Traffic Trace Info
DumpFile: 201004141915.dump
FileSize: 2194.62MB
Id: 201004141915
StartTime: Wed Apr 14 19:15:01 2010
EndTime: Wed Apr 14 19:30:01 2010
TotalTime: 900.17 seconds
TotalCapSize: 1718.25MB CapLen: 96 bytes
# of packets: 31200022 (19271.91MB)
AvgRate: 179.54Mbps stddev:16.29M
IP flow (unique src/dst pair) Information
# of flows: 1322176 (avg. 23.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.1% 1.1% 0.9% 0.9% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 767365
Top 10 bandwidth usage (bytes/total in %):
13.1% 9.0% 6.0% 5.4% 4.8% 4.1% 4.1% 4.1% 2.3% 2.3%
# of IPv6 addresses: 1025
Top 10 bandwidth usage (bytes/total in %):
21.4% 9.3% 9.0% 5.8% 4.8% 4.7% 4.6% 4.2% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141915.pktlen.png)
detailed numbers
[ 32- 63]: 5830622
[ 64- 127]: 8222396
[ 128- 255]: 2172800
[ 256- 511]: 1891421
[ 512- 1023]: 847785
[ 1024- 2047]: 12234998
Protocol Breakdown
![[protocol breakdown chart]](201004141915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31200022 (100.00%) 20208064245 (100.00%) 647.69
ip 31144273 ( 99.82%) 20197837594 ( 99.95%) 648.52
tcp 19474391 ( 62.42%) 14479247925 ( 71.65%) 743.50
http(s) 8823385 ( 28.28%) 11931937857 ( 59.05%) 1352.31
http(c) 6051157 ( 19.39%) 779600023 ( 3.86%) 128.83
squid 301349 ( 0.97%) 104212261 ( 0.52%) 345.82
smtp 389441 ( 1.25%) 116737579 ( 0.58%) 299.76
ftp 46800 ( 0.15%) 22138195 ( 0.11%) 473.04
pop3 16014 ( 0.05%) 8411385 ( 0.04%) 525.25
imap 3019 ( 0.01%) 957414 ( 0.00%) 317.13
telnet 8857 ( 0.03%) 5934505 ( 0.03%) 670.04
ssh 161925 ( 0.52%) 18683209 ( 0.09%) 115.38
dns 58053 ( 0.19%) 3983348 ( 0.02%) 68.62
bgp 382 ( 0.00%) 234140 ( 0.00%) 612.93
napster 43 ( 0.00%) 3598 ( 0.00%) 83.67
realaud 46 ( 0.00%) 3958 ( 0.00%) 86.04
rtsp 76259 ( 0.24%) 5173922 ( 0.03%) 67.85
icecast 13850 ( 0.04%) 1491368 ( 0.01%) 107.68
hotline 5 ( 0.00%) 346 ( 0.00%) 69.20
other 3523803 ( 11.29%) 1479744637 ( 7.32%) 419.93
udp 7694492 ( 24.66%) 3736187738 ( 18.49%) 485.57
dns 734818 ( 2.36%) 123714279 ( 0.61%) 168.36
realaud 10524 ( 0.03%) 8377175 ( 0.04%) 796.01
halflif 55 ( 0.00%) 6836 ( 0.00%) 124.29
starcra 270 ( 0.00%) 29352 ( 0.00%) 108.71
everque 689 ( 0.00%) 124559 ( 0.00%) 180.78
unreal 138 ( 0.00%) 22627 ( 0.00%) 163.96
quake 239 ( 0.00%) 24822 ( 0.00%) 103.86
cuseeme 22 ( 0.00%) 1900 ( 0.00%) 86.36
other 6947433 ( 22.27%) 3603730159 ( 17.83%) 518.71
icmp 970757 ( 3.11%) 124156477 ( 0.61%) 127.90
ipip 320 ( 0.00%) 38788 ( 0.00%) 121.21
ipsec 601 ( 0.00%) 145974 ( 0.00%) 242.89
ip6 2966369 ( 9.51%) 1827426144 ( 9.04%) 616.05
other 37343 ( 0.12%) 30634548 ( 0.15%) 820.36
frag 1506 ( 0.00%) 1515976 ( 0.01%) 1006.62
ip6 55749 ( 0.18%) 10226651 ( 0.05%) 183.44
tcp6 16441 ( 0.05%) 2374329 ( 0.01%) 144.42
http(s) 245 ( 0.00%) 217117 ( 0.00%) 886.19
http(c) 4452 ( 0.01%) 404651 ( 0.00%) 90.89
smtp 293 ( 0.00%) 79407 ( 0.00%) 271.01
ftp 2657 ( 0.01%) 279924 ( 0.00%) 105.35
imap 349 ( 0.00%) 41010 ( 0.00%) 117.51
ssh 3409 ( 0.01%) 378006 ( 0.00%) 110.88
dns 194 ( 0.00%) 57228 ( 0.00%) 294.99
bgp 104 ( 0.00%) 14053 ( 0.00%) 135.12
other 4738 ( 0.02%) 902933 ( 0.00%) 190.57
udp6 32403 ( 0.10%) 6896146 ( 0.03%) 212.82
dns 31546 ( 0.10%) 6790775 ( 0.03%) 215.27
other 857 ( 0.00%) 105371 ( 0.00%) 122.95
icmp6 6808 ( 0.02%) 895685 ( 0.00%) 131.56
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 66 ( 0.00%) 56275 ( 0.00%) 852.65
tcpdump file: 201004141915.dump.gz (801.19 MB)