3785119 ( 10.76%) 1843557945 ( 8.19%) 487.05
udp 10211650 ( 29.02%) 5296749724 ( 23.52%) 518.70
dns 882396 ( 2.51%) 159403625 ( 0.71%) 180.65
rip 9 ( 0.00%) 709 ( 0.00%) 78.78
realaud 29 ( 0.00%) 6973 ( 0.00%) 240.45
halflif 548 ( 0.00%) 37254 ( 0.00%) 67.98
starcra 8108 ( 0.02%) 6986478 ( 0.03%) 861.68
everque 736 ( 0.00%) 182385 ( 0.00%) 247.81
unreal 141 ( 0.00%) 25582 ( 0.00%) 181.43
quake 56 ( 0.00%) 6192 ( 0.00%) 110.57
cuseeme 10 ( 0.00%) 1248 ( 0.00%) 124.80
other 9319084 ( 26.49%) 5129793124 ( 22.78%) 550.46
icmp 548135 ( 1.56%) 60486914 ( 0.27%) 110.35
ipip 391 ( 0.00%) 50882 ( 0.00%) 130.13
ipsec 1672 ( 0.00%) 527664 ( 0.00%) 315.59
ip6 3543547 ( 10.07%) 2240658982 ( 9.95%) 632.32
other 82423 ( 0.23%) 11272847 ( 0.05%) 136.77
frag 2494 ( 0.01%) 2466407 ( 0.01%) 988.94
ip6 53589 ( 0.15%) 9008406 ( 0.04%) 168.10
tcp6 14274 ( 0.04%) 1526546 ( 0.01%) 106.95
http(s) 151 ( 0.00%) 88462 ( 0.00%) 585.84
http(c) 3661 ( 0.01%) 334036 ( 0.00%) 91.24
smtp 202 ( 0.00%) 92897 ( 0.00%) 459.89
ftp 2701 ( 0.01%) 280616 ( 0.00%) 103.89
imap 412 ( 0.00%) 48684 ( 0.00%) 118.17
ssh 3112 ( 0.01%) 264084 ( 0.00%) 84.86
dns 121 ( 0.00%) 30181 ( 0.00%) 249.43
bgp 110 ( 0.00%) 14155 ( 0.00%) 128.68
other 3804 ( 0.01%) 373431 ( 0.00%) 98.17
udp6 32976 ( 0.09%) 6677709 ( 0.03%) 202.50
dns 32736 ( 0.09%) 6645760 ( 0.03%) 203.01
other 240 ( 0.00%) 31949 ( 0.00%) 133.12
icmp6 6260 ( 0.02%) 757046 ( 0.00%) 120.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 49 ( 0.00%) 43025 ( 0.00%) 878.06
tcpdump file: 201004141515.dump.gz (886.44 MB)