Traffic Trace Info
DumpFile: 201004142015.dump
FileSize: 2403.25MB
Id: 201004142015
StartTime: Wed Apr 14 20:15:01 2010
EndTime: Wed Apr 14 20:30:01 2010
TotalTime: 900.12 seconds
TotalCapSize: 1885.63MB CapLen: 96 bytes
# of packets: 33920659 (21164.72MB)
AvgRate: 197.28Mbps stddev:26.14M
IP flow (unique src/dst pair) Information
# of flows: 1250606 (avg. 27.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.7% 1.7% 1.6% 1.1% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 693246
Top 10 bandwidth usage (bytes/total in %):
13.7% 8.6% 8.1% 5.9% 4.8% 4.1% 4.1% 3.2% 2.4% 2.4%
# of IPv6 addresses: 1064
Top 10 bandwidth usage (bytes/total in %):
21.2% 8.6% 5.8% 5.1% 4.9% 4.8% 4.6% 4.6% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004142015.pktlen.png)
detailed numbers
[ 32- 63]: 5446833
[ 64- 127]: 9655311
[ 128- 255]: 2621983
[ 256- 511]: 1853274
[ 512- 1023]: 867028
[ 1024- 2047]: 13476230
Protocol Breakdown
![[protocol breakdown chart]](201004142015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33920659 (100.00%) 22192813587 (100.00%) 654.26
ip 33861879 ( 99.83%) 22182547188 ( 99.95%) 655.09
tcp 21633153 ( 63.78%) 16253338976 ( 73.24%) 751.32
http(s) 9560736 ( 28.19%) 13194670521 ( 59.45%) 1380.09
http(c) 6125127 ( 18.06%) 644932381 ( 2.91%) 105.29
squid 302378 ( 0.89%) 112321132 ( 0.51%) 371.46
smtp 488204 ( 1.44%) 106964047 ( 0.48%) 219.10
ftp 22842 ( 0.07%) 2153752 ( 0.01%) 94.29
pop3 17241 ( 0.05%) 11709404 ( 0.05%) 679.16
imap 3030 ( 0.01%) 872768 ( 0.00%) 288.04
telnet 374 ( 0.00%) 28988 ( 0.00%) 77.51
ssh 1352936 ( 3.99%) 205816996 ( 0.93%) 152.13
dns 55186 ( 0.16%) 3774991 ( 0.02%) 68.40
bgp 188 ( 0.00%) 81464 ( 0.00%) 433.32
napster 86 ( 0.00%) 9170 ( 0.00%) 106.63
realaud 19 ( 0.00%) 2624 ( 0.00%) 138.11
rtsp 45804 ( 0.14%) 3048375 ( 0.01%) 66.55
icecast 44814 ( 0.13%) 24034596 ( 0.11%) 536.32
hotline 92 ( 0.00%) 7441 ( 0.00%) 80.88
other 3614079 ( 10.65%) 1942909306 ( 8.75%) 537.59
udp 8153369 ( 24.04%) 3954800524 ( 17.82%) 485.05
dns 831599 ( 2.45%) 140091846 ( 0.63%) 168.46
realaud 11217 ( 0.03%) 10883179 ( 0.05%) 970.24
halflif 59 ( 0.00%) 6213 ( 0.00%) 105.31
starcra 322 ( 0.00%) 32538 ( 0.00%) 101.05
everque 553 ( 0.00%) 99324 ( 0.00%) 179.61
unreal 115 ( 0.00%) 17681 ( 0.00%) 153.75
quake 82 ( 0.00%) 10658 ( 0.00%) 129.98
cuseeme 8 ( 0.00%) 796 ( 0.00%) 99.50
other 7309067 ( 21.55%) 3803492463 ( 17.14%) 520.38
icmp 962820 ( 2.84%) 160317205 ( 0.72%) 166.51
ipip 311 ( 0.00%) 37492 ( 0.00%) 120.55
ipsec 433 ( 0.00%) 81062 ( 0.00%) 187.21
ip6 3082601 ( 9.09%) 1809755490 ( 8.15%) 587.09
other 29192 ( 0.09%) 4216439 ( 0.02%) 144.44
frag 1706 ( 0.01%) 1706490 ( 0.01%) 1000.29
ip6 58780 ( 0.17%) 10266399 ( 0.05%) 174.66
tcp6 17001 ( 0.05%) 2458498 ( 0.01%) 144.61
http(s) 182 ( 0.00%) 150084 ( 0.00%) 824.64
http(c) 4685 ( 0.01%) 428678 ( 0.00%) 91.50
smtp 564 ( 0.00%) 247346 ( 0.00%) 438.56
ftp 2607 ( 0.01%) 269781 ( 0.00%) 103.48
imap 363 ( 0.00%) 42001 ( 0.00%) 115.71
ssh 3604 ( 0.01%) 461556 ( 0.00%) 128.07
dns 180 ( 0.00%) 77100 ( 0.00%) 428.33
bgp 117 ( 0.00%) 18546 ( 0.00%) 158.51
other 4699 ( 0.01%) 763406 ( 0.00%) 162.46
udp6 35100 ( 0.10%) 6958002 ( 0.03%) 198.23
dns 34122 ( 0.10%) 6826517 ( 0.03%) 200.06
other 978 ( 0.00%) 131485 ( 0.00%) 134.44
icmp6 6601 ( 0.02%) 808516 ( 0.00%) 122.48
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 47 ( 0.00%) 37167 ( 0.00%) 790.79
tcpdump file: 201004142015.dump.gz (886.56 MB)