Traffic Trace Info
DumpFile: 201004141715.dump
FileSize: 2703.82MB
Id: 201004141715
StartTime: Wed Apr 14 17:15:01 2010
EndTime: Wed Apr 14 17:30:01 2010
TotalTime: 900.16 seconds
TotalCapSize: -1976.99MB CapLen: 96 bytes
# of packets: 38325295 (25410.06MB)
AvgRate: 236.82Mbps stddev:16.84M
IP flow (unique src/dst pair) Information
# of flows: 1240401 (avg. 30.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.1% 1.5% 1.2% 1.0% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 689382
Top 10 bandwidth usage (bytes/total in %):
14.7% 8.6% 7.6% 5.4% 4.4% 4.3% 3.9% 3.9% 3.7% 2.8%
# of IPv6 addresses: 1141
Top 10 bandwidth usage (bytes/total in %):
19.1% 10.4% 5.7% 5.7% 5.2% 5.1% 4.4% 4.3% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141715.pktlen.png)
detailed numbers
[ 32- 63]: 6095339
[ 64- 127]: 9720904
[ 128- 255]: 2869386
[ 256- 511]: 2056966
[ 512- 1023]: 1281929
[ 1024- 2047]: 16300771
Protocol Breakdown
![[protocol breakdown chart]](201004141715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38325295 (100.00%) 26644377924 (100.00%) 695.22
ip 38266381 ( 99.85%) 26632913251 ( 99.96%) 695.99
tcp 24262991 ( 63.31%) 19066361940 ( 71.56%) 785.82
http(s) 11549764 ( 30.14%) 15630778009 ( 58.66%) 1353.34
http(c) 7772879 ( 20.28%) 962651646 ( 3.61%) 123.85
squid 313987 ( 0.82%) 103072852 ( 0.39%) 328.27
smtp 435744 ( 1.14%) 170828470 ( 0.64%) 392.04
nntp 3 ( 0.00%) 184 ( 0.00%) 61.33
ftp 23443 ( 0.06%) 8559297 ( 0.03%) 365.11
pop3 23926 ( 0.06%) 14878242 ( 0.06%) 621.84
imap 3474 ( 0.01%) 752458 ( 0.00%) 216.60
telnet 1593 ( 0.00%) 107390 ( 0.00%) 67.41
ssh 223745 ( 0.58%) 189369131 ( 0.71%) 846.36
dns 55559 ( 0.14%) 3838774 ( 0.01%) 69.09
bgp 181 ( 0.00%) 68193 ( 0.00%) 376.76
napster 6 ( 0.00%) 392 ( 0.00%) 65.33
realaud 26 ( 0.00%) 2421 ( 0.00%) 93.12
rtsp 262808 ( 0.69%) 182725212 ( 0.69%) 695.28
icecast 5216 ( 0.01%) 352684 ( 0.00%) 67.62
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3590632 ( 9.37%) 1798376285 ( 6.75%) 500.85
udp 9803106 ( 25.58%) 5135534368 ( 19.27%) 523.87
dns 981042 ( 2.56%) 185086855 ( 0.69%) 188.66
realaud 36 ( 0.00%) 4393 ( 0.00%) 122.03
halflif 87 ( 0.00%) 9448 ( 0.00%) 108.60
starcra 411 ( 0.00%) 53127 ( 0.00%) 129.26
everque 666 ( 0.00%) 124628 ( 0.00%) 187.13
unreal 121 ( 0.00%) 17761 ( 0.00%) 146.79
quake 82 ( 0.00%) 9389 ( 0.00%) 114.50
cuseeme 10 ( 0.00%) 911 ( 0.00%) 91.10
other 8820241 ( 23.01%) 4950042130 ( 18.58%) 561.21
icmp 620669 ( 1.62%) 81810776 ( 0.31%) 131.81
ipip 367 ( 0.00%) 44972 ( 0.00%) 122.54
ipsec 1599 ( 0.00%) 561450 ( 0.00%) 351.13
ip6 3508070 ( 9.15%) 2296796746 ( 8.62%) 654.72
other 69579 ( 0.18%) 51802999 ( 0.19%) 744.52
frag 1898 ( 0.00%) 1892894 ( 0.01%) 997.31
ip6 58914 ( 0.15%) 11464673 ( 0.04%) 194.60
tcp6 17952 ( 0.05%) 3278589 ( 0.01%) 182.63
http(s) 846 ( 0.00%) 1096794 ( 0.00%) 1296.45
http(c) 4374 ( 0.01%) 419777 ( 0.00%) 95.97
smtp 239 ( 0.00%) 75004 ( 0.00%) 313.82
ftp 2621 ( 0.01%) 269965 ( 0.00%) 103.00
imap 522 ( 0.00%) 58017 ( 0.00%) 111.14
ssh 5306 ( 0.01%) 935280 ( 0.00%) 176.27
dns 95 ( 0.00%) 24488 ( 0.00%) 257.77
bgp 111 ( 0.00%) 14874 ( 0.00%) 134.00
other 3838 ( 0.01%) 384390 ( 0.00%) 100.15
udp6 34381 ( 0.09%) 7324931 ( 0.03%) 213.05
dns 33907 ( 0.09%) 7248643 ( 0.03%) 213.78
other 474 ( 0.00%) 76288 ( 0.00%) 160.95
icmp6 6470 ( 0.02%) 787468 ( 0.00%) 121.71
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 80 ( 0.00%) 69469 ( 0.00%) 868.36
tcpdump file: 201004141715.dump.gz (964.30 MB)