Traffic Trace Info
DumpFile: 201004141530.dump
FileSize: 2720.92MB
Id: 201004141530
StartTime: Wed Apr 14 15:30:01 2010
EndTime: Wed Apr 14 15:45:00 2010
TotalTime: 899.38 seconds
TotalCapSize: -1969.15MB CapLen: 96 bytes
# of packets: 38932404 (24049.90MB)
AvgRate: 224.31Mbps stddev:18.62M
IP flow (unique src/dst pair) Information
# of flows: 1020507 (avg. 38.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.2% 1.7% 1.6% 0.9% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 549149
Top 10 bandwidth usage (bytes/total in %):
14.5% 8.8% 5.2% 4.6% 4.0% 3.6% 3.5% 3.3% 2.9% 2.5%
# of IPv6 addresses: 1129
Top 10 bandwidth usage (bytes/total in %):
42.3% 42.2% 11.5% 5.9% 4.1% 3.1% 2.9% 2.7% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141530.pktlen.png)
detailed numbers
[ 32- 63]: 6359850
[ 64- 127]: 10235984
[ 128- 255]: 3010651
[ 256- 511]: 2394049
[ 512- 1023]: 2026625
[ 1024- 2047]: 14905245
Protocol Breakdown
![[protocol breakdown chart]](201004141530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38932404 (100.00%) 25218146751 (100.00%) 647.74
ip 38868672 ( 99.84%) 25199061933 ( 99.92%) 648.31
tcp 23695340 ( 60.86%) 17160025223 ( 68.05%) 724.19
http(s) 9951685 ( 25.56%) 13388441550 ( 53.09%) 1345.34
http(c) 7699859 ( 19.78%) 942756724 ( 3.74%) 122.44
squid 276341 ( 0.71%) 82517985 ( 0.33%) 298.61
smtp 356023 ( 0.91%) 87639474 ( 0.35%) 246.16
ftp 27801 ( 0.07%) 9832640 ( 0.04%) 353.68
pop3 28575 ( 0.07%) 22389612 ( 0.09%) 783.54
imap 3406 ( 0.01%) 935479 ( 0.00%) 274.66
telnet 500 ( 0.00%) 37882 ( 0.00%) 75.76
ssh 586303 ( 1.51%) 102654155 ( 0.41%) 175.09
dns 57972 ( 0.15%) 7478431 ( 0.03%) 129.00
bgp 213 ( 0.00%) 101864 ( 0.00%) 478.23
napster 1134 ( 0.00%) 587006 ( 0.00%) 517.64
realaud 31 ( 0.00%) 8996 ( 0.00%) 290.19
rtsp 179316 ( 0.46%) 153642588 ( 0.61%) 856.83
icecast 11989 ( 0.03%) 6117202 ( 0.02%) 510.23
hotline 17 ( 0.00%) 2129 ( 0.00%) 125.24
other 4514166 ( 11.59%) 2354880966 ( 9.34%) 521.66
udp 11004160 ( 28.26%) 5712822833 ( 22.65%) 519.15
dns 802173 ( 2.06%) 135274366 ( 0.54%) 168.63
realaud 29 ( 0.00%) 4052 ( 0.00%) 139.72
halflif 46 ( 0.00%) 6793 ( 0.00%) 147.67
starcra 19280 ( 0.05%) 17767394 ( 0.07%) 921.55
everque 710 ( 0.00%) 141061 ( 0.00%) 198.68
unreal 96 ( 0.00%) 19173 ( 0.00%) 199.72
quake 94 ( 0.00%) 10688 ( 0.00%) 113.70
cuseeme 6 ( 0.00%) 878 ( 0.00%) 146.33
other 10179167 ( 26.15%) 5558902686 ( 22.04%) 546.11
icmp 548300 ( 1.41%) 71371133 ( 0.28%) 130.17
ipip 362 ( 0.00%) 44744 ( 0.00%) 123.60
ipsec 1274 ( 0.00%) 413436 ( 0.00%) 324.52
ip6 3534943 ( 9.08%) 2242284097 ( 8.89%) 634.32
other 84293 ( 0.22%) 12100467 ( 0.05%) 143.55
frag 9301 ( 0.02%) 7628841 ( 0.03%) 820.22
ip6 63732 ( 0.16%) 19084818 ( 0.08%) 299.45
tcp6 22948 ( 0.06%) 10926036 ( 0.04%) 476.12
http(s) 983 ( 0.00%) 1180519 ( 0.00%) 1200.93
http(c) 4354 ( 0.01%) 398872 ( 0.00%) 91.61
smtp 209 ( 0.00%) 64663 ( 0.00%) 309.39
ftp 2677 ( 0.01%) 277374 ( 0.00%) 103.61
imap 377 ( 0.00%) 41843 ( 0.00%) 110.99
ssh 3933 ( 0.01%) 422538 ( 0.00%) 107.43
dns 233 ( 0.00%) 76429 ( 0.00%) 328.02
bgp 117 ( 0.00%) 15593 ( 0.00%) 133.27
other 10065 ( 0.03%) 8448205 ( 0.03%) 839.36
udp6 34279 ( 0.09%) 7289184 ( 0.03%) 212.64
dns 34019 ( 0.09%) 7253199 ( 0.03%) 213.21
other 260 ( 0.00%) 35985 ( 0.00%) 138.40
icmp6 6371 ( 0.02%) 773841 ( 0.00%) 121.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 104 ( 0.00%) 91677 ( 0.00%) 881.51
tcpdump file: 201004141530.dump.gz (979.33 MB)