Traffic Trace Info
DumpFile: 201004141815.dump
FileSize: 2526.55MB
Id: 201004141815
StartTime: Wed Apr 14 18:15:01 2010
EndTime: Wed Apr 14 18:30:00 2010
TotalTime: 899.47 seconds
TotalCapSize: 1981.94MB CapLen: 96 bytes
# of packets: 35690402 (22867.70MB)
AvgRate: 213.28Mbps stddev:18.43M
IP flow (unique src/dst pair) Information
# of flows: 1407063 (avg. 25.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.4% 1.4% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 779306
Top 10 bandwidth usage (bytes/total in %):
14.9% 8.6% 5.5% 4.8% 4.6% 4.1% 3.9% 2.4% 2.2% 2.1%
# of IPv6 addresses: 1175
Top 10 bandwidth usage (bytes/total in %):
31.2% 31.2% 15.0% 6.4% 4.1% 4.1% 4.1% 4.0% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141815.pktlen.png)
detailed numbers
[ 32- 63]: 6101780
[ 64- 127]: 9538847
[ 128- 255]: 2716619
[ 256- 511]: 1888796
[ 512- 1023]: 763042
[ 1024- 2047]: 14681318
Protocol Breakdown
![[protocol breakdown chart]](201004141815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35690402 (100.00%) 23978521476 (100.00%) 671.85
ip 35630177 ( 99.83%) 23963871667 ( 99.94%) 672.57
tcp 22816101 ( 63.93%) 17512166440 ( 73.03%) 767.54
http(s) 9602302 ( 26.90%) 13045574327 ( 54.41%) 1358.59
http(c) 7099837 ( 19.89%) 777582396 ( 3.24%) 109.52
squid 314074 ( 0.88%) 105549339 ( 0.44%) 336.07
smtp 424157 ( 1.19%) 140417393 ( 0.59%) 331.05
ftp 42104 ( 0.12%) 4601153 ( 0.02%) 109.28
pop3 22500 ( 0.06%) 12958795 ( 0.05%) 575.95
imap 6503 ( 0.02%) 3361853 ( 0.01%) 516.97
telnet 564 ( 0.00%) 94772 ( 0.00%) 168.04
ssh 124515 ( 0.35%) 23246758 ( 0.10%) 186.70
dns 59342 ( 0.17%) 6548217 ( 0.03%) 110.35
bgp 188 ( 0.00%) 73999 ( 0.00%) 393.61
napster 21 ( 0.00%) 2861 ( 0.00%) 136.24
realaud 36 ( 0.00%) 4197 ( 0.00%) 116.58
rtsp 177260 ( 0.50%) 68288084 ( 0.28%) 385.24
icecast 18348 ( 0.05%) 3854632 ( 0.02%) 210.08
hotline 7 ( 0.00%) 434 ( 0.00%) 62.00
other 4924336 ( 13.80%) 3320006810 ( 13.85%) 674.20
udp 8538180 ( 23.92%) 4255214291 ( 17.75%) 498.37
dns 793246 ( 2.22%) 134361541 ( 0.56%) 169.38
realaud 20 ( 0.00%) 2478 ( 0.00%) 123.90
halflif 48 ( 0.00%) 6808 ( 0.00%) 141.83
starcra 374 ( 0.00%) 44110 ( 0.00%) 117.94
everque 629 ( 0.00%) 111698 ( 0.00%) 177.58
unreal 107 ( 0.00%) 15405 ( 0.00%) 143.97
quake 51 ( 0.00%) 5327 ( 0.00%) 104.45
cuseeme 6 ( 0.00%) 812 ( 0.00%) 135.33
other 7743118 ( 21.70%) 4120355213 ( 17.18%) 532.13
icmp 966477 ( 2.71%) 124007668 ( 0.52%) 128.31
ipip 328 ( 0.00%) 41066 ( 0.00%) 125.20
ipsec 11970 ( 0.03%) 6643116 ( 0.03%) 554.98
ip6 3288598 ( 9.21%) 2063690333 ( 8.61%) 627.53
other 8523 ( 0.02%) 2108753 ( 0.01%) 247.42
frag 4571 ( 0.01%) 5101177 ( 0.02%) 1115.99
ip6 60223 ( 0.17%) 14649689 ( 0.06%) 243.26
tcp6 21176 ( 0.06%) 7117478 ( 0.03%) 336.11
http(s) 3344 ( 0.01%) 4619937 ( 0.02%) 1381.56
http(c) 5697 ( 0.02%) 495241 ( 0.00%) 86.93
smtp 373 ( 0.00%) 150565 ( 0.00%) 403.66
ftp 2612 ( 0.01%) 270256 ( 0.00%) 103.47
imap 435 ( 0.00%) 50421 ( 0.00%) 115.91
ssh 3262 ( 0.01%) 277416 ( 0.00%) 85.04
dns 195 ( 0.00%) 69214 ( 0.00%) 354.94
bgp 116 ( 0.00%) 16165 ( 0.00%) 139.35
other 5142 ( 0.01%) 1168263 ( 0.00%) 227.20
udp6 32449 ( 0.09%) 6670514 ( 0.03%) 205.57
dns 31536 ( 0.09%) 6557446 ( 0.03%) 207.94
unreal 1 ( 0.00%) 111 ( 0.00%) 111.00
other 912 ( 0.00%) 112957 ( 0.00%) 123.86
icmp6 6485 ( 0.02%) 786726 ( 0.00%) 121.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 82 ( 0.00%) 70755 ( 0.00%) 862.87
tcpdump file: 201004141815.dump.gz (909.70 MB)