Traffic Trace Info
DumpFile: 201004142115.dump
FileSize: 2391.32MB
Id: 201004142115
StartTime: Wed Apr 14 21:15:00 2010
EndTime: Wed Apr 14 21:30:01 2010
TotalTime: 900.43 seconds
TotalCapSize: 1871.34MB CapLen: 96 bytes
# of packets: 34076985 (21312.96MB)
AvgRate: 198.56Mbps stddev:17.06M
IP flow (unique src/dst pair) Information
# of flows: 1159001 (avg. 29.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.8% 1.7% 1.2% 0.9% 0.7% 0.5% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 642706
Top 10 bandwidth usage (bytes/total in %):
11.3% 7.2% 6.5% 6.2% 6.2% 5.6% 5.5% 2.9% 2.4% 2.3%
# of IPv6 addresses: 1048
Top 10 bandwidth usage (bytes/total in %):
23.0% 23.0% 17.7% 6.9% 5.0% 4.8% 3.9% 3.8% 3.8% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004142115.pktlen.png)
detailed numbers
[ 32- 63]: 5929863
[ 64- 127]: 9769597
[ 128- 255]: 2268860
[ 256- 511]: 1596390
[ 512- 1023]: 928232
[ 1024- 2047]: 13584043
Protocol Breakdown
![[protocol breakdown chart]](201004142115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34076985 (100.00%) 22348257171 (100.00%) 655.82
ip 34013705 ( 99.81%) 22335864872 ( 99.94%) 656.67
tcp 22788579 ( 66.87%) 17205145699 ( 76.99%) 754.99
http(s) 10348041 ( 30.37%) 14317278121 ( 64.06%) 1383.57
http(c) 6838785 ( 20.07%) 675311154 ( 3.02%) 98.75
squid 285866 ( 0.84%) 119984337 ( 0.54%) 419.72
smtp 469270 ( 1.38%) 120373629 ( 0.54%) 256.51
ftp 17126 ( 0.05%) 1940873 ( 0.01%) 113.33
pop3 27955 ( 0.08%) 26456139 ( 0.12%) 946.38
imap 9194 ( 0.03%) 7485247 ( 0.03%) 814.14
telnet 605 ( 0.00%) 45499 ( 0.00%) 75.20
ssh 1107049 ( 3.25%) 165406762 ( 0.74%) 149.41
dns 56445 ( 0.17%) 6345822 ( 0.03%) 112.42
bgp 659 ( 0.00%) 457003 ( 0.00%) 693.48
napster 10 ( 0.00%) 950 ( 0.00%) 95.00
realaud 13 ( 0.00%) 1219 ( 0.00%) 93.77
rtsp 61444 ( 0.18%) 3772987 ( 0.02%) 61.41
icecast 13032 ( 0.04%) 864924 ( 0.00%) 66.37
other 3553069 ( 10.43%) 1759420073 ( 7.87%) 495.18
udp 7819962 ( 22.95%) 3546070410 ( 15.87%) 453.46
dns 857291 ( 2.52%) 147355146 ( 0.66%) 171.88
realaud 958 ( 0.00%) 445855 ( 0.00%) 465.40
halflif 105 ( 0.00%) 18002 ( 0.00%) 171.45
starcra 277 ( 0.00%) 30408 ( 0.00%) 109.78
everque 4600 ( 0.01%) 2038940 ( 0.01%) 443.25
unreal 151 ( 0.00%) 26153 ( 0.00%) 173.20
quake 80 ( 0.00%) 9226 ( 0.00%) 115.33
cuseeme 5 ( 0.00%) 466 ( 0.00%) 93.20
other 6956097 ( 20.41%) 3395948860 ( 15.20%) 488.20
icmp 889702 ( 2.61%) 149076272 ( 0.67%) 167.56
ipip 323 ( 0.00%) 39018 ( 0.00%) 120.80
ipsec 732 ( 0.00%) 318536 ( 0.00%) 435.16
ip6 2404842 ( 7.06%) 1403452537 ( 6.28%) 583.59
other 109565 ( 0.32%) 31762400 ( 0.14%) 289.90
frag 2396 ( 0.01%) 2394088 ( 0.01%) 999.20
ip6 63280 ( 0.19%) 12392299 ( 0.06%) 195.83
tcp6 23051 ( 0.07%) 5110760 ( 0.02%) 221.72
http(s) 120 ( 0.00%) 100221 ( 0.00%) 835.17
http(c) 8341 ( 0.02%) 712961 ( 0.00%) 85.48
smtp 396 ( 0.00%) 163709 ( 0.00%) 413.41
ftp 2637 ( 0.01%) 274802 ( 0.00%) 104.21
imap 433 ( 0.00%) 48676 ( 0.00%) 112.42
ssh 3417 ( 0.01%) 306862 ( 0.00%) 89.80
dns 134 ( 0.00%) 29589 ( 0.00%) 220.81
bgp 104 ( 0.00%) 13672 ( 0.00%) 131.46
other 7469 ( 0.02%) 3460268 ( 0.02%) 463.28
udp6 33772 ( 0.10%) 6471291 ( 0.03%) 191.62
dns 33076 ( 0.10%) 6379073 ( 0.03%) 192.86
other 696 ( 0.00%) 92218 ( 0.00%) 132.50
icmp6 6393 ( 0.02%) 775223 ( 0.00%) 121.26
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34 ( 0.00%) 30945 ( 0.00%) 910.15
tcpdump file: 201004142115.dump.gz (894.74 MB)